Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
File:                     3230302e31392e3139322e302f31392d3139203d3e203131383032.roa (raw, json)
Hash identifier:          60wSuYcmXuHaw23pekNP8ok1L/jikLnQ4ZnV3so5N3c=
Subject key identifier:   6C:E8:25:D4:D5:EB:9C:34:D9:5A:A8:E4:F1:B3:C4:2D:7E:14:D1:38
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       532D2F61D67F0466113622C173DD2F7796A2A76A
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:01:49 +0000
ROA not before:           Thu 18 Jul 2024 19:56:49 +0000
ROA not after:            Thu 17 Jul 2025 20:01:49 +0000
asID:                     11802
IP address blocks:        200.19.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:2f:61:d6:7f:04:66:11:36:22:c1:73:dd:2f:77:96:a2:a7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:56:49 2024 GMT
            Not After : Jul 17 20:01:49 2025 GMT
        Subject: CN=6CE825D4D5EB9C34D95AA8E4F1B3C42D7E14D138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:5b:37:d0:e1:bb:48:22:42:89:ef:8b:6b:
                    58:09:6c:87:91:a1:64:dd:af:4f:5e:c2:72:35:74:
                    ff:ae:9b:f7:5e:df:ca:e1:20:b3:ac:b8:ba:99:d0:
                    2d:3e:31:d9:c5:6f:4a:36:a7:6d:45:c8:c4:cc:ce:
                    62:6c:13:13:ac:9a:43:9a:c2:ca:c5:41:87:8c:ac:
                    b5:ee:e1:65:f1:fb:c4:33:c7:9e:ea:3e:9e:ba:ef:
                    1b:2d:76:96:f0:00:3c:35:21:7d:ac:9a:4e:e1:b2:
                    c6:e1:1f:c8:56:9d:28:0a:18:97:e7:2b:97:37:8b:
                    65:b8:78:a9:83:dc:2e:51:0d:a1:f5:5b:7b:8a:cb:
                    d7:40:25:a9:ad:73:9e:e4:db:28:72:b7:63:fb:92:
                    7a:f0:5d:f0:7f:4e:93:7c:4a:d3:b9:89:19:7d:45:
                    85:0f:03:c4:ee:b5:90:4e:ce:c4:dc:7f:da:9a:94:
                    a4:e7:d7:b1:d9:79:99:85:f3:c4:c8:d8:41:01:20:
                    61:4b:19:f9:e9:f3:2e:26:43:1b:e2:91:50:3c:30:
                    17:b6:e8:5e:30:7e:8c:5a:35:0f:34:36:10:9f:45:
                    d0:14:4b:d8:c8:aa:75:e0:b3:6e:46:51:81:db:e7:
                    2e:b5:5f:14:0c:99:c5:9c:e7:0d:35:f0:bd:36:25:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:25:D4:D5:EB:9C:34:D9:5A:A8:E4:F1:B3:C4:2D:7E:14:D1:38
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139322e302f31392d3139203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:bf:84:99:b2:06:07:20:91:5f:03:cb:f9:4e:2e:0e:6c:4b:
         6d:27:f0:3e:f1:3d:ce:5a:a2:77:a7:c9:be:00:f7:e2:a1:0f:
         89:4e:bc:7d:6c:15:23:f9:4e:6d:1a:f0:87:13:09:1c:b7:c8:
         3a:8f:95:12:57:47:2e:09:28:cc:f6:83:e7:54:54:54:07:cf:
         1f:a2:17:2d:4c:0c:47:cc:8d:15:43:2f:32:9c:c4:ff:e2:33:
         74:5b:30:a5:a1:45:e0:92:57:16:04:04:29:19:fc:01:5a:b9:
         b7:f0:10:4f:b6:4c:c1:ed:be:f7:92:31:d1:9a:af:52:ca:24:
         83:5e:4a:c3:46:96:8e:3a:ce:fd:60:92:8d:f0:cc:40:f5:8c:
         f6:1d:dd:ca:de:78:b6:cc:90:97:0b:a4:01:52:dc:f5:7a:2f:
         3c:9d:8f:f8:06:89:0a:66:e4:03:dc:c4:8d:9e:01:dc:69:58:
         c2:a7:04:00:d7:df:d1:f0:b4:49:42:78:52:cb:02:c3:a8:42:
         51:5f:d7:31:7d:dd:ac:15:54:40:d1:d7:4f:27:58:47:07:2b:
         10:5f:dd:c8:0f:12:46:6f:7d:3d:39:90:4d:8f:6e:33:51:57:
         4e:e6:bf:f3:b8:10:40:96:62:b6:ea:ed:45:57:4e:01:a1:39:
         3d:f4:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org