Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139392e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3139392e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          XXJ+rQzbg5AusW4OZONyjWP8eZetsjmOIJjpOF+QeuY=
Subject key identifier:   D0:AA:B9:B7:90:D5:F8:E7:AD:10:88:0D:E3:C9:FF:98:D7:B0:6F:9F
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       022E5EE495BC04F7F211E3568D4103B4624312AB
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139392e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:20 +0000
ROA not before:           Thu 18 Jul 2024 19:57:20 +0000
ROA not after:            Thu 17 Jul 2025 20:02:20 +0000
asID:                     11802
IP address blocks:        200.19.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2e:5e:e4:95:bc:04:f7:f2:11:e3:56:8d:41:03:b4:62:43:12:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:20 2024 GMT
            Not After : Jul 17 20:02:20 2025 GMT
        Subject: CN=D0AAB9B790D5F8E7AD10880DE3C9FF98D7B06F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:fd:b9:58:b3:ce:76:1c:3c:50:2e:8c:44:
                    24:2a:14:84:70:59:25:bd:e2:11:e8:88:d6:f6:85:
                    4b:03:7c:a3:9a:54:c3:23:c7:70:fa:36:c4:37:9a:
                    ff:38:72:57:12:c0:13:42:c2:27:2c:b5:cc:a6:dd:
                    cb:97:89:52:b0:e8:bb:cc:b6:9f:e8:6e:03:08:51:
                    67:12:d0:37:a6:22:51:ac:dd:78:f9:52:a9:d1:43:
                    f5:24:e9:33:8e:2a:e2:d4:f6:9b:3c:72:3e:f1:90:
                    0c:36:13:5b:db:4c:f9:8a:bb:7b:9a:42:18:02:0b:
                    90:a1:79:08:20:54:c4:2a:9e:f3:29:c0:20:e9:ae:
                    e6:af:59:ac:77:ea:51:69:03:19:1e:7c:6a:b4:0d:
                    fc:64:d0:0f:e5:aa:4a:af:03:29:13:e6:e2:ed:56:
                    ca:30:90:38:11:45:ca:2d:a3:7a:41:7b:e1:39:f5:
                    9b:ea:48:d6:b1:f0:83:8b:c9:94:37:3e:97:e7:1b:
                    ca:2e:aa:92:2e:14:28:7c:58:c6:e0:1d:bb:57:f0:
                    c9:01:70:07:dc:57:37:0c:18:15:21:0c:0a:a0:22:
                    c5:e4:6e:76:94:57:22:c2:2a:43:d8:01:a2:88:e6:
                    b8:e9:97:b5:2d:7b:54:cf:8f:3d:30:c9:5f:9b:c4:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AA:B9:B7:90:D5:F8:E7:AD:10:88:0D:E3:C9:FF:98:D7:B0:6F:9F
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3139392e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ef:53:9a:67:b8:5b:98:01:eb:0b:ba:13:15:37:c0:cf:f1:
         c7:20:da:a9:59:53:1b:a5:41:f1:64:fa:8f:f0:ea:af:95:f5:
         5d:fa:1f:23:42:4b:f2:5d:85:a7:f9:43:2e:8e:c6:42:38:9f:
         13:12:5c:d0:67:fe:e1:93:96:3b:f7:ea:97:98:80:f2:2d:de:
         25:02:ad:d9:b7:01:67:09:08:d3:04:7d:72:ea:ca:a0:ba:88:
         45:df:47:ec:d1:26:c6:41:56:e3:1b:98:8c:c2:e7:75:81:97:
         2c:7c:2e:ae:71:48:51:de:4a:ad:51:e7:4a:19:31:12:b9:f5:
         80:9a:5e:84:4d:d4:77:5e:13:c6:f7:33:97:fc:bc:5a:31:42:
         25:a7:8b:23:7a:89:b5:e0:56:11:21:89:ec:70:93:5f:02:bc:
         96:36:3d:e4:05:19:4c:a2:e8:d3:85:d2:1e:91:a7:c8:fa:81:
         82:c3:75:44:a3:54:50:fd:46:7f:10:06:a3:3c:f3:df:d3:6b:
         b2:2b:4c:65:8f:3a:de:d4:8d:66:ff:21:40:8c:cb:9f:7f:51:
         ef:3f:61:89:74:7a:39:d0:3d:46:4a:a0:8e:4a:ed:66:9f:ca:
         6e:ce:ba:ae:84:b0:02:ca:03:fa:a6:c3:0e:20:9a:ed:26:c7:
         9e:69:0e:95
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAi5e5JW8BPfyEeNWjUEDtGJDEqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDA3MTgxOTU3MjBaFw0yNTA3MTcyMDAyMjBaMDMxMTAvBgNV
BAMTKEQwQUFCOUI3OTBENUY4RTdBRDEwODgwREUzQzlGRjk4RDdCMDZGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7f25WLPOdhw8UC6MRCQqFIRw
WSW94hHoiNb2hUsDfKOaVMMjx3D6NsQ3mv84clcSwBNCwicstcym3cuXiVKw6LvM
tp/obgMIUWcS0DemIlGs3Xj5UqnRQ/Uk6TOOKuLU9ps8cj7xkAw2E1vbTPmKu3ua
QhgCC5CheQggVMQqnvMpwCDpruavWax36lFpAxkefGq0Dfxk0A/lqkqvAykT5uLt
VsowkDgRRcoto3pBe+E59ZvqSNax8IOLyZQ3PpfnG8ouqpIuFCh8WMbgHbtX8MkB
cAfcVzcMGBUhDAqgIsXkbnaUVyLCKkPYAaKI5rjpl7Ute1TPjz0wyV+bxFiJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0Kq5t5DV+OetEIgN48n/mNewb58wHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPHMA0GCSqGSIb3DQEBCwUAA4IBAQAg71OaZ7hb
mAHrC7oTFTfAz/HHINqpWVMbpUHxZPqP8OqvlfVd+h8jQkvyXYWn+UMujsZCOJ8T
ElzQZ/7hk5Y79+qXmIDyLd4lAq3ZtwFnCQjTBH1y6sqguohF30fs0SbGQVbjG5iM
wud1gZcsfC6ucUhR3kqtUedKGTESufWAml6ETdR3XhPG9zOX/LxaMUIlp4sjeom1
4FYRIYnscJNfAryWNj3kBRlMoujThdIekafI+oGCw3VEo1RQ/UZ/EAajPPPf02uy
K0xljzre1I1m/yFAjMuff1HvP2GJdHo50D1GSqCOSu1mn8puzrquhLACygP6psMO
IJrtJseeaQ6V
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org