Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232302e302f32342d3234203d3e203131383032.roa
File:                     3230302e31392e3232302e302f32342d3234203d3e203131383032.roa (raw, json)
Hash identifier:          cx0dEVysRP0ckkL6Uc0ZLSbalOg118S4rB5y7yEhh/k=
Subject key identifier:   51:83:CE:C2:5C:AE:B8:0D:BF:69:B6:DA:43:CB:CD:11:32:08:4F:26
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       0615057EA2ABF0F3A525C4E1CAB2A19C602BFC2B
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232302e302f32342d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:03:31 +0000
ROA not before:           Thu 18 Jul 2024 19:58:31 +0000
ROA not after:            Thu 17 Jul 2025 20:03:31 +0000
asID:                     11802
IP address blocks:        200.19.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:15:05:7e:a2:ab:f0:f3:a5:25:c4:e1:ca:b2:a1:9c:60:2b:fc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:58:31 2024 GMT
            Not After : Jul 17 20:03:31 2025 GMT
        Subject: CN=5183CEC25CAEB80DBF69B6DA43CBCD1132084F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:33:75:30:78:db:2b:61:dd:0d:89:81:62:
                    ca:37:7c:81:84:ae:fc:93:98:bd:02:dc:01:e8:e5:
                    d4:5e:5e:e4:fb:24:67:0f:0c:3c:23:4e:45:b4:8c:
                    82:e4:f6:15:84:c7:cd:dd:8e:e1:61:01:ae:c0:56:
                    b5:c7:b2:5d:df:9a:6d:09:d8:d2:64:80:f4:6b:14:
                    8c:37:02:1c:96:08:fb:92:2b:3a:fa:93:22:eb:aa:
                    fd:31:d7:39:01:f2:95:cd:79:a0:7d:f1:fc:40:54:
                    78:a0:d1:5d:fd:b0:f7:5a:ec:74:11:ae:00:d5:06:
                    5d:b4:49:13:7d:9b:27:0b:e1:c7:1a:38:c2:83:57:
                    61:96:6b:5d:0f:9e:77:81:1f:0f:63:2c:db:75:98:
                    14:f8:71:cc:c0:38:d2:57:e4:ec:63:69:70:f4:bf:
                    e2:38:a8:24:b9:03:bf:cd:b4:aa:e2:a3:58:18:0d:
                    75:9c:d5:f5:c8:c8:3b:57:a7:18:a4:7a:db:27:46:
                    68:fc:8a:3e:21:c5:4c:59:84:2e:e0:94:ef:af:17:
                    73:e9:4f:cf:97:87:4c:74:c0:24:04:e7:cf:dd:5c:
                    05:01:cf:4e:26:c8:27:13:8e:db:8d:21:71:8e:cc:
                    25:ed:4a:88:c2:f7:da:8f:b8:f8:d1:36:5f:72:63:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:83:CE:C2:5C:AE:B8:0D:BF:69:B6:DA:43:CB:CD:11:32:08:4F:26
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e31392e3232302e302f32342d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:c6:cf:05:2b:0e:f4:a1:17:67:32:a3:1a:7e:91:30:62:
         14:9b:60:26:51:66:37:cb:38:01:00:c7:12:82:3d:72:fc:b3:
         d0:68:d9:ab:50:e0:da:b2:58:0d:1e:b9:e9:74:57:77:ce:8d:
         9c:cd:4b:25:af:83:5c:07:20:d1:49:f5:c8:f5:e2:d5:e6:16:
         90:35:18:c3:84:87:6f:fb:f9:c7:eb:0f:c3:ed:00:40:7f:ad:
         5a:87:e1:69:60:01:fa:f2:6c:08:d2:38:e7:13:2c:a5:1f:c6:
         ba:64:2e:da:a3:55:a8:ec:fe:15:e9:8d:6c:65:c2:e6:a3:d3:
         09:36:c0:0d:c5:a6:72:a7:d7:11:2a:c1:38:ba:a3:7f:f4:5f:
         d3:86:69:5b:80:11:3b:2b:9c:4b:1b:92:97:d0:d2:24:0e:02:
         56:27:59:98:3e:36:02:34:2e:e7:cd:5d:60:e6:c9:a4:4f:3f:
         8c:de:b5:44:2e:a6:1f:ab:65:0e:af:bb:03:78:8b:5e:14:dc:
         d2:a0:31:ca:09:d3:2b:42:5f:55:b9:8f:e8:4a:eb:6b:73:45:
         2b:87:b8:3e:b9:b5:4e:21:c1:9f:bb:65:5a:1c:cf:f4:96:24:
         2b:94:59:26:b1:62:d8:96:ce:25:b1:f2:85:cd:a6:c1:dc:f0:
         26:87:bb:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBhUFfqKr8POlJcThyrKhnGAr/CswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyMkIzRjFBQzZEQkRCQTAzNjM4MUMxQTMzNzYzQjdB
NTNCMjlBMzAeFw0yNDA3MTgxOTU4MzFaFw0yNTA3MTcyMDAzMzFaMDMxMTAvBgNV
BAMTKDUxODNDRUMyNUNBRUI4MERCRjY5QjZEQTQzQ0JDRDExMzIwODRGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQzN1MHjbK2HdDYmBYso3fIGE
rvyTmL0C3AHo5dReXuT7JGcPDDwjTkW0jILk9hWEx83djuFhAa7AVrXHsl3fmm0J
2NJkgPRrFIw3AhyWCPuSKzr6kyLrqv0x1zkB8pXNeaB98fxAVHig0V39sPda7HQR
rgDVBl20SRN9mycL4ccaOMKDV2GWa10PnneBHw9jLNt1mBT4cczAONJX5OxjaXD0
v+I4qCS5A7/NtKrio1gYDXWc1fXIyDtXpxiketsnRmj8ij4hxUxZhC7glO+vF3Pp
T8+Xh0x0wCQE58/dXAUBz04myCcTjtuNIXGOzCXtSojC99qPuPjRNl9yY/NdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUYPOwlyuuA2/abbaQ8vNETIITyYwHwYDVR0j
BBgwFoAUFSKz8axtvboDY4HBozdjt6U7KaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFrdTh4SmNCTWhqazRBS2NSZEpKR2dxTTU5SDJUQWFhV0NHN0xLeEUy
WmIvMC8xNTIyQjNGMUFDNkRCREJBMDM2MzgxQzFBMzM3NjNCN0E1M0IyOUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MjJCM0YxQUM2REJEQkEw
MzYzODFDMUEzMzc2M0I3QTUzQjI5QTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Rha3U4eEpjQk1oams0QUtjUmRKSkdncU01OUgyVEFhYVdDRzdMS3hFMlpiLzAv
MzIzMDMwMmUzMTM5MmUzMjMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMx
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyBPcMA0GCSqGSIb3DQEBCwUAA4IBAQBwycbPBSsO
9KEXZzKjGn6RMGIUm2AmUWY3yzgBAMcSgj1y/LPQaNmrUODaslgNHrnpdFd3zo2c
zUslr4NcByDRSfXI9eLV5haQNRjDhIdv+/nH6w/D7QBAf61ah+FpYAH68mwI0jjn
EyylH8a6ZC7ao1Wo7P4V6Y1sZcLmo9MJNsANxaZyp9cRKsE4uqN/9F/ThmlbgBE7
K5xLG5KX0NIkDgJWJ1mYPjYCNC7nzV1g5smkTz+M3rVELqYfq2UOr7sDeIteFNzS
oDHKCdMrQl9VuY/oSutrc0Urh7g+ubVOIcGfu2VaHM/0liQrlFkmsWLYls4lsfKF
zabB3PAmh7vd
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org