Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230352e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3230352e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          BIZO8FKSa7c38wjufgEwmTD3ChYb3MnfgXW055w5p+M=
Subject key identifier:   9D:1F:65:65:2B:B7:43:FC:10:24:89:4B:A1:5B:36:2A:2A:28:6B:C6
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       40E4E2748B6CAED63E0640764C5E789D525374AA
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230352e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:35 +0000
ROA not before:           Thu 18 Jul 2024 19:57:35 +0000
ROA not after:            Thu 17 Jul 2025 20:02:35 +0000
asID:                     11802
IP address blocks:        200.19.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e4:e2:74:8b:6c:ae:d6:3e:06:40:76:4c:5e:78:9d:52:53:74:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:35 2024 GMT
            Not After : Jul 17 20:02:35 2025 GMT
        Subject: CN=9D1F65652BB743FC1024894BA15B362A2A286BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:a1:d2:ba:36:82:f1:ac:b2:92:47:f7:e5:
                    11:52:68:0f:bd:30:03:77:fd:74:df:a6:23:79:59:
                    12:e0:c6:81:72:27:8e:25:34:b6:0e:c4:e0:2d:95:
                    bf:ed:e0:d0:17:62:1e:8c:0c:93:8b:cc:a6:ca:af:
                    33:d5:85:1b:0d:96:cb:ba:ca:85:84:20:2e:de:00:
                    33:33:15:b9:a1:ca:d2:83:4d:3b:61:9a:24:90:bc:
                    b0:ab:a7:bf:2c:0c:f0:aa:28:a9:c2:04:63:43:25:
                    c4:56:79:4f:4a:23:72:52:97:51:94:57:eb:9b:e6:
                    fc:1b:ec:60:f4:20:48:f3:a9:e7:64:b8:73:03:a4:
                    4d:45:3d:1a:44:f6:5c:18:b1:8e:74:56:4a:f6:4c:
                    29:e4:8d:b9:bd:e6:84:34:48:ea:8e:44:0d:9c:4f:
                    70:61:df:dd:02:86:ce:d4:e9:3a:03:bf:99:e8:42:
                    ef:32:c0:ae:57:f9:1b:ed:27:aa:50:cf:50:e1:9e:
                    57:cc:31:18:8d:55:5e:29:0f:dd:1d:cc:5c:96:25:
                    0d:63:15:9f:aa:4a:73:2e:07:54:1b:00:1b:1a:af:
                    90:b2:b5:c9:21:e1:70:db:dc:02:8b:3b:7d:f2:d5:
                    ce:fa:bd:e6:ba:02:ed:5a:10:5b:64:05:af:d1:8c:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1F:65:65:2B:B7:43:FC:10:24:89:4B:A1:5B:36:2A:2A:28:6B:C6
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3230352e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:75:24:ab:5d:5a:d8:84:99:f0:8d:25:fe:f2:ba:06:de:0e:
         87:da:da:4d:24:a6:9c:9d:43:6e:a5:95:e5:b3:90:7e:a4:dd:
         7a:61:4f:96:dd:e7:2e:5d:8a:75:cb:26:41:ec:bf:9b:55:b4:
         11:71:6c:a7:d5:2a:b0:6e:3d:89:9f:19:e1:ed:dc:b3:73:2f:
         a3:95:19:7d:41:f2:7a:1e:ca:28:e2:1d:6f:03:dd:ce:c4:a1:
         8d:9b:fc:10:58:97:f7:f0:ab:4c:75:79:7a:de:26:59:31:2a:
         9a:48:25:07:79:12:91:0b:ce:42:2c:cd:11:30:c6:a7:d5:19:
         45:59:84:94:bd:ef:e2:ab:48:39:bc:0f:ae:53:20:6a:e7:1b:
         25:b1:e4:57:e1:bb:a6:fc:f0:59:77:4c:76:00:d5:5a:06:23:
         5b:26:4f:f8:37:7f:e8:49:3b:00:4f:57:c6:aa:d0:be:47:e5:
         a6:de:63:65:e9:40:7e:ce:03:99:19:f5:98:8d:0d:f3:82:e1:
         b2:5a:2c:36:62:95:bd:ce:5d:96:f4:64:b5:0f:de:1d:78:e9:
         5b:6c:a9:ae:45:91:22:f0:8d:fe:83:9b:8d:70:5a:f5:1b:39:
         8a:ac:d3:c9:32:b7:c8:2d:0d:d3:aa:a7:0c:bc:0b:aa:00:b5:
         a5:77:ee:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQOTidItsrtY+BkB2TF54nVJTdKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDA3MTgxOTU3MzVaFw0yNTA3MTcyMDAyMzVaMDMxMTAvBgNV
BAMTKDlEMUY2NTY1MkJCNzQzRkMxMDI0ODk0QkExNUIzNjJBMkEyODZCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zqHSujaC8ayykkf35RFSaA+9
MAN3/XTfpiN5WRLgxoFyJ44lNLYOxOAtlb/t4NAXYh6MDJOLzKbKrzPVhRsNlsu6
yoWEIC7eADMzFbmhytKDTTthmiSQvLCrp78sDPCqKKnCBGNDJcRWeU9KI3JSl1GU
V+ub5vwb7GD0IEjzqedkuHMDpE1FPRpE9lwYsY50Vkr2TCnkjbm95oQ0SOqORA2c
T3Bh390Chs7U6ToDv5noQu8ywK5X+RvtJ6pQz1DhnlfMMRiNVV4pD90dzFyWJQ1j
FZ+qSnMuB1QbABsar5Cytckh4XDb3AKLO33y1c76vea6Au1aEFtkBa/RjDAxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnR9lZSu3Q/wQJIlLoVs2Kiooa8YwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMjMwMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPNMA0GCSqGSIb3DQEBCwUAA4IBAQChdSSrXVrY
hJnwjSX+8roG3g6H2tpNJKacnUNupZXls5B+pN16YU+W3ecuXYp1yyZB7L+bVbQR
cWyn1Sqwbj2Jnxnh7dyzcy+jlRl9QfJ6Hsoo4h1vA93OxKGNm/wQWJf38KtMdXl6
3iZZMSqaSCUHeRKRC85CLM0RMMan1RlFWYSUve/iq0g5vA+uUyBq5xslseRX4bum
/PBZd0x2ANVaBiNbJk/4N3/oSTsAT1fGqtC+R+Wm3mNl6UB+zgOZGfWYjQ3zguGy
Wiw2YpW9zl2W9GS1D94deOlbbKmuRZEi8I3+g5uNcFr1GzmKrNPJMrfILQ3TqqcM
vAuqALWld+4k
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org