Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134382e302f32332d3233203d3e203238353732.roa
File:                     3230302e3139322e3134382e302f32332d3233203d3e203238353732.roa (raw, json)
Hash identifier:          BKG+BsxWKggxXE0YA0wkMMGaD8gqsGKpUFR0LoSkylI=
Subject key identifier:   E3:97:0F:C5:BF:24:35:AF:0C:BA:5D:27:96:86:5C:FE:F9:F3:58:8E
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       6F8E5A5F2875589C78DFDA1020BC9C2B35E6D70F
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134382e302f32332d3233203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:32:03 +0000
ROA not before:           Sat 29 Jun 2024 15:27:03 +0000
ROA not after:            Sat 28 Jun 2025 15:32:03 +0000
asID:                     28572
IP address blocks:        200.192.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8e:5a:5f:28:75:58:9c:78:df:da:10:20:bc:9c:2b:35:e6:d7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:27:03 2024 GMT
            Not After : Jun 28 15:32:03 2025 GMT
        Subject: CN=E3970FC5BF2435AF0CBA5D2796865CFEF9F3588E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f1:0f:98:71:17:fe:a0:7a:d4:ce:01:9a:8b:
                    0f:2e:74:23:02:f7:2c:5b:8d:9f:65:8c:89:a2:04:
                    e2:09:79:44:90:ba:ea:09:f8:23:10:ca:2b:0b:79:
                    27:f9:39:fd:60:5b:54:78:86:e9:ee:77:f9:28:b1:
                    f5:49:6b:f0:33:7f:08:6d:58:86:9e:55:7f:c4:cf:
                    61:d3:50:e2:1c:b8:95:82:52:64:99:9a:ee:81:b9:
                    3e:f7:2d:d9:84:f8:c2:8c:46:0d:c3:80:8f:4e:5c:
                    09:1a:bc:69:34:e5:71:15:a6:33:22:e4:8a:97:c4:
                    48:c8:86:2f:dd:e4:5a:ee:55:c6:5f:ab:63:9d:8b:
                    f8:97:e2:83:24:d9:e3:a3:11:6f:08:dc:06:f9:77:
                    33:ca:99:8b:66:c2:d2:27:dd:36:7e:68:c5:d9:cd:
                    eb:c9:35:b3:85:ca:37:d2:04:ad:19:32:12:8d:d0:
                    d4:f5:c7:20:94:29:53:4e:0b:1a:58:81:a6:ef:f0:
                    30:04:76:99:8a:ba:9a:50:5a:fe:c5:3c:92:c5:00:
                    6d:db:63:c2:bb:d0:02:b5:99:81:60:81:2e:5b:8c:
                    c9:a1:ac:6d:00:dc:e3:15:c9:01:95:7c:ab:b1:03:
                    33:96:86:50:ee:8b:9f:d3:86:71:3c:48:19:24:c1:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:97:0F:C5:BF:24:35:AF:0C:BA:5D:27:96:86:5C:FE:F9:F3:58:8E
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134382e302f32332d3233203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:38:2d:3e:cd:52:70:7f:fb:b6:73:c0:e2:71:47:09:f0:
         3a:18:ea:78:12:9b:b1:30:28:84:ca:e9:c9:fe:d2:59:18:40:
         5e:25:ba:e3:15:63:54:3d:27:8f:d8:45:90:a2:a2:ee:91:f3:
         30:fd:b6:24:c3:70:d6:5b:61:f1:8d:a5:f1:a6:93:98:55:aa:
         ad:43:d1:2e:3c:b5:e0:ba:30:d5:13:be:b9:17:89:25:c7:4b:
         a7:90:70:2f:bc:06:02:70:7a:70:89:27:6a:37:8c:66:0f:bb:
         92:f2:95:b8:3f:17:6b:41:93:da:5c:13:58:f2:0d:64:bf:81:
         0a:37:8e:ce:02:b4:67:7f:1f:a1:42:08:0d:22:a8:42:fd:9b:
         36:2e:be:6a:51:de:ab:0a:c1:83:6b:14:cf:fb:bb:0d:5d:d1:
         b2:09:ef:f3:e0:b8:92:93:ef:90:5b:25:5f:b5:a3:e9:26:e2:
         e9:1f:28:44:86:6f:44:8f:ab:68:27:79:43:3c:19:6e:e4:e7:
         c2:25:ad:64:2d:a5:fc:a0:fc:c3:ff:50:a5:33:a8:6a:95:89:
         a8:c2:af:81:75:d9:d2:ff:e8:76:f3:cc:a9:50:ad:a5:80:85:
         c1:9d:9f:19:1a:f9:ef:ca:db:d7:1a:49:cd:91:26:18:c1:92:
         f6:f3:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:34:03 2024 by rpki-client on console-ams.rpki-client.org