Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32332d3233203d3e203238353732.roa
File:                     3230302e3139322e3135362e302f32332d3233203d3e203238353732.roa (raw, json)
Hash identifier:          RSPqaJKpgtvy3acM7Zn0CSRmpe/i+O8HFSy3cAN7EvM=
Subject key identifier:   67:BC:34:97:5E:75:D4:F7:B3:AC:C3:A2:32:EC:D3:26:43:16:7E:3D
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       096920E42C1FCA31917282615A02CD78CBE674B9
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32332d3233203d3e203238353732.roa
Signing time:             Mon 05 Aug 2024 17:23:49 +0000
ROA not before:           Mon 05 Aug 2024 17:18:49 +0000
ROA not after:            Mon 04 Aug 2025 17:23:49 +0000
asID:                     28572
IP address blocks:        200.192.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:20:e4:2c:1f:ca:31:91:72:82:61:5a:02:cd:78:cb:e6:74:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Aug  5 17:18:49 2024 GMT
            Not After : Aug  4 17:23:49 2025 GMT
        Subject: CN=67BC34975E75D4F7B3ACC3A232ECD32643167E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:bf:c4:e6:23:4a:09:a2:47:c5:0e:0c:f2:
                    a5:49:06:5d:42:5b:cd:db:d5:e9:33:3b:7d:89:91:
                    8b:ac:2c:ac:88:1b:94:f4:b5:4a:28:ec:e0:3a:45:
                    17:f9:a2:c0:83:b2:5c:05:a2:ee:2b:9d:d0:5c:72:
                    6c:bf:be:5f:b1:85:bd:d2:b2:66:af:e8:e8:c9:a7:
                    57:a1:0e:85:7b:71:32:1f:c5:ec:bd:e9:f1:d4:54:
                    cd:c5:b8:fb:82:7c:fc:d4:19:68:35:83:f0:40:51:
                    d9:be:1f:5a:43:8f:8c:b7:48:08:6f:8b:38:73:e2:
                    5b:dc:86:56:13:2e:c9:5c:5b:56:cd:f7:ea:a1:e9:
                    d6:53:73:8f:23:98:fb:d6:8e:9e:91:cf:87:24:1b:
                    ae:75:29:0d:bd:b1:cd:8d:26:6d:7c:cc:9a:58:95:
                    44:eb:ef:d9:3e:5f:fa:7b:ee:10:54:fd:be:ee:29:
                    f6:1e:05:9d:23:fd:23:df:5e:7c:6e:7f:2d:ad:2a:
                    37:15:e6:59:17:5b:f1:fc:37:d2:21:50:6f:64:83:
                    cb:d5:40:93:56:d6:80:f6:13:88:b3:3d:a7:54:f4:
                    04:0f:cd:44:0f:0f:e0:f3:ff:a8:7b:48:5c:2d:3d:
                    25:36:9c:54:20:3f:49:b8:9f:7e:5b:32:48:8c:34:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:34:97:5E:75:D4:F7:B3:AC:C3:A2:32:EC:D3:26:43:16:7E:3D
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32332d3233203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:56:06:2e:ff:5f:4e:c0:6a:bb:a2:18:11:f3:0d:f7:93:97:
         9a:80:5d:53:ad:72:5d:4f:b6:bc:bf:c9:df:0d:ff:9c:8f:59:
         dc:78:8f:c7:19:d4:a9:aa:85:14:24:2a:b9:f9:4e:7d:92:6b:
         70:01:fb:74:fd:82:38:05:99:66:b5:68:4a:0f:79:dc:db:c8:
         45:76:26:a9:7d:73:c1:46:86:91:bf:e7:4b:10:b5:07:4c:d4:
         81:d2:88:3a:40:6c:89:f5:35:c3:cd:9c:7e:d9:f8:1d:45:21:
         79:05:9a:26:13:10:e2:62:33:32:75:d8:fd:a4:76:56:79:61:
         5e:c6:67:d8:38:12:84:ca:b7:41:8b:a9:23:80:27:57:83:30:
         73:e3:37:8e:b9:c1:0b:ff:f7:25:57:fd:db:52:5d:a3:83:af:
         6f:e5:60:0f:49:31:6e:34:0d:e3:0f:9f:36:10:f2:be:0d:c2:
         91:e5:66:6b:69:c7:cf:9d:9d:d0:cc:41:39:01:e6:b6:f6:05:
         19:da:ef:9c:01:51:88:cd:d6:84:04:c4:6e:a5:97:87:ac:ab:
         af:c8:79:f9:f5:d4:2a:5b:6e:5b:8d:92:75:fa:82:44:33:5a:
         7e:54:3e:42:7e:60:36:9a:9e:71:9a:fa:6b:e1:f3:43:f0:37:
         8f:3a:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:31:23 2025 by rpki-client