Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa
File:                     3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa (raw, json)
Hash identifier:          KeZRYluGt64r5qYlwzAPEkJe/6hUsWcdWrR/ZW4YNFo=
Subject key identifier:   1B:57:F8:77:A1:BB:F7:E0:EC:C9:21:87:32:4E:2A:15:BB:07:42:C8
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       48F64210C887CFEA2610A00B259C585C25FB1C85
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:25 +0000
ROA not before:           Fri 18 Jul 2025 20:10:25 +0000
ROA not after:            Fri 17 Jul 2026 20:15:25 +0000
asID:                     1916
IP address blocks:        200.133.192.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 13:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f6:42:10:c8:87:cf:ea:26:10:a0:0b:25:9c:58:5c:25:fb:1c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:25 2025 GMT
            Not After : Jul 17 20:15:25 2026 GMT
        Subject: CN=1B57F877A1BBF7E0ECC92187324E2A15BB0742C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:db:8e:c7:49:1e:4e:0a:24:fd:f0:67:03:
                    69:74:f9:f5:2a:09:8a:74:4e:84:6d:51:d5:57:2e:
                    ac:9a:f4:86:b7:f1:3a:65:06:be:81:a4:bf:50:55:
                    c4:b7:75:a1:a0:f2:91:aa:f0:e5:c4:7f:88:62:80:
                    d4:20:bb:9c:ca:a4:7b:32:60:2e:ae:37:be:6e:aa:
                    bb:af:c2:10:af:fc:ed:55:14:b9:fa:5f:1d:74:f5:
                    e3:54:f2:37:1a:a7:40:02:94:b7:ea:71:c3:3e:d4:
                    0a:a3:a9:82:01:8a:45:c3:9a:39:b8:aa:c4:07:ec:
                    f2:9e:ec:ec:44:96:a1:85:e1:1f:4a:6f:f8:39:e2:
                    78:69:fe:43:21:c5:58:98:de:27:cd:9d:39:e8:6c:
                    23:b6:09:99:95:5e:b0:a1:da:66:dc:c2:5e:34:6b:
                    8b:9d:24:7d:55:eb:48:32:11:c1:50:7d:cf:3a:72:
                    26:8e:63:7f:86:90:ee:24:22:b5:0e:a2:f3:9b:b8:
                    19:28:61:11:b4:e8:42:76:29:1d:9f:16:9e:b0:bc:
                    8e:45:a8:f5:2e:c9:ec:20:80:1c:69:90:19:02:59:
                    43:83:21:39:1d:5c:66:87:80:1f:ff:72:23:ce:e3:
                    4f:8a:7f:a8:1f:25:c5:3e:12:24:0f:73:4b:84:e4:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:57:F8:77:A1:BB:F7:E0:EC:C9:21:87:32:4E:2A:15:BB:07:42:C8
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c1:8e:85:5f:38:e2:2b:16:f4:c1:d2:81:bd:70:dd:3c:46:dd:
         d0:ce:85:9e:63:6b:07:94:3a:d9:15:af:11:3f:e8:8d:87:38:
         4a:8d:57:10:b9:f9:c2:2e:db:c4:99:93:f9:8f:80:de:3e:63:
         97:65:9b:af:c4:f1:39:fd:92:50:34:a0:7c:19:06:1e:70:ae:
         4f:01:23:75:ec:da:fd:35:5e:a7:01:6a:ca:e9:88:35:db:52:
         3b:42:3b:59:ca:26:f0:39:5b:c9:78:e7:fa:62:d1:b6:1f:16:
         f9:db:de:70:37:c0:21:31:8e:b7:06:59:a2:59:c7:71:47:d0:
         e0:2d:13:6e:d2:8f:81:fe:b3:4e:99:6b:40:7c:af:00:ff:aa:
         cd:59:48:7b:5d:8b:df:0a:2d:ba:0c:01:4a:e1:3f:96:6d:3c:
         48:7e:44:84:ea:b8:79:64:c1:fc:67:db:fa:4f:ec:ad:b7:1d:
         aa:07:56:9e:2b:be:9e:2a:cf:6d:e1:fb:8e:66:9f:5b:0f:26:
         e3:2e:53:12:9e:bf:b1:54:e6:7a:5d:9b:38:e3:10:fd:93:f1:
         70:cf:a4:34:69:77:b6:24:56:5c:70:47:8d:88:e5:da:61:a5:
         9a:50:7a:8d:c0:09:d1:38:71:ab:a2:55:93:89:ea:44:fc:c1:
         c8:79:b1:ce
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSPZCEMiHz+omEKALJZxYXCX7HIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTA3MTgyMDEwMjVaFw0yNjA3MTcyMDE1MjVaMDMxMTAvBgNV
BAMTKDFCNTdGODc3QTFCQkY3RTBFQ0M5MjE4NzMyNEUyQTE1QkIwNzQyQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPytuOx0keTgok/fBnA2l0+fUq
CYp0ToRtUdVXLqya9Ia38TplBr6BpL9QVcS3daGg8pGq8OXEf4higNQgu5zKpHsy
YC6uN75uqruvwhCv/O1VFLn6Xx109eNU8jcap0AClLfqccM+1AqjqYIBikXDmjm4
qsQH7PKe7OxElqGF4R9Kb/g54nhp/kMhxViY3ifNnTnobCO2CZmVXrCh2mbcwl40
a4udJH1V60gyEcFQfc86ciaOY3+GkO4kIrUOovObuBkoYRG06EJ2KR2fFp6wvI5F
qPUuyewggBxpkBkCWUODITkdXGaHgB//ciPO40+Kf6gfJcU+EiQPc0uE5FClAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG1f4d6G79+DsySGHMk4qFbsHQsgwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMzMzMyZTMxMzkzMjJlMzAyZjMxMzkyZDMyMzcyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFyIXAMA0GCSqGSIb3DQEBCwUAA4IBAQDBjoVfOOIr
FvTB0oG9cN08Rt3QzoWeY2sHlDrZFa8RP+iNhzhKjVcQufnCLtvEmZP5j4DePmOX
ZZuvxPE5/ZJQNKB8GQYecK5PASN17Nr9NV6nAWrK6Yg121I7QjtZyibwOVvJeOf6
YtG2Hxb5295wN8AhMY63BlmiWcdxR9DgLRNu0o+B/rNOmWtAfK8A/6rNWUh7XYvf
Ci26DAFK4T+WbTxIfkSE6rh5ZMH8Z9v6T+yttx2qB1aeK76eKs9t4fuOZp9bDybj
LlMSnr+xVOZ6XZs44xD9k/Fwz6Q0aXe2JFZccEeNiOXaYaWaUHqNwAnROHGrolWT
iepE/MHIebHO
-----END CERTIFICATE-----
Generated at Mon Jul 28 17:37:39 2025 by rpki-client