Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          28gFCeuXzxrQEcgWgTo8FxWeqxaJaPCW5rl5eKXGvxs=
Subject key identifier:   87:83:A2:58:AB:18:AB:75:22:08:30:93:1A:28:DF:2C:D0:B5:29:57
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       599C37AAC5846E41E1E702313B2152C9EA119F57
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 15 Apr 2024 17:43:59 +0000
ROA not before:           Mon 15 Apr 2024 17:38:59 +0000
ROA not after:            Mon 14 Apr 2025 17:43:59 +0000
asID:                     11431
IP address blocks:        200.219.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9c:37:aa:c5:84:6e:41:e1:e7:02:31:3b:21:52:c9:ea:11:9f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:59 2024 GMT
            Not After : Apr 14 17:43:59 2025 GMT
        Subject: CN=3082010A0282010100C3DCA5181E3DB5D4DB54F683C54402B5767BF39AD0C9F11BB5B930AE07AE9B98B44184D46E36ECB4BE66C415A2B82F106536A1987C283D07E0D372DAC58C9D373F7658736263E1420CBF7BE2B3FF32CBF2583DBB265CF77E1CAF284771C5BEF079C7B0620CFD3FAEFB7A11836D0DF6A8E9640B43C2B323328671EFB44C24019F5A074FC4A2895C1F2E93FC22180798C7872E990AE491F3646275148BAD7FE8C1B3760199AF235530C9E2A21ADA377E268C07ED06DAE8920EC8130CC06B0C21C0D5873F4493722318B43F626FA97E2704342FEF84C760271120471194820B352613E476D33DA8D0475FA9F1AFAAA4B4E7CD18A01C4C1BCE661359BB6B25F1B8710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:a5:18:1e:3d:b5:d4:db:54:f6:83:c5:44:
                    02:b5:76:7b:f3:9a:d0:c9:f1:1b:b5:b9:30:ae:07:
                    ae:9b:98:b4:41:84:d4:6e:36:ec:b4:be:66:c4:15:
                    a2:b8:2f:10:65:36:a1:98:7c:28:3d:07:e0:d3:72:
                    da:c5:8c:9d:37:3f:76:58:73:62:63:e1:42:0c:bf:
                    7b:e2:b3:ff:32:cb:f2:58:3d:bb:26:5c:f7:7e:1c:
                    af:28:47:71:c5:be:f0:79:c7:b0:62:0c:fd:3f:ae:
                    fb:7a:11:83:6d:0d:f6:a8:e9:64:0b:43:c2:b3:23:
                    32:86:71:ef:b4:4c:24:01:9f:5a:07:4f:c4:a2:89:
                    5c:1f:2e:93:fc:22:18:07:98:c7:87:2e:99:0a:e4:
                    91:f3:64:62:75:14:8b:ad:7f:e8:c1:b3:76:01:99:
                    af:23:55:30:c9:e2:a2:1a:da:37:7e:26:8c:07:ed:
                    06:da:e8:92:0e:c8:13:0c:c0:6b:0c:21:c0:d5:87:
                    3f:44:93:72:23:18:b4:3f:62:6f:a9:7e:27:04:34:
                    2f:ef:84:c7:60:27:11:20:47:11:94:82:0b:35:26:
                    13:e4:76:d3:3d:a8:d0:47:5f:a9:f1:af:aa:a4:b4:
                    e7:cd:18:a0:1c:4c:1b:ce:66:13:59:bb:6b:25:f1:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:A2:58:AB:18:AB:75:22:08:30:93:1A:28:DF:2C:D0:B5:29:57
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:2c:6d:14:8d:14:0a:68:a2:53:26:b3:b2:1e:11:49:c8:
         e6:71:8b:54:d8:01:a3:11:fb:ee:12:43:74:cd:10:1b:e5:03:
         cb:46:83:f2:00:63:4d:e8:f6:da:87:2b:81:d2:a0:91:c1:ff:
         5c:b5:0a:d6:af:1a:b1:8b:a3:3f:5c:e5:d7:a5:1f:25:a0:ad:
         41:43:6a:2e:c4:47:67:b6:98:a5:65:b7:0f:43:21:bb:e7:12:
         14:5b:93:98:ac:74:73:34:c1:8f:ee:f7:f7:19:38:92:35:45:
         2a:e3:0c:41:9f:04:62:5e:12:e9:9d:94:5e:7b:90:b8:54:ad:
         4c:38:01:98:d9:ac:4f:48:0d:72:a7:d6:c3:a7:fd:46:ac:48:
         bf:13:d1:f0:b5:3c:1e:d9:87:93:63:dc:85:d0:77:73:2e:9d:
         ac:3b:6f:1a:1e:bb:cb:0e:8f:71:9b:6f:c0:6e:7e:16:29:2f:
         fc:95:44:03:09:33:ba:8d:d9:8b:b9:29:e1:65:3b:35:04:9b:
         5b:a1:00:5f:16:80:86:ae:c0:ed:b0:d5:23:29:ce:00:c9:ae:
         dd:c6:34:96:ea:0b:45:2e:62:da:30:4a:f6:81:95:ed:1b:d8:
         3e:28:5c:90:d5:5f:4d:35:c3:06:54:78:f4:95:e3:98:31:55:
         84:94:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:57 2025 by rpki-client