Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          rwCdfH1yNsTUkjA4OxD4rtAc1TbkXiVFUgr+evfursg=
Subject key identifier:   8F:AF:30:33:96:CC:6E:C9:19:37:14:25:06:59:01:B6:D1:6B:70:76
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       38AB6903CA8A875F1BD02B2BCF16BFA9D0CE5A4E
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:26 +0000
ROA not before:           Thu 18 Jul 2024 19:57:26 +0000
ROA not after:            Thu 17 Jul 2025 20:02:26 +0000
asID:                     11802
IP address blocks:        200.19.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ab:69:03:ca:8a:87:5f:1b:d0:2b:2b:cf:16:bf:a9:d0:ce:5a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:26 2024 GMT
            Not After : Jul 17 20:02:26 2025 GMT
        Subject: CN=8FAF303396CC6EC919371425065901B6D16B7076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:da:cf:23:b2:8a:85:20:00:6e:b2:4d:a1:
                    13:74:66:32:e5:c3:09:e9:54:08:36:54:34:b7:db:
                    21:90:92:43:d0:e8:36:09:f1:26:a6:cb:cf:9c:d6:
                    32:d6:70:38:4b:23:f9:b3:ad:a0:71:bb:10:c2:9d:
                    4c:73:24:86:e4:04:77:db:b6:07:48:7a:9d:e2:fb:
                    c1:45:e9:b2:0c:e0:34:55:28:eb:4b:55:80:13:ae:
                    dc:99:ec:58:b5:d0:62:5d:ca:c7:c3:92:bc:34:e4:
                    a3:a8:d7:4a:c8:a1:71:8a:d6:3b:0a:5e:74:9f:87:
                    a2:a9:03:5f:df:73:50:77:e9:d2:f0:8e:c2:e1:54:
                    ad:07:10:9b:bc:d1:11:d1:c9:c0:c2:e4:e6:85:95:
                    68:18:ed:28:25:4c:8f:60:de:81:3f:15:7f:8f:57:
                    29:88:df:35:6a:19:62:e8:85:ac:6d:63:45:a9:8a:
                    75:ab:59:71:8c:2e:ed:7e:0c:1b:12:58:95:cc:63:
                    81:4b:cc:9b:52:d4:ac:80:17:92:7f:32:46:a7:d5:
                    3d:53:36:d0:2d:53:ed:57:81:b4:4c:b1:03:9c:7a:
                    49:a0:f6:8b:dd:1c:cf:90:e0:05:df:5f:73:1a:75:
                    9e:3c:ed:3d:74:0c:22:6e:d1:b2:b1:00:15:a9:34:
                    d6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AF:30:33:96:CC:6E:C9:19:37:14:25:06:59:01:B6:D1:6B:70:76
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:cd:da:d5:89:f4:66:95:1f:8b:5f:99:f3:40:83:ed:8f:
         04:b4:e0:68:5f:eb:96:71:2f:08:a2:9d:56:71:19:80:e9:0f:
         d4:ef:5d:45:d4:86:0a:6d:80:28:7f:c1:92:30:45:1a:6c:06:
         ce:26:fd:4e:1c:05:1f:c2:00:d3:96:b0:ad:c5:69:0a:b9:d1:
         35:9b:24:97:7a:c3:3f:43:1e:39:c8:ca:45:60:e0:23:c8:ca:
         76:9b:d4:4a:d5:ea:c8:24:e0:57:39:88:8e:63:c4:13:5a:30:
         11:28:e8:ce:f4:b3:e3:9d:85:4a:66:e3:2f:36:2d:94:a7:29:
         1d:e3:8d:79:15:f1:ae:0a:d9:87:56:0f:08:32:bf:bd:f3:4d:
         cc:9e:20:c9:14:d7:63:a3:a8:f0:ee:b2:ca:b1:db:85:2f:e6:
         9b:06:aa:3b:b1:45:b0:5e:5d:5d:db:c2:f6:84:04:f6:aa:d8:
         30:2c:eb:a0:68:9f:33:90:1d:ef:87:49:e9:3d:7b:96:71:82:
         8d:dd:93:96:fb:ff:e7:91:ca:88:d4:97:81:4f:c1:fb:a9:02:
         64:1d:ed:71:d6:75:06:62:a5:28:7b:39:d3:53:57:f5:b0:61:
         a8:d7:bc:66:3f:97:a5:66:c5:89:a2:c2:d7:74:3b:69:24:8b:
         74:43:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org