Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231372e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231372e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          3EZucIh4yfxdh+462NhuWdB+LMe6YhM0lhlqKUu2dUE=
Subject key identifier:   12:85:BB:02:32:D0:50:69:EE:8D:C6:4E:2A:8D:8E:87:B2:CE:DF:19
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       46E57FD1B5C5396B46946C0D0460C2F951EBF575
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231372e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:03:23 +0000
ROA not before:           Thu 18 Jul 2024 19:58:23 +0000
ROA not after:            Thu 17 Jul 2025 20:03:23 +0000
asID:                     11802
IP address blocks:        200.19.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:7f:d1:b5:c5:39:6b:46:94:6c:0d:04:60:c2:f9:51:eb:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:58:23 2024 GMT
            Not After : Jul 17 20:03:23 2025 GMT
        Subject: CN=1285BB0232D05069EE8DC64E2A8D8E87B2CEDF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:3d:23:ee:95:7f:63:b3:b5:17:9c:ed:8b:
                    dd:c0:08:0a:3d:89:fb:85:8b:ce:02:82:8b:56:a5:
                    63:e6:b9:26:b8:c8:9f:4f:64:65:34:6b:49:eb:d9:
                    e7:98:7b:76:69:b6:4d:aa:5e:bd:d0:2d:53:0f:fc:
                    6f:f2:2f:65:2d:c9:b6:be:2c:8f:ed:0b:96:fb:9f:
                    9f:ca:b7:f9:ce:a4:e7:45:19:21:e5:b3:d5:75:8b:
                    d0:38:54:8a:ec:41:33:b8:b9:63:c2:92:e8:e9:d2:
                    c6:ee:e9:f8:3c:6c:9b:dc:0f:5f:24:f8:ca:9c:62:
                    bc:4a:6b:71:68:05:0d:3a:54:0d:04:24:82:44:11:
                    51:4c:9e:11:f2:56:0e:24:8b:e7:e4:ba:a4:c3:79:
                    24:e0:2a:d3:85:4b:31:8c:cb:d6:49:c9:f6:70:b6:
                    90:69:85:df:4c:21:c4:eb:c3:9f:42:df:75:e5:19:
                    4a:09:12:6c:31:4f:9d:d8:2b:0a:42:87:a4:9a:c8:
                    74:ba:ff:87:3b:ca:f0:e4:ee:b5:38:ba:85:7f:15:
                    9f:0e:de:5c:52:65:53:e3:bb:25:93:53:10:0c:50:
                    58:01:e6:be:21:2c:29:03:27:3b:87:38:c2:0b:1f:
                    3d:c3:eb:1a:03:0e:58:a8:45:36:e2:c4:50:45:97:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:85:BB:02:32:D0:50:69:EE:8D:C6:4E:2A:8D:8E:87:B2:CE:DF:19
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231372e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:77:28:04:7c:a5:3b:78:1d:2e:ae:4e:9a:e4:a0:28:6d:ef:
         c9:3d:59:a3:6c:e5:33:23:9c:c1:1d:71:57:d8:99:c3:6e:03:
         5c:23:5b:47:17:51:25:71:e1:37:b3:3c:5e:cb:5e:90:8e:2d:
         8d:32:6b:5c:d7:ca:aa:8d:91:57:ca:6d:92:cd:51:b6:18:49:
         c5:45:25:91:11:18:92:48:de:ae:11:c8:f7:54:98:6a:50:06:
         71:ff:c8:d9:5f:b7:11:0d:c9:89:25:8e:8e:82:ea:f3:7a:52:
         15:78:ed:e0:8e:9c:e7:79:37:22:bc:2c:f5:2d:93:9b:39:b1:
         84:ee:c7:66:fc:ce:bd:0d:e6:f0:2c:4c:94:36:ee:a7:20:2d:
         61:35:d9:8c:d6:6e:2e:18:0e:b0:2e:b0:83:4b:84:9e:12:bd:
         e2:ad:c6:ef:39:33:49:4e:bd:b8:ac:bb:3e:61:5d:55:8c:88:
         d2:81:f5:73:51:22:d9:c9:41:56:5b:a7:fa:5d:d0:e8:8a:4f:
         1a:b0:85:7b:e6:1f:25:c3:f9:34:9d:b6:79:80:69:a7:b9:7c:
         e1:b0:b4:9b:11:f5:c6:04:3e:6c:f0:04:d1:f8:33:70:79:18:
         66:1c:20:b7:8c:eb:fa:c2:a4:75:3e:56:f4:3e:68:8c:b8:ec:
         e0:10:49:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org