Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230302e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230302e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          nLHRnNs94bRpTemErfQJf/msP+rCcmW8hkfHpe4vlRc=
Subject key identifier:   57:6A:81:D8:2A:EA:EF:A0:21:54:F3:44:BF:28:A9:F5:81:30:F9:1E
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       4A5A44ADE90BE84FE89A8D4CAAA8CAF2A9DBC1A4
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230302e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:22 +0000
ROA not before:           Thu 18 Jul 2024 19:57:22 +0000
ROA not after:            Thu 17 Jul 2025 20:02:22 +0000
asID:                     11802
IP address blocks:        200.19.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5a:44:ad:e9:0b:e8:4f:e8:9a:8d:4c:aa:a8:ca:f2:a9:db:c1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:22 2024 GMT
            Not After : Jul 17 20:02:22 2025 GMT
        Subject: CN=576A81D82AEAEFA02154F344BF28A9F58130F91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:75:2a:db:aa:f4:94:2e:b6:a7:5b:d7:c4:
                    16:b4:b9:0c:82:f3:56:50:ad:ce:31:59:19:56:d1:
                    c3:26:a5:bd:ab:a2:f0:61:02:55:20:88:51:b0:83:
                    84:d7:43:f3:a7:41:17:90:78:8e:5b:ea:d6:30:a4:
                    53:c8:cf:87:bf:fa:a7:01:e5:b3:8b:9a:33:e0:ff:
                    bf:61:62:a6:be:94:bb:f5:d4:fe:38:fd:0e:b0:da:
                    23:db:80:84:83:da:d1:6a:81:54:50:f2:c1:2d:8e:
                    3e:f9:30:d6:cf:d8:68:16:db:48:5f:49:f6:81:36:
                    c6:e6:27:b5:2e:91:7b:2a:e2:a2:18:05:25:98:69:
                    9f:42:a3:ca:64:ab:57:e5:75:30:a1:5d:37:d1:a6:
                    2e:09:6c:73:95:51:45:52:24:90:86:e5:77:86:b8:
                    66:01:b9:42:3b:30:11:b1:57:8f:e1:7f:f6:64:12:
                    8e:b3:44:97:d7:f7:7d:42:aa:cf:50:c9:5d:d9:37:
                    38:22:c7:38:e4:57:b3:50:85:5a:ec:fd:87:96:ff:
                    b4:6c:3b:a7:2f:cf:21:d8:e8:ef:4a:16:6a:20:ae:
                    a7:62:59:89:1b:de:4a:86:52:5b:93:e2:5a:42:04:
                    fe:e9:42:c7:a5:14:b8:c5:e9:4e:01:30:4e:e5:81:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:81:D8:2A:EA:EF:A0:21:54:F3:44:BF:28:A9:F5:81:30:F9:1E
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230302e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:e1:81:48:ab:c9:59:f7:13:ce:67:1d:c5:8c:36:41:1a:
         e5:9a:86:a6:f0:21:cc:c1:dc:10:ff:e1:12:90:50:40:a2:05:
         5e:59:0b:7e:d3:33:d5:4f:f4:f8:dd:d1:ab:e5:e5:47:b6:e4:
         4c:b6:a2:f0:bb:bf:c0:e6:61:35:3d:ce:da:41:ec:34:a3:30:
         6d:d4:be:6a:dd:c9:d9:6c:61:a6:e2:a9:6f:9f:e8:b0:24:54:
         97:e7:6c:e9:7d:13:5f:ea:0e:dc:db:1a:6c:71:1f:c9:05:db:
         d0:85:ad:cb:c1:c0:6b:34:18:5f:3a:55:5b:12:c0:eb:fe:d0:
         90:c6:46:6a:2d:d3:ab:60:cc:5a:b4:ca:79:a0:73:d4:4e:3d:
         b8:7e:f9:ff:aa:83:d6:d2:59:f0:ae:6c:1e:03:f7:2c:bc:b6:
         e6:d1:f1:b5:ce:b6:07:00:ad:05:4c:cd:35:5e:57:37:3f:8a:
         bc:3c:a4:ae:1e:38:83:b0:a0:1c:e6:48:f4:d5:5d:aa:89:39:
         9b:10:95:f3:7e:d3:5e:23:c6:56:00:30:1c:9e:b0:3f:9d:39:
         cb:45:1c:38:3a:39:84:85:ee:7e:8b:7e:51:a6:ca:bd:c8:ab:
         1d:7b:7e:3d:55:67:9e:64:25:f6:4f:79:d7:83:dd:10:29:98:
         cc:b7:70:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org