Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231382e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3231382e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          rWB8AJy2Y51kZp9I3KBMASuBDC41h4BLUH0dYMcEij4=
Subject key identifier:   E6:F5:0A:32:1B:0B:2B:33:2B:C5:F9:79:7B:B8:AF:46:55:F3:9C:37
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       1A428EFBA92FC7585D2F1B66B7A1CEADCACC8CAC
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231382e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:03:27 +0000
ROA not before:           Thu 18 Jul 2024 19:58:27 +0000
ROA not after:            Thu 17 Jul 2025 20:03:27 +0000
asID:                     11802
IP address blocks:        200.19.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:8e:fb:a9:2f:c7:58:5d:2f:1b:66:b7:a1:ce:ad:ca:cc:8c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:58:27 2024 GMT
            Not After : Jul 17 20:03:27 2025 GMT
        Subject: CN=E6F50A321B0B2B332BC5F9797BB8AF4655F39C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:bd:a4:1d:ef:26:9c:ff:66:5a:0a:46:f1:
                    55:33:7c:18:ca:5e:1e:d8:7b:63:73:ca:24:a4:e6:
                    06:6d:fe:a6:f2:d0:09:aa:94:b5:b3:89:ee:2f:b8:
                    18:2b:7f:73:4f:4b:b1:ad:5d:17:24:2a:71:27:f1:
                    87:d8:86:87:e7:a0:4d:00:1c:c1:43:58:58:b6:dc:
                    70:18:a4:8c:4a:4b:84:5a:66:58:45:d2:16:27:13:
                    4a:73:d5:22:38:c7:d9:a3:22:21:a9:37:da:ca:54:
                    0a:c4:a9:27:01:b8:f7:83:fe:07:a4:72:f9:32:f5:
                    35:a7:59:1f:61:0f:35:24:82:85:16:75:ee:5f:3e:
                    23:4c:55:09:db:b6:39:4a:fe:b3:65:d4:8a:8c:d9:
                    57:61:45:8b:ae:69:fe:b4:49:e6:e8:af:52:cf:32:
                    35:e8:fd:88:04:f8:ac:84:fc:3c:1a:08:b6:39:8b:
                    70:8a:36:cf:79:fa:11:8e:39:e2:2e:0b:ca:78:e4:
                    06:0d:4f:a6:72:d2:c5:50:21:ed:03:6f:9f:06:05:
                    42:37:13:75:ff:94:ab:02:5c:c2:2f:02:e0:6a:80:
                    0b:31:09:13:30:0b:b0:d8:4d:22:69:54:5d:39:20:
                    b5:bf:c7:87:ef:1d:46:bf:3c:58:2e:79:bb:7f:3f:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:0A:32:1B:0B:2B:33:2B:C5:F9:79:7B:B8:AF:46:55:F3:9C:37
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3231382e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:11:a6:1d:62:1c:ca:43:50:c5:dd:10:72:be:17:d7:c9:3f:
         47:07:ee:08:7a:11:b5:66:0a:42:2e:5e:99:d2:47:c3:22:0c:
         c6:8e:a5:64:e9:25:2f:ec:59:fc:fb:8f:01:9c:5c:ea:fe:e5:
         d6:b0:5a:9a:b5:e3:0a:04:ab:38:ba:d4:36:ed:0c:15:be:fb:
         9b:e7:f8:c0:d0:21:aa:95:a9:9d:bc:79:d3:75:89:f6:ea:26:
         ea:a4:19:ba:b4:83:94:66:40:61:df:18:9e:f6:d1:e9:98:7c:
         40:61:db:1b:84:36:04:76:8c:b0:33:2a:9d:81:89:0a:48:3e:
         85:8c:52:49:20:37:7d:53:b4:d2:de:d4:2b:bf:e2:20:0f:42:
         4d:5e:d0:ba:3f:ed:bf:24:14:8b:d2:ab:01:51:de:e8:21:75:
         5a:ba:7b:36:f0:07:f5:1f:83:df:41:42:54:e8:bc:fb:c6:c0:
         f2:23:c2:ab:c4:e9:12:0b:0e:b9:dc:a7:50:8d:7b:de:bf:2a:
         20:36:a0:0a:30:09:3a:ec:3b:88:de:ba:59:a7:61:46:31:3e:
         18:b7:7f:87:c2:95:1d:d3:4e:e3:b5:70:1f:7c:82:68:11:8a:
         51:9f:77:03:9e:1f:82:c3:30:23:1e:7b:a9:02:67:9d:f0:ef:
         40:93:28:31
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGkKO+6kvx1hdLxtmt6HOrcrMjKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDA3MTgxOTU4MjdaFw0yNTA3MTcyMDAzMjdaMDMxMTAvBgNV
BAMTKEU2RjUwQTMyMUIwQjJCMzMyQkM1Rjk3OTdCQjhBRjQ2NTVGMzlDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnr2kHe8mnP9mWgpG8VUzfBjK
Xh7Ye2NzyiSk5gZt/qby0AmqlLWzie4vuBgrf3NPS7GtXRckKnEn8YfYhofnoE0A
HMFDWFi23HAYpIxKS4RaZlhF0hYnE0pz1SI4x9mjIiGpN9rKVArEqScBuPeD/gek
cvky9TWnWR9hDzUkgoUWde5fPiNMVQnbtjlK/rNl1IqM2VdhRYuuaf60Sebor1LP
MjXo/YgE+KyE/DwaCLY5i3CKNs95+hGOOeIuC8p45AYNT6Zy0sVQIe0Db58GBUI3
E3X/lKsCXMIvAuBqgAsxCRMwC7DYTSJpVF05ILW/x4fvHUa/PFguebt/P8FtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5vUKMhsLKzMrxfl5e7ivRlXznDcwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMjMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPaMA0GCSqGSIb3DQEBCwUAA4IBAQCvEaYdYhzK
Q1DF3RByvhfXyT9HB+4IehG1ZgpCLl6Z0kfDIgzGjqVk6SUv7Fn8+48BnFzq/uXW
sFqateMKBKs4utQ27QwVvvub5/jA0CGqlamdvHnTdYn26ibqpBm6tIOUZkBh3xie
9tHpmHxAYdsbhDYEdoywMyqdgYkKSD6FjFJJIDd9U7TS3tQrv+IgD0JNXtC6P+2/
JBSL0qsBUd7oIXVauns28Af1H4PfQUJU6Lz7xsDyI8KrxOkSCw653KdQjXvevyog
NqAKMAk67DuI3rpZp2FGMT4Yt3+HwpUd007jtXAffIJoEYpRn3cDnh+CwzAjHnup
Amed8O9Akygx
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:21 2024 by rpki-client on console-fra.rpki-client.org