Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa (raw, json)
Hash identifier:          ZYShWa2s2Oo8494kbzybEw/Dtx3g/AYtLNm99mdou1U=
Subject key identifier:   4A:6A:D6:1E:AA:8F:F6:E8:9A:BC:74:D8:61:3E:71:62:CD:5C:B3:4B
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       42837636B797E48E1C5176981F0615D007EC9BFA
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
Signing time:             Mon 15 Apr 2024 17:43:57 +0000
ROA not before:           Mon 15 Apr 2024 17:38:57 +0000
ROA not after:            Mon 14 Apr 2025 17:43:57 +0000
asID:                     12136
IP address blocks:        200.229.248.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:83:76:36:b7:97:e4:8e:1c:51:76:98:1f:06:15:d0:07:ec:9b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Apr 15 17:38:57 2024 GMT
            Not After : Apr 14 17:43:57 2025 GMT
        Subject: CN=3082010A0282010100D9BE60B600CAAB9226D6747468E317D98709CE02A6D85526A917FBF2DCF0E556D166A6506E74C02F3DE26FAF7920E9B06EF939A916B72F7C13D28325008ACF7776B88F0D9EA53076A5776B7528F1A222133352ECE9F5FFC408F2FDE49F29A8033A144A722DDFCC1053B8EE1BB29F324A9FA0B9D9F6AC81ED202BAF43582015078FFB1B38702EFE63BFF11458B6B1B7B183C8C7ED19DC782FAFA2FDF8B1401A85CEE84D9A2BCD09AE36E8021E55ADB784BA7BAE74BEAAC59CD3FCA2C17FD645E0C6ED6CFE1F410D4D57E8606626EF36380CAEA957FCB7BF5B6EBB6C422A62565C959295D11972A853AABC02638D6F085D9224680513B15799B7B6C1C733C74F770203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:60:b6:00:ca:ab:92:26:d6:74:74:68:e3:
                    17:d9:87:09:ce:02:a6:d8:55:26:a9:17:fb:f2:dc:
                    f0:e5:56:d1:66:a6:50:6e:74:c0:2f:3d:e2:6f:af:
                    79:20:e9:b0:6e:f9:39:a9:16:b7:2f:7c:13:d2:83:
                    25:00:8a:cf:77:76:b8:8f:0d:9e:a5:30:76:a5:77:
                    6b:75:28:f1:a2:22:13:33:52:ec:e9:f5:ff:c4:08:
                    f2:fd:e4:9f:29:a8:03:3a:14:4a:72:2d:df:cc:10:
                    53:b8:ee:1b:b2:9f:32:4a:9f:a0:b9:d9:f6:ac:81:
                    ed:20:2b:af:43:58:20:15:07:8f:fb:1b:38:70:2e:
                    fe:63:bf:f1:14:58:b6:b1:b7:b1:83:c8:c7:ed:19:
                    dc:78:2f:af:a2:fd:f8:b1:40:1a:85:ce:e8:4d:9a:
                    2b:cd:09:ae:36:e8:02:1e:55:ad:b7:84:ba:7b:ae:
                    74:be:aa:c5:9c:d3:fc:a2:c1:7f:d6:45:e0:c6:ed:
                    6c:fe:1f:41:0d:4d:57:e8:60:66:26:ef:36:38:0c:
                    ae:a9:57:fc:b7:bf:5b:6e:bb:6c:42:2a:62:56:5c:
                    95:92:95:d1:19:72:a8:53:aa:bc:02:63:8d:6f:08:
                    5d:92:24:68:05:13:b1:57:99:b7:b6:c1:c7:33:c7:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:D6:1E:AA:8F:F6:E8:9A:BC:74:D8:61:3E:71:62:CD:5C:B3:4B
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:1c:31:01:48:7a:69:95:a6:23:5b:6b:c6:0a:57:9a:27:54:
         b8:2a:6e:9b:e7:88:51:01:9b:8c:40:23:f2:3a:c1:95:55:da:
         e4:c1:89:8b:85:7c:0f:e5:28:aa:f6:84:2f:6e:8d:e5:fc:7c:
         11:bd:9a:94:87:17:37:2a:4f:8b:6d:3b:1b:03:be:ba:45:4f:
         16:c0:5d:71:b8:9a:64:3b:c3:0f:c9:f9:91:fc:c5:c7:14:5a:
         df:b7:49:1d:50:c5:ff:b3:24:33:24:71:97:fa:5d:50:5e:42:
         14:23:6d:13:99:25:25:ac:af:15:3b:e4:67:d0:70:4d:5a:7c:
         a4:f7:f5:cf:1d:9b:08:51:87:e4:41:b4:22:06:cc:55:2b:e7:
         30:4b:f7:ae:b3:f4:55:64:9a:44:1f:62:dd:26:6a:9d:9a:46:
         13:5d:43:18:d5:8f:1e:9b:bf:17:b0:38:f9:74:15:83:b6:ee:
         c3:84:cb:28:08:c7:22:d4:69:d4:cd:a1:27:25:18:8f:b1:a9:
         cf:6d:f0:67:6e:79:a0:d8:2a:61:94:9c:a9:33:77:85:1c:56:
         d4:91:9f:a4:9f:f4:2c:77:bc:7c:c8:d4:fa:ab:0c:7c:c5:7e:
         b4:56:74:e2:96:38:16:bd:6b:9a:bd:cd:a7:7e:ea:21:f0:f5:
         33:3b:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:48 2024 by rpki-client on console-ams.rpki-client.org