Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa
File:                     3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa (raw, json)
Hash identifier:          cUK596lhV2+ZHnw5Yuq0eYQCV+JqtWQK/mcPiZ7B4rk=
Subject key identifier:   BD:BD:46:AC:4E:D2:8F:9B:5A:F8:77:6B:AF:D4:48:0C:55:D4:63:2F
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       654FCE87C24A1CC905EBADB1D78EF54FF43675F6
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:24 +0000
ROA not before:           Fri 18 Jul 2025 20:10:24 +0000
ROA not after:            Fri 17 Jul 2026 20:15:24 +0000
asID:                     1916
IP address blocks:        200.128.192.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4f:ce:87:c2:4a:1c:c9:05:eb:ad:b1:d7:8e:f5:4f:f4:36:75:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:24 2025 GMT
            Not After : Jul 17 20:15:24 2026 GMT
        Subject: CN=BDBD46AC4ED28F9B5AF8776BAFD4480C55D4632F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:36:f7:ea:73:08:0d:67:0d:45:c6:76:ad:
                    b6:d1:2f:2a:a9:9b:9f:3a:bf:d9:38:7e:65:e1:3a:
                    db:b6:4d:90:52:ca:2a:33:bd:f8:ce:39:42:c2:bf:
                    9f:69:0c:0f:24:a5:a4:d1:dc:e7:b2:ea:a3:07:a0:
                    40:2b:15:71:9a:a0:9b:48:eb:cc:7b:46:bc:62:ab:
                    64:bf:b4:ca:7e:e6:4d:0a:a7:b6:98:4b:92:0f:c7:
                    b9:51:30:a0:eb:eb:f3:07:20:89:a4:0e:bf:e8:fe:
                    59:1a:d2:22:f7:35:26:24:74:d1:4c:01:d4:aa:21:
                    93:a0:4b:78:a7:1e:84:1f:99:aa:9d:6a:b1:83:ff:
                    8c:5f:7c:d7:57:f7:05:aa:7c:ea:11:26:9b:ee:32:
                    19:ed:44:0f:56:47:1c:f1:85:ba:ad:56:49:73:7d:
                    62:ec:e4:79:86:93:05:ca:93:c6:f7:1c:00:66:74:
                    bd:19:a6:cf:6e:df:68:b4:26:ef:be:e1:c6:ab:e7:
                    f5:7e:60:4e:d0:0d:17:2d:7d:67:0b:a0:d8:0e:3b:
                    e7:b1:4f:f4:77:77:a0:10:6f:4a:f6:23:a2:6d:39:
                    94:07:2a:44:cd:4c:87:50:5d:f6:5f:de:38:ef:2d:
                    39:b8:bf:81:5e:05:d1:38:2f:ee:59:2d:4d:37:df:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BD:46:AC:4E:D2:8F:9B:5A:F8:77:6B:AF:D4:48:0C:55:D4:63:2F
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:f2:2d:3b:b4:80:fc:7a:00:6e:5c:72:c2:bb:de:29:be:
         3d:56:8d:49:a1:98:f2:25:90:d5:f3:d7:d0:1f:6e:48:46:e8:
         95:08:fd:bb:37:74:c7:f9:10:be:ea:28:b2:4b:3c:62:a6:fc:
         b8:db:00:89:4f:10:65:04:fd:45:10:7e:5d:05:bf:bf:92:ae:
         c5:86:d3:48:4a:24:ee:6b:8f:66:f6:1f:33:d6:bb:36:79:99:
         5d:2a:01:b0:c2:ed:00:74:2c:e4:00:61:c6:dd:09:f0:8f:b0:
         ad:65:d5:dc:de:ee:f7:f3:32:11:f9:b0:c2:64:db:ff:1b:ac:
         2b:5e:4c:8d:17:80:a7:09:57:b0:89:a3:9d:57:c3:a8:7b:26:
         1e:fd:ab:bb:4b:47:7a:8d:4b:01:c4:5a:1b:45:f2:2e:67:48:
         49:a8:85:cc:92:ff:89:03:31:61:af:4d:53:8e:2e:0a:de:e4:
         03:ca:87:c0:da:38:1b:03:ed:80:7f:9b:ca:f3:8f:ad:57:31:
         2c:81:cd:16:74:81:77:96:9f:8b:40:f8:30:1b:dc:06:be:04:
         b4:8c:8d:05:db:d7:a8:08:e2:16:fc:9c:09:93:6d:eb:2a:ab:
         cc:a2:72:2a:0e:d6:cf:05:c9:33:fd:a2:66:22:12:29:51:51:
         a9:4e:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:40:31 2025 by rpki-client