Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231322e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231322e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          OIyiLgC04uOx0KMzLun4ATili9YLCWGRa2k1Q3UHZoA=
Subject key identifier:   04:49:25:C8:1E:23:2D:E0:1F:30:F6:F7:54:87:46:1E:4D:4B:9B:5A
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       531EEB91698AD85DDA8EB7F175025A14223415C5
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231322e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:02:52 +0000
ROA not before:           Thu 18 Jul 2024 19:57:52 +0000
ROA not after:            Thu 17 Jul 2025 20:02:52 +0000
asID:                     11802
IP address blocks:        200.19.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1e:eb:91:69:8a:d8:5d:da:8e:b7:f1:75:02:5a:14:22:34:15:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:57:52 2024 GMT
            Not After : Jul 17 20:02:52 2025 GMT
        Subject: CN=044925C81E232DE01F30F6F75487461E4D4B9B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:49:b5:f5:d5:25:ad:b1:a3:50:70:fe:a6:
                    c9:93:8f:a9:c0:92:70:0d:37:b2:56:eb:5d:7c:74:
                    39:96:88:76:c9:c2:56:ba:92:a2:c0:57:47:59:2e:
                    e0:a5:35:d9:28:19:24:62:c1:f1:8a:b8:89:ce:96:
                    8c:54:a4:a1:df:98:b5:d8:4c:54:14:58:22:36:31:
                    4c:72:32:ca:c0:06:db:7e:33:7a:0b:1e:d9:a9:01:
                    dd:88:41:5a:c2:1a:71:9e:14:01:7e:b6:28:45:d3:
                    40:4b:6e:c3:c4:55:ba:bb:07:4b:6e:a6:ff:f4:a8:
                    64:95:0f:20:92:99:f6:4c:b0:18:77:b6:f2:3c:74:
                    6f:82:c9:b6:98:c7:da:1f:e6:a2:41:d8:09:e9:02:
                    e0:c9:b3:e5:3e:6c:ef:5b:b1:51:65:d5:2f:57:e4:
                    98:0d:99:c5:88:23:19:89:90:a9:24:ae:4a:5a:be:
                    33:8e:67:63:d2:6d:3c:02:e3:bb:89:11:79:fd:08:
                    f4:fe:0c:29:84:ba:a7:61:10:92:b1:a4:54:ce:45:
                    13:dd:4d:d8:7b:87:48:7a:a1:66:c3:b9:45:9e:a2:
                    57:89:c7:71:0b:9c:1d:d3:a7:e3:b0:96:8d:20:1f:
                    6e:e4:b4:e2:cd:ea:78:10:75:f5:1c:a4:69:c2:f8:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:49:25:C8:1E:23:2D:E0:1F:30:F6:F7:54:87:46:1E:4D:4B:9B:5A
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231322e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:43:62:17:91:c7:d9:c1:52:1f:21:5f:5d:85:b0:37:a8:cf:
         86:84:00:71:e4:ab:e6:cc:20:05:2e:d3:93:85:02:16:4d:c2:
         ae:a5:cd:03:15:ab:c4:c7:83:1b:df:62:f8:4f:c8:3f:62:97:
         cf:d6:f8:dd:64:0c:a4:74:c2:a7:30:e4:be:f8:f6:da:56:87:
         8a:03:39:9a:2b:34:d0:e6:1d:93:4f:8d:09:b9:36:8f:b5:9b:
         91:d4:4b:77:c0:05:cb:43:3c:9c:14:4f:2a:61:32:2b:81:56:
         55:23:bf:4c:6b:3b:fc:1a:48:5a:d1:06:a7:70:32:28:47:0c:
         92:79:0c:50:6d:36:e4:94:91:9c:2a:d0:ff:8c:7f:eb:e7:ac:
         e6:e5:b1:74:77:92:61:d0:98:2d:56:42:b7:76:ba:29:36:91:
         77:9c:62:3e:30:7a:07:65:3a:8e:be:01:c6:2f:90:6d:b4:68:
         d5:b4:9b:80:a2:a1:6a:c7:6d:98:b7:ba:f5:31:a3:f1:59:7f:
         40:9e:35:91:77:53:cf:b9:4a:c1:15:20:bd:06:e0:6a:92:78:
         ca:88:0c:f1:be:6b:09:51:dd:40:79:52:b6:fb:e3:36:af:8b:
         3e:b6:8d:f9:b0:f3:bd:22:97:b4:ae:e5:ed:dc:4e:6e:fc:10:
         8c:0f:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org