Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135382e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135382e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          HxwZC0eQFbTxQd+T031DclFtgqxw9fDRc4Bx1XQv+Qs=
Subject key identifier:   7D:18:5D:1E:D4:59:74:A6:72:A7:5D:3C:F5:6F:15:BC:FF:FD:E1:61
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       6519409BD7C68834C3F7F23DF5FE2DE1895F6395
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135382e302f32342d3234203d3e203238353732.roa
Signing time:             Mon 05 Aug 2024 17:22:49 +0000
ROA not before:           Mon 05 Aug 2024 17:17:49 +0000
ROA not after:            Mon 04 Aug 2025 17:22:49 +0000
asID:                     28572
IP address blocks:        200.192.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:19:40:9b:d7:c6:88:34:c3:f7:f2:3d:f5:fe:2d:e1:89:5f:63:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Aug  5 17:17:49 2024 GMT
            Not After : Aug  4 17:22:49 2025 GMT
        Subject: CN=7D185D1ED45974A672A75D3CF56F15BCFFFDE161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:61:5f:3e:a5:69:d0:ae:e4:36:1f:68:1b:
                    0c:42:4e:31:2b:33:fd:79:91:76:eb:30:69:03:03:
                    3d:67:3d:35:bb:11:62:f6:d0:18:1d:f2:9c:ed:08:
                    fd:86:55:68:aa:49:02:32:d6:60:9d:fe:06:fa:a0:
                    d4:82:b8:7d:f1:57:1c:8c:bb:fe:4a:cf:1f:e9:35:
                    b1:95:c6:7e:72:0c:d0:1b:f7:f0:64:8e:a1:c2:30:
                    b6:69:a3:1e:27:98:92:91:06:aa:0a:72:2b:2d:15:
                    09:f6:3a:3a:66:3f:90:c1:05:f0:49:78:6f:6c:ab:
                    8e:e0:d6:96:27:d8:90:f0:47:45:3d:0a:08:e2:94:
                    06:88:12:c6:1a:e4:89:58:28:22:8d:47:b6:95:04:
                    4d:60:7d:6b:c4:a9:33:97:f1:66:1b:d0:a7:86:5f:
                    87:6b:84:05:77:31:6b:32:f6:7e:9a:b6:6b:65:45:
                    6f:c1:ec:b2:26:df:97:b1:b7:22:17:36:6e:e0:b5:
                    2c:22:c0:c4:91:9d:2d:37:dd:9a:ea:36:60:c1:f6:
                    40:9e:b2:62:66:06:a6:10:d7:37:f5:c7:5d:78:12:
                    35:4e:6b:21:24:cd:50:db:14:2a:af:4f:5f:48:85:
                    5f:ea:50:f5:b3:50:62:89:5c:57:7b:d3:b0:98:4a:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:18:5D:1E:D4:59:74:A6:72:A7:5D:3C:F5:6F:15:BC:FF:FD:E1:61
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135382e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:53:c0:03:bd:24:3e:a8:ca:65:43:12:70:99:79:81:18:0e:
         84:60:19:2d:f6:25:86:3d:f4:e0:65:ab:8c:b4:77:33:25:d8:
         1b:59:47:57:c4:5e:46:57:a9:cd:89:ad:4d:38:98:69:c4:50:
         33:cd:28:16:fe:2f:80:e8:c4:e6:d0:79:08:fe:d0:1c:a6:ae:
         82:fa:4e:6d:5e:14:7c:72:0a:f3:a5:8c:a7:38:2b:91:24:d9:
         a3:4b:99:11:f0:23:a5:8f:27:be:95:bc:87:9a:27:29:c9:3e:
         6c:a2:ae:75:70:e8:13:5c:36:29:95:f3:4b:3c:45:12:06:8b:
         d9:c9:d3:87:bb:bb:b7:25:b2:33:c3:c5:07:bd:39:f2:3d:81:
         94:24:8e:43:56:5d:bf:00:5a:c7:b2:c6:62:9c:c3:b2:60:9a:
         93:90:15:2a:6d:14:e4:74:49:1b:b1:a3:a7:c9:f5:d6:7c:56:
         83:75:a1:a3:34:51:ce:f0:95:72:04:b3:83:50:90:d2:65:d7:
         7a:bb:d8:68:e7:b8:98:71:b3:87:18:dc:da:68:02:6b:95:7c:
         4f:09:66:af:81:9b:76:75:25:bb:a3:d2:9e:1b:a6:3e:c9:2e:
         80:18:b2:29:68:f2:ec:f2:c0:d7:06:20:32:39:34:7f:42:b1:
         47:eb:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 05:58:26 2024 by rpki-client on console-fra.rpki-client.org