Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          yS52MXRpykbFkYg3gkG3Kj7zA/G1GFSO8Z9VA2x8Gm4=
Subject key identifier:   35:50:2E:E5:2B:D1:2A:C2:3C:51:37:A4:C4:E6:BA:1F:4F:BA:ED:AA
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       6933A67BC7F3BCB3F0C2B7DC42F591665CE8B517
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:32:12 +0000
ROA not before:           Sat 29 Jun 2024 15:27:12 +0000
ROA not after:            Sat 28 Jun 2025 15:32:12 +0000
asID:                     28572
IP address blocks:        200.192.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:33:a6:7b:c7:f3:bc:b3:f0:c2:b7:dc:42:f5:91:66:5c:e8:b5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:27:12 2024 GMT
            Not After : Jun 28 15:32:12 2025 GMT
        Subject: CN=35502EE52BD12AC23C5137A4C4E6BA1F4FBAEDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:f9:c1:c7:12:33:db:ae:9f:ef:d8:a8:eb:
                    d2:f3:f5:c2:a9:ca:20:a1:39:dc:58:34:c0:69:f2:
                    a0:b5:2c:5e:9b:ad:47:f8:21:a6:80:2d:b9:0f:b9:
                    60:55:7e:7b:8c:ec:fa:67:d6:b8:6c:ef:4f:8a:82:
                    86:d3:f0:3b:ef:40:93:f1:68:0f:c8:9e:be:f4:39:
                    ec:6d:0a:38:3e:76:31:d3:a2:cf:55:81:22:4d:2c:
                    6c:56:ae:28:4d:e9:aa:c5:fc:c4:08:59:9c:46:a0:
                    81:81:1b:83:c5:f8:45:92:ea:ec:6b:93:05:ae:ec:
                    b2:38:c3:73:5f:32:9a:eb:72:df:c1:ea:be:c6:66:
                    11:fc:ba:48:99:ab:63:74:6d:98:97:99:2c:43:95:
                    b2:59:e1:23:27:c2:97:3b:ee:78:f9:45:00:23:72:
                    e0:34:45:9f:62:43:43:01:9e:2f:8c:08:bd:3b:01:
                    4f:bd:f0:6b:de:95:45:b0:5e:1f:75:40:12:9e:ac:
                    2e:65:27:62:4e:d3:aa:cb:c2:42:22:80:a9:f1:05:
                    c2:1c:d1:f2:5b:e9:61:9d:e8:9b:23:bc:ed:fc:30:
                    fd:67:98:1e:b5:75:a1:ac:38:d9:e8:b4:60:bd:e4:
                    d8:fb:69:b6:be:a4:98:ea:69:ca:85:9c:04:e3:3b:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:50:2E:E5:2B:D1:2A:C2:3C:51:37:A4:C4:E6:BA:1F:4F:BA:ED:AA
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:03:3b:56:cd:ae:38:e4:5a:3e:67:26:0e:53:f5:f6:58:cf:
         71:e0:c4:d0:48:98:4e:03:ff:ef:db:46:23:f7:4d:48:2d:21:
         a3:92:57:a2:47:f1:d3:16:67:1b:76:76:d0:c5:1b:a2:91:40:
         b8:7f:ad:ff:d9:06:65:4d:c2:11:1e:39:6b:ab:4d:06:70:08:
         c8:fc:2b:eb:5f:c0:a8:29:12:53:81:65:34:b3:4b:2c:88:28:
         30:d7:30:ab:e4:6f:4c:19:9c:04:c8:6d:09:60:1e:9c:e0:7c:
         2c:ac:78:41:ae:e4:98:78:d9:aa:b7:c0:05:39:d8:c2:76:de:
         cc:29:72:34:89:03:c7:b9:43:ef:e0:18:50:c3:b6:1f:06:32:
         9a:88:54:69:f7:f3:fb:ca:1e:57:0e:9b:37:2d:75:d7:ad:e6:
         da:15:af:2e:fb:6a:1d:3d:79:fa:b9:a5:61:11:9c:93:10:60:
         09:fa:5b:96:c7:ba:63:d8:fb:3b:7c:1e:9a:93:67:1b:25:0a:
         ad:75:68:c1:78:04:7e:5a:b6:fa:56:14:e8:2d:35:eb:10:04:
         9d:c9:8d:9a:fa:3e:32:36:05:4a:02:02:5d:9c:5a:1b:c7:4e:
         23:d0:5a:58:44:ea:cb:3c:c3:3b:74:19:ef:e9:b8:78:c2:cd:
         62:55:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:52 2024 by rpki-client on console-ams.rpki-client.org