Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135372e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135372e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          1bJxIbigU6LbG2aehPQsphA9ZjrQRnCJlxhhUWCD8ZE=
Subject key identifier:   B7:2C:A9:E1:EA:34:EB:FF:82:D4:24:2E:EB:28:F3:DD:F1:EA:B4:40
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       15B153069C8E4ECDFE4540F58B736E551C5D743B
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135372e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:32:32 +0000
ROA not before:           Sat 29 Jun 2024 15:27:32 +0000
ROA not after:            Sat 28 Jun 2025 15:32:32 +0000
asID:                     28572
IP address blocks:        200.192.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b1:53:06:9c:8e:4e:cd:fe:45:40:f5:8b:73:6e:55:1c:5d:74:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:27:32 2024 GMT
            Not After : Jun 28 15:32:32 2025 GMT
        Subject: CN=B72CA9E1EA34EBFF82D4242EEB28F3DDF1EAB440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:18:aa:d2:c2:e3:21:76:f2:3f:8c:fc:4a:
                    bf:84:11:c7:0a:ba:b4:27:04:99:99:d0:db:c0:ce:
                    f4:84:ff:ce:92:a0:a7:88:08:02:11:e8:7e:10:73:
                    3f:42:94:7e:d8:d6:ef:2f:b6:60:12:a2:27:f2:a4:
                    99:09:a4:74:b2:43:14:17:18:7f:65:27:c3:63:cf:
                    5d:b9:ec:04:be:59:00:db:5b:96:fd:9f:8f:db:49:
                    17:d9:f4:de:79:38:86:3e:59:10:04:aa:74:b1:fc:
                    d5:9e:ea:39:1c:3e:6e:59:0f:52:55:b6:d1:8b:be:
                    92:b8:85:85:da:25:4f:b5:a8:6b:fe:a4:d5:44:f2:
                    d9:17:3b:f1:96:4d:a3:75:5b:a9:3a:b1:08:c8:d1:
                    d1:5f:50:1f:e0:79:f1:4a:71:0d:c4:2e:ba:09:7d:
                    4f:95:01:e8:6a:bf:61:b3:9e:e3:82:a4:87:96:6e:
                    b9:01:76:cc:05:25:f5:e7:e4:6e:6c:8f:52:6d:63:
                    c3:31:f5:f9:c7:58:e8:15:6a:9f:bb:2b:b0:b5:b9:
                    bf:32:77:36:c2:76:53:ee:c5:a1:91:9c:c1:cb:a2:
                    7c:c0:2f:ed:63:59:af:74:12:42:e8:43:92:8d:27:
                    85:e8:5d:fe:a8:a1:97:90:f6:fe:6e:fb:90:94:26:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2C:A9:E1:EA:34:EB:FF:82:D4:24:2E:EB:28:F3:DD:F1:EA:B4:40
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135372e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:db:fa:5a:20:5e:c1:6d:38:03:42:59:96:6d:c1:ab:3e:cc:
         49:86:39:7b:d5:d9:50:b5:9e:07:5c:ab:39:72:9d:e4:94:24:
         9a:24:1a:6e:66:28:0d:fd:85:26:2d:21:00:4a:92:4e:cc:40:
         7e:ca:eb:7c:d6:29:d1:6f:66:35:09:62:91:f1:52:7c:77:69:
         36:26:e5:89:45:5f:03:06:d0:ea:0d:aa:84:0a:5d:2c:53:5b:
         ea:1e:cc:31:16:03:ef:a2:3b:8f:fe:d4:ee:da:36:bb:ac:61:
         2f:45:6a:8b:44:99:66:07:1e:89:0d:4f:78:6f:af:f4:10:ce:
         a2:9d:ca:c4:8d:b5:b7:00:22:de:e8:28:c2:48:4e:5c:14:c8:
         70:42:b0:0c:c4:1d:9d:19:ce:d4:a2:62:a9:bc:54:e4:41:44:
         94:fd:03:be:72:84:ac:41:97:ff:36:0d:26:f4:a8:ac:2f:be:
         45:a9:cb:04:13:f5:07:f0:92:6b:c2:25:3a:67:a8:20:81:78:
         2e:b5:a6:88:ae:87:63:7f:1a:47:f6:f0:78:50:7c:71:02:02:
         16:67:42:44:ae:7b:3e:ec:43:59:15:93:3b:c2:4d:47:87:00:
         ea:23:ae:f8:b0:d9:e6:f0:e3:08:53:80:e4:05:c2:00:b2:7c:
         ca:41:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:09 2024 by rpki-client on console-fra.rpki-client.org