Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          udB0gvieacmhcOWYSsbO8x0kXcW5McboIN1tbGcoqO0=
Subject key identifier:   B5:F7:86:0A:EF:BD:B4:3B:F0:89:58:0E:ED:18:5B:CC:35:62:EB:92
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       40A564B903E4D6CD62C02CE98E7096B0E77BCF27
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:31:57 +0000
ROA not before:           Sat 29 Jun 2024 15:26:57 +0000
ROA not after:            Sat 28 Jun 2025 15:31:57 +0000
asID:                     28572
IP address blocks:        200.192.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a5:64:b9:03:e4:d6:cd:62:c0:2c:e9:8e:70:96:b0:e7:7b:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:26:57 2024 GMT
            Not After : Jun 28 15:31:57 2025 GMT
        Subject: CN=B5F7860AEFBDB43BF089580EED185BCC3562EB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:e2:66:38:10:9d:01:b6:66:2a:57:0c:5e:
                    49:92:38:ad:36:10:83:f4:46:ac:e6:28:2b:9c:4d:
                    4d:55:ae:9a:51:99:de:91:68:89:2e:a6:8d:48:80:
                    46:47:09:29:ce:d5:a1:34:b1:96:55:c3:fd:7d:cd:
                    23:fa:6d:b2:69:72:c7:4f:da:9e:fc:02:ea:63:3a:
                    38:a6:52:0d:a7:d9:0f:98:8c:9d:97:3b:f9:9b:53:
                    63:b9:24:fd:1e:99:21:3a:0c:2b:ab:a0:52:7f:b2:
                    91:47:4b:47:bc:e8:60:81:96:aa:53:22:0a:8b:0a:
                    2c:f1:9f:93:32:54:f7:3f:e8:c8:49:14:36:54:66:
                    27:a3:8b:bd:07:aa:de:31:34:b5:cc:ee:85:8a:be:
                    44:3e:47:4e:77:7a:09:15:dd:76:f5:fd:ce:b3:11:
                    77:8d:11:3e:01:73:ec:6d:7d:e1:3e:e9:d0:de:93:
                    af:2b:95:6d:3e:78:a3:11:ed:1a:fd:02:2a:b1:72:
                    97:bc:ee:4f:9b:73:76:7c:8e:db:80:90:5b:59:c5:
                    2c:eb:bb:76:90:81:fd:00:58:73:72:23:21:78:d0:
                    1b:ac:ba:33:ed:e1:43:a6:8b:59:5c:90:ac:15:70:
                    a4:54:cd:0d:47:d5:e5:8f:d3:b8:fd:ab:a6:57:0c:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F7:86:0A:EF:BD:B4:3B:F0:89:58:0E:ED:18:5B:CC:35:62:EB:92
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134352e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:38:a4:16:72:cf:2e:7d:ff:2c:cc:b0:6c:e8:19:fc:2e:89:
         47:47:dc:a5:6b:97:69:3e:3b:7c:6c:06:af:a5:0d:83:97:a4:
         ef:39:2c:cd:35:6f:a8:37:fa:f7:3e:72:d0:25:fb:13:66:85:
         49:4a:41:d5:5f:ae:b9:6e:d3:84:72:9b:0d:fb:28:5b:a0:91:
         f4:64:f8:0a:96:9b:a9:d2:b3:fb:f0:24:54:7d:12:65:92:75:
         6e:05:73:41:8c:ac:e3:dd:ac:a3:2f:ea:b3:21:1a:25:a7:21:
         1b:e1:57:b7:4c:45:ba:91:a9:92:05:4b:23:40:2d:e5:f5:3d:
         94:29:6f:b9:24:12:d8:f8:8e:e8:62:f9:3a:0b:f5:4e:20:fe:
         f1:d3:f6:b4:d7:9c:b2:5c:7b:e5:9a:1a:04:de:54:8b:7e:0f:
         ed:da:00:a1:06:97:fb:58:d0:72:f1:be:8a:d1:22:25:49:fe:
         df:6b:04:d4:10:54:f5:f6:cd:77:70:31:04:cd:b7:bf:e9:d0:
         db:2c:be:71:30:7b:3f:a5:d1:11:c2:ba:44:07:d5:14:f2:89:
         c2:f5:df:56:26:54:17:95:c2:1b:01:f0:d7:4a:f6:45:50:ca:
         23:8a:87:6e:61:f5:ed:35:52:0c:9e:a1:b2:dc:64:8d:9e:59:
         20:2c:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:34:03 2024 by rpki-client on console-ams.rpki-client.org