Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135382e302f32332d3233203d3e203238353732.roa
File:                     3230302e3139322e3135382e302f32332d3233203d3e203238353732.roa (raw, json)
Hash identifier:          yqwME4Mt7vSiJSB8xw4/gepltBNjmsGDNy60uw5P2PY=
Subject key identifier:   71:72:80:AF:6D:C0:55:F0:EA:8B:4D:DE:57:FA:AC:7B:F1:AC:A5:01
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       5A76E68FE9D905FEC36D713C084EFF9CFDACC90C
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135382e302f32332d3233203d3e203238353732.roa
Signing time:             Mon 05 Aug 2024 17:23:20 +0000
ROA not before:           Mon 05 Aug 2024 17:18:20 +0000
ROA not after:            Mon 04 Aug 2025 17:23:20 +0000
asID:                     28572
IP address blocks:        200.192.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:e6:8f:e9:d9:05:fe:c3:6d:71:3c:08:4e:ff:9c:fd:ac:c9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Aug  5 17:18:20 2024 GMT
            Not After : Aug  4 17:23:20 2025 GMT
        Subject: CN=717280AF6DC055F0EA8B4DDE57FAAC7BF1ACA501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:80:67:a4:9a:50:40:4a:a1:57:13:63:cb:
                    2a:bd:b6:54:e6:49:c7:c5:aa:f0:06:12:5e:da:84:
                    47:80:8b:51:94:ad:2d:2d:42:f4:97:50:18:34:cd:
                    9e:ee:ae:62:13:b0:8b:7e:63:c2:3e:2e:60:07:dc:
                    5a:77:8b:f8:c6:b3:b4:eb:6b:10:c5:13:f2:52:4f:
                    66:a4:21:b4:ca:d1:91:11:35:e9:82:37:99:18:cc:
                    52:e6:87:5e:2b:f1:40:1d:23:4b:ba:e5:28:4a:e1:
                    2a:e3:d6:79:d8:19:c5:a8:9d:11:90:3e:93:8a:d7:
                    96:e1:2f:2e:23:4b:87:0a:06:37:6d:83:31:f6:04:
                    a6:06:06:aa:58:1c:e3:50:ad:ae:0e:1c:13:13:f9:
                    af:98:9d:98:55:7c:a4:0f:43:ee:6f:69:11:23:71:
                    79:73:d5:d4:28:f0:e2:61:ac:6f:33:69:da:1c:0b:
                    b4:10:23:ea:4c:0a:1a:6a:37:4c:72:75:36:55:1f:
                    18:45:2d:c6:73:fa:19:bc:f7:29:ad:89:b0:16:2e:
                    0a:cb:57:72:16:c7:d9:ba:e5:38:78:63:8b:ec:6d:
                    f4:cf:aa:a4:4c:d2:7e:2c:3f:ba:24:a5:e1:a1:81:
                    02:bd:91:ed:a3:47:32:d5:05:21:84:6b:b7:25:63:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:72:80:AF:6D:C0:55:F0:EA:8B:4D:DE:57:FA:AC:7B:F1:AC:A5:01
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135382e302f32332d3233203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:43:e6:c0:3d:5e:17:63:1b:31:4b:e4:2b:fb:07:47:f0:dc:
         a9:30:6d:6a:1e:2d:f2:53:d6:09:9d:23:5f:4d:4a:c4:19:77:
         47:6c:07:1a:e7:51:d4:12:a9:42:6c:6a:6a:2b:38:8a:9f:1b:
         bc:61:a7:1a:22:91:34:a7:96:36:d7:36:75:26:5c:c3:ec:f6:
         a3:c3:27:97:b0:eb:d7:81:0a:5c:79:c5:ac:56:d5:af:55:35:
         9b:fa:4e:6e:8f:f8:25:a7:72:85:cb:fa:bf:d2:c8:6b:ca:3e:
         8c:4c:9b:21:54:65:52:98:ca:68:88:f1:bf:4f:43:98:6e:47:
         a4:80:7f:72:33:95:ae:be:b6:ac:90:4b:73:b3:2f:b2:96:ab:
         1a:ef:ef:1a:4c:02:da:70:cf:5f:f3:0a:bb:a7:0e:f2:4a:6f:
         09:9b:6a:fb:ef:00:e2:6f:3d:66:62:9e:b4:b9:47:18:90:1d:
         f1:23:0e:5d:dc:75:ab:07:4b:1e:39:c3:21:b2:00:72:13:26:
         43:2e:a5:00:36:07:23:c7:bf:2c:33:ea:e2:8d:d5:f7:25:62:
         3f:6a:17:e9:b3:d5:5e:8c:d5:66:2f:98:fa:37:fc:eb:5d:53:
         4a:58:15:81:e2:fb:37:af:f8:9e:b7:11:59:27:e6:7b:5e:35:
         e0:f6:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:58:26 2024 by rpki-client on console-fra.rpki-client.org