Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134342e302f32322d3232203d3e203238353732.roa
File:                     3230302e3139322e3134342e302f32322d3232203d3e203238353732.roa (raw, json)
Hash identifier:          fIOp32hpSUQBxpVeIxdB971MifNByH7EWo1ucrkekDM=
Subject key identifier:   B3:43:1C:AF:FB:FD:11:12:88:95:66:6B:66:EE:62:E3:9B:E3:46:35
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       241D6835D3F44209B918E8570EA9EC2126A0C420
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134342e302f32322d3232203d3e203238353732.roa
Signing time:             Mon 05 Aug 2024 17:04:16 +0000
ROA not before:           Mon 05 Aug 2024 16:59:16 +0000
ROA not after:            Mon 04 Aug 2025 17:04:16 +0000
asID:                     28572
IP address blocks:        200.192.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 00:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:68:35:d3:f4:42:09:b9:18:e8:57:0e:a9:ec:21:26:a0:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Aug  5 16:59:16 2024 GMT
            Not After : Aug  4 17:04:16 2025 GMT
        Subject: CN=B3431CAFFBFD11128895666B66EE62E39BE34635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:a2:da:26:ac:80:b5:28:d6:34:d9:c4:12:
                    ab:f8:9c:f4:66:51:e3:13:b3:81:a2:14:e0:41:fa:
                    6f:ca:b2:ad:53:93:9f:95:8f:60:30:1f:87:f5:33:
                    36:ce:e2:77:73:37:71:0f:5c:f1:90:f7:82:59:31:
                    3e:de:c5:32:59:22:5f:bf:9b:eb:5a:12:8d:5e:71:
                    9d:d5:02:a8:0e:ba:fe:bb:2e:62:8a:58:92:d3:77:
                    0a:d6:ad:34:d8:b9:77:dd:dc:9f:bd:84:f3:28:ad:
                    ac:63:83:9b:ec:57:a3:a4:f4:ab:5a:76:ad:fd:26:
                    1a:1a:73:fd:f8:1b:c8:53:91:34:90:0d:f2:11:c1:
                    6d:61:05:e8:b8:74:54:71:a8:1f:08:68:c1:12:0b:
                    82:5e:d6:e3:4c:3b:cf:8c:61:70:2e:96:9e:2a:f4:
                    b4:fb:32:8f:c1:03:30:df:91:7b:98:71:5c:11:56:
                    a0:f9:f5:91:c2:65:96:59:8d:2d:64:6f:86:40:e4:
                    2f:ac:41:a5:52:78:ad:77:0e:76:38:f2:b5:62:c1:
                    21:79:b9:ff:dc:6c:0b:d6:73:7a:75:f5:61:b0:c2:
                    d2:3e:b7:3d:3b:fe:70:44:12:12:3f:10:45:55:ac:
                    25:7a:1e:e6:9f:2b:c0:31:37:0d:1c:32:cc:d0:b2:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:1C:AF:FB:FD:11:12:88:95:66:6B:66:EE:62:E3:9B:E3:46:35
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134342e302f32322d3232203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:ef:c5:1c:90:c2:f7:d9:d9:2f:17:9e:35:80:c4:fb:11:
         ac:c6:76:bd:fc:90:34:95:35:cc:04:ae:86:1f:80:26:a7:3b:
         e0:7e:08:fe:5d:33:e1:cb:a0:b9:7a:c9:4b:66:91:59:dd:f3:
         2e:00:5a:a0:ca:28:d7:a9:72:62:4d:2c:07:92:02:b9:95:f2:
         4d:f6:e6:dd:d1:b0:0c:ee:f0:93:a9:14:bd:fb:1a:2a:39:33:
         d5:62:cd:e5:92:69:77:42:7b:2d:ca:b8:f8:9f:f9:9f:47:a7:
         85:ac:bf:5d:2b:f7:e3:fa:f9:5e:e7:23:3d:38:78:d8:8e:99:
         2a:86:81:bf:3d:44:b0:aa:aa:aa:54:bb:1a:63:da:cc:9a:75:
         e8:35:e5:62:d1:af:9a:ea:b8:58:c5:d4:35:9a:25:6e:a5:e4:
         a2:34:7c:c7:80:68:28:eb:2d:45:6e:fe:16:58:1f:2d:56:c2:
         d4:61:c4:97:ef:24:ec:b8:53:d2:f2:7d:7d:14:e0:9d:10:c2:
         1d:f4:fa:2e:a9:50:26:d3:1d:f4:ed:68:35:0d:d0:d2:ac:a6:
         1d:45:d0:5b:52:47:f5:1e:50:78:93:08:f2:03:a9:bc:57:17:
         cb:45:67:82:08:e2:9d:ac:e2:b9:26:04:27:b3:af:65:db:66:
         bd:1a:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:10 2025 by rpki-client