Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135362e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          HGeTygIpnguonc1sLPMtYpnHd0pAgPMDe3D9qAuSI84=
Subject key identifier:   9A:07:1D:6C:21:24:D1:00:7B:72:47:80:F4:C1:6E:BE:29:15:0B:FE
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       03671C8BFFDFA420D73085A0F6AA9D2825962EAF
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32342d3234203d3e203238353732.roa
Signing time:             Mon 05 Aug 2024 17:23:37 +0000
ROA not before:           Mon 05 Aug 2024 17:18:37 +0000
ROA not after:            Mon 04 Aug 2025 17:23:37 +0000
asID:                     28572
IP address blocks:        200.192.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:67:1c:8b:ff:df:a4:20:d7:30:85:a0:f6:aa:9d:28:25:96:2e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Aug  5 17:18:37 2024 GMT
            Not After : Aug  4 17:23:37 2025 GMT
        Subject: CN=9A071D6C2124D1007B724780F4C16EBE29150BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:0f:bc:3b:be:d5:52:f0:4e:39:c5:59:ce:
                    33:a6:ef:03:9a:3b:2d:fa:9c:8c:81:08:f8:e1:dd:
                    e2:4d:c6:05:e2:7f:58:5d:c8:f9:2f:f9:0b:d4:1f:
                    34:5a:eb:e3:93:c8:7c:59:f4:f3:dd:50:a0:35:79:
                    b7:7c:53:05:b0:f0:d2:84:74:43:1a:57:32:82:0c:
                    b6:60:80:03:a1:a3:27:92:8a:6b:8d:28:ee:b5:ce:
                    5b:0b:1d:c6:1a:61:07:67:d7:4a:e8:34:db:93:9b:
                    c6:fd:fc:45:a1:80:52:10:ba:43:c8:23:5b:11:fc:
                    f8:90:a4:4d:dd:3d:4d:e1:63:c4:14:fe:ab:4c:3b:
                    14:0c:3c:c1:78:fb:f3:8d:26:f1:f0:7d:bc:9b:e1:
                    29:fe:5b:6b:8c:5d:b5:69:5f:bd:4e:2b:51:5d:ab:
                    56:74:dc:04:dc:7c:16:dc:f8:2e:09:5c:0d:41:16:
                    8f:8a:5c:eb:99:52:8d:f6:8d:24:3b:31:9f:e3:55:
                    d7:92:8e:5c:e4:39:db:e5:7f:1c:8e:3f:1c:e9:f0:
                    bd:e2:df:f7:b5:2e:84:11:58:2f:3b:4b:19:70:84:
                    90:9d:8b:ff:9f:32:d5:02:09:1a:05:39:aa:cc:3c:
                    ca:29:9c:35:da:f8:c9:44:f9:a2:e1:a7:1b:f6:f3:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:1D:6C:21:24:D1:00:7B:72:47:80:F4:C1:6E:BE:29:15:0B:FE
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:5e:3f:7f:3c:e7:5a:e6:2a:81:b9:28:f9:d6:ec:b4:e0:e0:
         9e:21:e0:23:fd:c9:3f:4b:95:a3:b0:fb:ae:b5:4a:f6:72:74:
         d3:6a:37:91:be:b8:67:fb:84:eb:30:0a:25:27:d8:31:16:6c:
         2f:9a:3b:70:a0:46:8b:6a:6d:f7:d6:88:4d:f8:c5:9c:90:91:
         d1:eb:69:07:92:c4:8b:ff:82:92:cd:57:5e:76:45:a0:40:94:
         91:bd:30:95:5c:8c:0c:45:52:a7:df:1d:38:f1:98:6c:1e:2a:
         a2:95:b8:f6:43:8d:d2:da:b1:c0:c2:f0:26:ed:04:3c:c6:6c:
         f2:b1:09:23:1f:92:d2:aa:87:91:65:0e:0d:98:0e:c8:fd:46:
         80:34:a9:3a:e2:fe:30:71:bd:76:19:a9:e3:41:3b:0d:3b:0f:
         d3:2b:fe:d2:ca:fb:12:b5:d3:8b:90:0d:16:71:99:32:bd:c1:
         b6:39:da:fd:c7:f8:62:b9:cc:c5:18:ef:c6:c3:83:ec:40:6b:
         82:57:ec:24:11:8e:c9:2f:c0:61:b3:3f:a6:84:1c:ab:5e:d7:
         09:9b:0c:6e:13:5c:39:b7:14:eb:2b:ba:db:82:10:30:46:11:
         6d:78:92:46:79:eb:7b:47:5f:6c:76:9a:70:fb:f9:48:32:a3:
         3d:e6:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:09 2024 by rpki-client on console-fra.rpki-client.org