Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e3139322e36342e302f32302d3234203d3e203131383032.roa
File:                     3230302e3139322e36342e302f32302d3234203d3e203131383032.roa (raw, json)
Hash identifier:          J/vYlc4c2whq3XzAYZCRqBEQDLCKg2mn4NkqOxwIIKo=
Subject key identifier:   26:02:79:15:B9:42:5A:01:9E:34:60:7A:DB:EC:D8:70:00:75:D7:F0
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       3A855F9FB6093F22DF9FD513750B26E6E109C37B
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e3139322e36342e302f32302d3234203d3e203131383032.roa
Signing time:             Thu 18 Jul 2024 20:01:18 +0000
ROA not before:           Thu 18 Jul 2024 19:56:18 +0000
ROA not after:            Thu 17 Jul 2025 20:01:18 +0000
asID:                     11802
IP address blocks:        200.192.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:85:5f:9f:b6:09:3f:22:df:9f:d5:13:75:0b:26:e6:e1:09:c3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Jul 18 19:56:18 2024 GMT
            Not After : Jul 17 20:01:18 2025 GMT
        Subject: CN=26027915B9425A019E34607ADBECD8700075D7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:f8:47:2f:43:95:94:d3:40:d4:0f:66:ad:
                    0f:9e:1d:64:b4:8d:90:5a:e1:87:fa:1c:28:d6:a3:
                    d3:65:11:3a:54:20:e0:1f:13:6a:1d:99:b2:80:3d:
                    c4:93:f5:ef:79:fe:82:0a:d4:38:89:50:b5:2d:b8:
                    6b:f7:06:b1:41:fb:6c:c4:58:48:2a:e9:0a:32:9b:
                    59:33:06:b5:b3:48:41:c7:70:9a:89:e3:8e:24:bd:
                    5b:35:3b:f9:60:b5:cd:a9:14:ff:81:92:74:56:09:
                    fc:04:1e:5c:7a:82:73:ad:b6:85:c7:16:64:4a:d1:
                    b4:e5:43:04:d2:3d:ce:ea:fa:4b:d1:a0:c4:3e:b4:
                    1e:4f:8a:55:42:db:68:aa:a5:1f:33:d6:51:13:43:
                    df:99:77:33:b7:26:4a:9e:af:c3:34:40:f7:8d:5c:
                    5d:79:ba:22:29:56:6e:09:13:4c:20:6a:64:26:b4:
                    50:fc:fd:c6:62:7a:d7:6d:60:43:8f:f3:de:f5:31:
                    a4:fb:25:53:8c:81:1d:c5:d0:f1:86:90:cc:76:67:
                    13:3c:bc:ab:ae:4d:3e:6a:74:9e:53:5b:02:63:5c:
                    c1:ca:2a:c1:6d:64:5d:ca:cf:e9:ff:ef:a6:ff:bf:
                    5b:3c:eb:80:78:d3:bf:41:51:ff:95:c3:04:1f:9d:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:02:79:15:B9:42:5A:01:9E:34:60:7A:DB:EC:D8:70:00:75:D7:F0
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/3230302e3139322e36342e302f32302d3234203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:56:d8:14:aa:1b:2f:60:e1:88:a1:fa:57:2d:c0:86:54:
         b5:38:0d:5a:81:80:71:b6:b1:fe:c7:dc:41:1c:92:64:a5:ff:
         b5:61:73:e4:49:48:e0:55:5f:f2:28:10:43:23:9c:d2:5d:d0:
         e5:c7:28:54:d7:39:05:f2:1d:44:1a:bb:04:d1:cd:15:ed:29:
         c2:5e:49:58:8b:95:18:9f:2f:e0:12:4e:8a:97:38:6b:fa:0b:
         31:de:34:90:fa:84:83:ab:e9:2b:9a:72:f3:e7:18:43:83:50:
         1b:e2:78:b3:df:bb:85:6f:a5:49:ac:85:82:54:a6:9f:f4:4c:
         4b:26:ab:0a:0b:5a:44:74:c6:cd:2a:37:d4:88:28:b7:c1:1f:
         c1:3e:5b:53:6a:9b:9a:ed:cb:63:e2:47:12:43:e2:7c:e2:40:
         4d:ee:21:62:45:c4:e8:b3:ff:78:46:89:fb:a4:3c:d8:0b:86:
         32:c0:86:9f:de:1f:a3:c6:0c:33:c5:42:aa:9d:a6:34:c6:58:
         11:9b:c0:ad:4e:da:62:45:e0:a5:90:ac:56:f2:61:9e:2d:a0:
         4f:9d:2b:8f:0a:93:e9:17:8b:a7:b6:80:0f:bb:98:fc:22:b7:
         12:c7:e2:7e:1c:10:e7:1c:20:2a:3e:6a:c9:c0:f4:41:64:6f:
         2a:78:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:38 2024 by rpki-client on console-ams.rpki-client.org