Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134372e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3134372e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          pj1gMLhwd2F0mokXIsfy+RTDYlw60u99WwR2p4uf0NY=
Subject key identifier:   84:B4:EE:2A:02:58:84:02:0B:1B:A1:E2:92:13:E0:43:93:E5:F5:3E
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       7A455AE955A102E3EE4A650DFB4AA9FF7AF74483
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134372e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:32:00 +0000
ROA not before:           Sat 29 Jun 2024 15:27:00 +0000
ROA not after:            Sat 28 Jun 2025 15:32:00 +0000
asID:                     28572
IP address blocks:        200.192.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:45:5a:e9:55:a1:02:e3:ee:4a:65:0d:fb:4a:a9:ff:7a:f7:44:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:27:00 2024 GMT
            Not After : Jun 28 15:32:00 2025 GMT
        Subject: CN=84B4EE2A025884020B1BA1E29213E04393E5F53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:f4:e5:5f:17:13:84:51:a0:2e:49:2e:26:
                    20:23:a0:c2:78:16:e3:4a:4d:b2:0a:e7:8e:da:7d:
                    42:23:40:9e:1b:4e:c6:59:34:04:56:6d:d2:26:c9:
                    6c:87:64:7c:a7:b4:bd:d9:9e:2d:ed:cf:b8:33:54:
                    d1:6c:58:1e:d8:3e:4e:08:fa:04:88:a1:c3:d3:99:
                    d4:89:4f:60:34:13:f8:3a:d2:34:36:ad:5a:23:20:
                    3b:ca:52:50:25:28:ac:01:4a:ba:db:0c:3f:4a:45:
                    f4:8e:fc:ff:57:4b:c5:de:28:97:1d:2c:e3:fa:d5:
                    d4:9b:65:f9:35:ad:66:08:97:c1:8b:4a:21:de:25:
                    4e:1a:8a:55:48:16:00:c4:4b:a3:c7:7b:29:d1:8b:
                    05:63:70:3b:b2:c4:d9:da:f4:cf:b4:37:d3:04:62:
                    20:d2:05:83:16:ea:25:6f:2c:f0:0a:61:40:44:72:
                    90:eb:7e:3b:ce:f5:5d:ab:c5:d7:39:08:03:79:8b:
                    83:ec:73:e5:ad:2a:4f:9d:12:6a:c3:c0:52:f4:8a:
                    2f:7d:63:66:39:5f:a4:b1:53:41:38:e8:96:e5:c5:
                    db:07:70:74:ab:15:93:2a:06:90:a4:0a:e6:81:dc:
                    1e:93:7f:99:4f:08:34:79:cb:1b:b4:c9:d6:af:59:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B4:EE:2A:02:58:84:02:0B:1B:A1:E2:92:13:E0:43:93:E5:F5:3E
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134372e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0d:13:ac:ea:7d:3e:ce:f4:4d:e2:0c:86:9a:5e:75:e4:ae:
         c3:11:09:0a:93:dd:f4:27:65:6b:28:9e:13:1c:96:9d:a4:91:
         04:7b:23:4f:2a:75:f1:f0:90:02:18:31:d3:9a:8a:00:54:4b:
         4e:1e:32:9c:f9:f6:c7:ad:12:66:fe:d6:ca:08:1a:ad:31:47:
         70:b6:1d:cc:e4:e6:6f:a9:3d:9a:77:6c:8d:09:2d:37:d7:46:
         17:4b:b1:07:b6:81:6f:1c:3a:89:03:4c:fc:82:99:1c:cc:8f:
         a6:e7:08:72:ea:d2:6b:07:a8:9e:b4:23:00:52:b6:c8:59:42:
         1f:26:12:1d:b9:7c:8b:69:8b:56:39:f4:27:81:cd:2a:d3:4d:
         f9:55:b8:9c:41:0e:c0:43:e8:7e:6c:b1:ce:0f:4f:60:ef:d5:
         f4:f6:81:c5:2f:a3:28:32:1f:65:81:cd:96:3a:2d:47:98:06:
         97:04:b9:4b:03:7a:6a:c3:76:9a:42:d7:8d:16:2f:51:55:48:
         4a:e4:29:b8:57:f1:82:ee:41:6b:3d:39:b8:a6:ec:a5:0f:ca:
         5e:2b:b8:64:70:b7:e1:f6:48:2b:ad:20:19:9c:80:20:d5:85:
         49:5a:64:be:4a:77:b0:c3:06:92:6c:bf:c3:d5:28:ec:e8:87:
         52:94:78:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUekVa6VWhAuPuSmUN+0qp/3r3RIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlFQUUzOEQxNUY1ODk5RDM2MDlDNDExRUIxQTFDNkI0
MkRGQjAwOTAeFw0yNDA2MjkxNTI3MDBaFw0yNTA2MjgxNTMyMDBaMDMxMTAvBgNV
BAMTKDg0QjRFRTJBMDI1ODg0MDIwQjFCQTFFMjkyMTNFMDQzOTNFNUY1M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyPTlXxcThFGgLkkuJiAjoMJ4
FuNKTbIK547afUIjQJ4bTsZZNARWbdImyWyHZHyntL3Zni3tz7gzVNFsWB7YPk4I
+gSIocPTmdSJT2A0E/g60jQ2rVojIDvKUlAlKKwBSrrbDD9KRfSO/P9XS8XeKJcd
LOP61dSbZfk1rWYIl8GLSiHeJU4ailVIFgDES6PHeynRiwVjcDuyxNna9M+0N9ME
YiDSBYMW6iVvLPAKYUBEcpDrfjvO9V2rxdc5CAN5i4Psc+WtKk+dEmrDwFL0ii99
Y2Y5X6SxU0E46JblxdsHcHSrFZMqBpCkCuaB3B6Tf5lPCDR5yxu0ydavWQj3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhLTuKgJYhAILG6HikhPgQ5Pl9T4wHwYDVR0j
BBgwFoAUGerjjRX1iZ02CcQR6xoca0LfsAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5abWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hB
U1EvMC8xOUVBRTM4RDE1RjU4OTlEMzYwOUM0MTFFQjFBMUM2QjQyREZCMDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RUFFMzhEMTVGNTg5OUQz
NjA5QzQxMUVCMUExQzZCNDJERkIwMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOWm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAv
MzIzMDMwMmUzMTM5MzIyZTMxMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIwJMwDQYJKoZIhvcNAQELBQADggEBACwNE6zq
fT7O9E3iDIaaXnXkrsMRCQqT3fQnZWsonhMclp2kkQR7I08qdfHwkAIYMdOaigBU
S04eMpz59setEmb+1soIGq0xR3C2Hczk5m+pPZp3bI0JLTfXRhdLsQe2gW8cOokD
TPyCmRzMj6bnCHLq0msHqJ60IwBStshZQh8mEh25fItpi1Y59CeBzSrTTflVuJxB
DsBD6H5ssc4PT2Dv1fT2gcUvoygyH2WBzZY6LUeYBpcEuUsDemrDdppC140WL1FV
SErkKbhX8YLuQWs9Obim7KUPyl4ruGRwt+H2SCutIBmcgCDVhUlaZL5Kd7DDBpJs
v8PVKOzoh1KUeIs=
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:09 2024 by rpki-client on console-fra.rpki-client.org