Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139382e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          lQSwEtTqQMBxUgIE3m0HVPWFehVLo/oW9DbQmm0Jkww=
Subject key identifier:   E4:78:2C:38:9D:FC:90:5F:AC:42:93:64:D7:06:B9:24:12:37:83:7E
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       23568D10B45D3D5595FDCF15A407EB9D3EB283ED
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:17 +0000
ROA not before:           Thu 18 Jul 2024 19:57:17 +0000
ROA not after:            Thu 17 Jul 2025 20:02:17 +0000
asID:                     11802
IP address blocks:        200.19.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:8d:10:b4:5d:3d:55:95:fd:cf:15:a4:07:eb:9d:3e:b2:83:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:17 2024 GMT
            Not After : Jul 17 20:02:17 2025 GMT
        Subject: CN=E4782C389DFC905FAC429364D706B9241237837E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:2d:c5:cb:09:cb:25:90:7e:68:87:e9:d0:
                    ac:aa:b3:be:49:91:27:6c:7f:be:51:56:bb:5b:98:
                    0a:c4:82:25:b9:7e:5f:d6:c2:33:54:e8:f6:3b:43:
                    f0:c2:2d:f8:5a:8e:cd:13:f9:67:70:d9:c2:c8:3d:
                    95:71:c7:8e:a6:42:17:18:af:47:02:48:e1:11:76:
                    cb:a5:a7:be:5a:6f:87:28:76:76:fc:7f:48:c7:6f:
                    40:f9:55:65:48:d5:da:a3:b7:7c:d6:df:42:f6:4f:
                    59:55:48:e5:a4:b8:d7:97:f4:5f:fb:c3:84:1e:27:
                    57:4f:25:85:be:82:12:d4:e2:7f:28:b0:f4:a1:80:
                    4a:10:05:37:33:03:b8:80:88:ad:92:99:d1:b1:e1:
                    84:60:62:62:2b:d1:e7:d5:6e:ff:0a:d4:86:9a:27:
                    34:b2:38:cc:71:9a:32:cd:e2:4e:84:a4:47:a7:24:
                    8a:f5:86:47:d4:b1:f9:ed:7e:60:ed:e4:4d:e4:df:
                    12:d9:a8:9c:6f:0a:ad:9d:72:4e:6d:67:57:a8:d9:
                    ef:73:42:d3:94:ea:90:12:a1:8f:8c:dc:7d:64:52:
                    48:bd:31:46:6a:25:9c:d3:6e:70:b7:18:15:d7:c4:
                    cf:95:59:b8:a3:5c:70:70:e7:cd:2b:2c:3c:6f:47:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:2C:38:9D:FC:90:5F:AC:42:93:64:D7:06:B9:24:12:37:83:7E
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139382e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:85:88:c1:65:21:2a:71:07:b9:0f:89:9f:2b:54:fc:0a:89:
         89:b8:f8:b0:fd:fd:df:f9:75:c4:6f:b6:75:87:ec:53:42:b2:
         97:6f:7b:a4:7c:f1:d2:f6:35:a7:3f:48:ef:a8:3e:c8:1b:27:
         45:8a:18:32:9d:3a:a0:a9:9c:25:dd:60:3d:14:d4:3d:89:52:
         98:bc:6e:8f:49:03:25:bf:dc:ef:33:4c:4a:4d:00:33:5e:a0:
         f3:b7:b9:7e:1a:a3:81:19:99:c2:f2:42:79:ce:ca:30:2f:c5:
         12:3f:9d:14:0d:67:3f:a9:af:e4:72:4d:16:27:22:1e:c9:a6:
         41:ba:9e:ad:eb:4e:3e:b5:95:f5:af:33:56:21:e9:62:e9:47:
         70:a2:69:f5:4e:81:94:04:6c:29:03:bf:e7:15:8c:8b:49:92:
         8b:e4:42:7b:63:32:b0:6f:cb:0e:fe:92:f8:5c:8c:29:1a:f8:
         2e:b2:35:fe:29:a7:31:52:d4:3a:0e:9e:11:25:15:98:1f:04:
         55:fe:88:ff:03:31:c9:12:f3:22:53:b4:2d:aa:5b:f8:78:3b:
         37:3c:c6:82:68:7b:76:90:26:9d:0a:41:07:2c:99:38:45:6d:
         ef:81:c7:a9:5c:f1:06:91:7d:01:e2:32:a8:79:f2:de:ac:5e:
         f7:1c:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org