Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231312e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          d3fGMqkPewaLsTHGdYlbge+DVUuQF4wwbpkuuj8KdyI=
Subject key identifier:   7A:0B:5D:8A:D2:03:27:BD:9B:A1:37:90:55:79:50:92:E9:2F:F3:1B
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       498B54DC5D5CA90287AB5B134D6937C1E61EC052
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:49 +0000
ROA not before:           Thu 18 Jul 2024 19:57:49 +0000
ROA not after:            Thu 17 Jul 2025 20:02:49 +0000
asID:                     11802
IP address blocks:        200.19.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8b:54:dc:5d:5c:a9:02:87:ab:5b:13:4d:69:37:c1:e6:1e:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:49 2024 GMT
            Not After : Jul 17 20:02:49 2025 GMT
        Subject: CN=7A0B5D8AD20327BD9BA1379055795092E92FF31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:57:45:84:cb:5b:8c:8c:3d:88:85:79:44:
                    a4:1d:87:6d:27:fe:55:1c:53:92:f7:27:2f:d1:7c:
                    e8:04:3b:b4:78:12:69:3b:71:20:63:f2:c9:d7:b8:
                    80:e3:e6:65:ac:df:46:ed:a4:bf:9b:3d:b9:27:c7:
                    79:e8:9f:0c:51:e2:6e:74:a5:d9:42:7f:00:07:f5:
                    a5:df:f7:a5:d2:26:84:87:a1:5c:e0:8b:a1:98:f9:
                    f3:8e:ac:da:69:82:2e:69:8d:e4:97:8f:01:fe:17:
                    2a:87:fb:da:76:3e:4f:5d:0a:8e:7a:c6:67:ff:05:
                    73:4a:11:d8:fc:25:68:39:6c:e6:b4:b4:77:c5:9c:
                    21:73:00:b7:a4:30:1c:58:09:3b:1d:d4:48:86:ba:
                    80:25:3f:33:a6:6b:30:7a:da:ef:9f:90:25:9d:a7:
                    09:f8:7f:92:74:62:81:e8:6c:56:a3:74:bf:3b:ee:
                    dc:5c:f6:54:e2:63:c4:03:77:15:47:43:d1:12:34:
                    f9:f8:ed:7a:87:af:8f:0e:fd:4a:7e:83:f7:71:2a:
                    03:94:f4:8e:07:58:55:13:53:3f:10:58:f6:87:75:
                    b7:50:fc:61:7a:27:5c:95:22:1e:02:6e:1c:b2:1a:
                    50:a0:e0:df:3f:0f:01:a8:3e:00:60:61:87:00:86:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:5D:8A:D2:03:27:BD:9B:A1:37:90:55:79:50:92:E9:2F:F3:1B
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231312e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:54:c4:51:9d:cc:21:e9:05:89:f0:ef:6e:5b:1a:7b:ee:11:
         01:42:e5:0f:cd:6d:61:77:22:5c:cd:95:8c:bf:cf:12:15:67:
         e1:90:5c:e9:2c:22:d8:1f:78:39:63:fb:b7:0c:70:0f:16:de:
         b1:59:c7:64:4e:b3:2c:6d:00:f4:4d:04:fc:e2:81:f4:94:5b:
         19:97:08:56:d9:ae:df:e8:ab:9a:d8:a6:ae:3a:b9:dd:d7:5d:
         ce:1a:1b:7d:79:84:a4:dd:f6:29:1f:ae:00:44:93:e6:d1:73:
         e9:4b:5d:de:cc:97:a3:82:e5:bb:cf:11:1a:b0:2e:f1:ed:5e:
         9c:bc:33:35:a2:85:49:2f:07:4f:b9:1f:47:bc:6c:5e:b7:17:
         d8:70:9a:e2:1d:f6:08:c4:0d:6c:49:63:86:4c:47:a0:15:c8:
         04:2f:bc:e3:c9:35:db:83:53:ad:81:9b:a6:7a:94:d3:3a:b1:
         b4:c5:97:a1:21:da:63:73:af:39:6d:1d:e2:d8:99:f8:eb:a6:
         35:b3:15:6d:fa:6c:68:94:5d:ef:9a:bc:17:eb:76:6d:9c:b6:
         39:4b:4a:69:55:7b:a6:b7:23:1e:90:27:2e:52:d9:c5:0d:25:
         db:0a:77:b4:d8:c9:26:82:c9:ef:81:da:33:1c:95:18:d1:bb:
         4e:45:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org