Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32322d3232203d3e203238353732.roa
File:                     3230302e3139322e3135362e302f32322d3232203d3e203238353732.roa (raw, json)
Hash identifier:          9EjhFzjBCqTsIExgLv0xNWHpFMpXaiWBXsXj4lXc9OI=
Subject key identifier:   35:CA:C3:11:54:D5:EE:4C:C5:D2:DB:5C:11:31:DC:48:61:65:43:B1
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       12203879E5C84C3B629AE1E3E7A1047DFC5FE3D9
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32322d3232203d3e203238353732.roa
Signing time:             Mon 05 Aug 2024 17:04:48 +0000
ROA not before:           Mon 05 Aug 2024 16:59:48 +0000
ROA not after:            Mon 04 Aug 2025 17:04:48 +0000
asID:                     28572
IP address blocks:        200.192.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:20:38:79:e5:c8:4c:3b:62:9a:e1:e3:e7:a1:04:7d:fc:5f:e3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Aug  5 16:59:48 2024 GMT
            Not After : Aug  4 17:04:48 2025 GMT
        Subject: CN=35CAC31154D5EE4CC5D2DB5C1131DC48616543B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:99:3b:e9:87:ba:d5:de:bd:6d:3e:e0:49:
                    9c:55:3b:dd:f9:08:6a:fa:08:df:9a:20:1b:b0:a7:
                    5a:92:50:db:9e:39:3a:50:ab:42:e1:d4:f1:f3:23:
                    a8:a1:c2:52:12:d4:f8:73:67:12:45:23:17:80:f4:
                    f0:c5:46:ef:18:1a:62:88:f7:b2:92:87:ab:4f:c9:
                    d4:ef:63:c4:c1:ca:1a:3d:fa:2b:f2:eb:0d:1c:68:
                    1d:00:1e:c2:78:73:10:70:77:8c:36:db:07:1f:4e:
                    c3:c4:e7:cc:1b:59:aa:ae:8a:50:4f:a1:8f:ab:7c:
                    35:99:c2:6d:23:f1:ed:ed:a4:00:1e:e1:2d:d3:d8:
                    d6:a1:c1:69:38:c7:90:ba:ac:56:96:6e:34:35:3b:
                    e7:23:a0:8a:be:58:16:2b:31:92:28:73:97:ac:32:
                    27:fc:db:c1:fc:8c:41:59:12:19:73:73:71:4d:e8:
                    4e:00:1e:f4:8d:27:b5:3c:1e:0c:cb:64:03:d8:8f:
                    8a:cb:bf:97:13:5e:55:62:64:90:46:f7:b5:c1:ac:
                    dd:c3:b5:22:3d:97:03:fd:1f:1b:af:5e:25:6e:f7:
                    02:72:19:63:89:86:c9:26:16:c2:0c:e1:69:ce:46:
                    ae:7c:4b:e0:48:24:9f:bc:3c:eb:1b:b8:57:2d:2f:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CA:C3:11:54:D5:EE:4C:C5:D2:DB:5C:11:31:DC:48:61:65:43:B1
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32322d3232203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:06:3e:1c:19:44:fe:1d:fb:ef:20:c9:c2:da:75:a1:86:
         d5:35:9e:88:de:0c:36:48:95:00:fb:b9:78:69:7d:35:44:80:
         ad:c8:4d:4f:f4:41:00:b7:1d:ed:48:39:93:7b:22:41:17:8d:
         cf:0a:32:09:d8:19:db:c0:14:d9:33:7d:f3:03:57:2d:0e:98:
         06:98:93:c8:24:30:ed:11:d0:13:be:d7:7e:77:21:66:8c:08:
         00:d2:4c:a7:7d:4b:6b:02:8a:7d:18:9c:62:50:b9:65:e4:68:
         a9:9f:cb:38:7f:fa:63:73:a3:f7:26:e4:fb:ef:fb:2e:26:30:
         f1:33:0a:d2:08:50:5f:6c:40:6e:d0:e5:20:f5:9a:e8:81:31:
         ed:a2:e4:a0:df:b6:1e:a6:f2:84:f7:1f:3c:b7:e0:8f:d5:08:
         96:34:86:34:7a:7a:ae:52:92:73:b5:66:31:f5:e7:e1:af:1d:
         f1:21:aa:99:d6:d7:c2:60:7f:bf:67:c5:02:7c:c6:3c:72:0a:
         ae:ca:04:5f:54:63:25:10:ba:62:44:35:e5:77:db:10:43:cc:
         63:f0:13:8a:22:dd:f3:79:69:db:24:b8:44:51:43:9a:a5:f0:
         2e:3f:64:8a:b1:53:db:11:e4:b6:e3:dd:f0:6c:94:a4:15:4e:
         82:f4:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:53 2025 by rpki-client