Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3139322e302f31392d3237203d3e2031393136.roa
File:                     3230302e31382e3139322e302f31392d3237203d3e2031393136.roa (raw, json)
Hash identifier:          XVNkkIRN5eQB8Q3lvmvpWroNZPPWCorkgJNzwKIe32M=
Subject key identifier:   92:49:1E:CC:4F:CE:7E:57:88:26:C8:5D:C8:B7:68:DE:5C:99:91:54
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       15E1FC32F0519BB98FCC5AF5368C7B1EC9DDF86B
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3139322e302f31392d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:25 +0000
ROA not before:           Fri 16 Aug 2024 19:18:25 +0000
ROA not after:            Fri 15 Aug 2025 19:23:25 +0000
asID:                     1916
IP address blocks:        200.18.192.0/19 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e1:fc:32:f0:51:9b:b9:8f:cc:5a:f5:36:8c:7b:1e:c9:dd:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:25 2024 GMT
            Not After : Aug 15 19:23:25 2025 GMT
        Subject: CN=92491ECC4FCE7E578826C85DC8B768DE5C999154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:8a:6c:c6:8c:53:ca:30:2c:d7:00:2c:e2:
                    e7:a2:e3:59:22:30:38:47:8a:7a:cc:2d:89:c8:f1:
                    1d:e5:e1:49:59:5e:c1:4a:7a:88:a2:35:7b:dd:18:
                    38:4c:29:00:5f:50:c9:fa:07:09:ba:c6:05:d5:a8:
                    ad:cc:da:74:f1:95:80:2f:e2:13:78:ad:b7:5d:94:
                    e6:f7:98:e8:b0:05:70:dc:0c:19:27:c7:eb:60:13:
                    41:8f:f0:78:c9:00:db:7e:8c:09:50:4b:42:85:b9:
                    6b:6f:7f:0a:ff:f9:99:b7:14:a5:56:e8:98:a5:1a:
                    2f:fa:3d:29:0f:90:6b:06:a7:11:f9:90:a1:25:79:
                    5d:1e:f0:0b:ce:7e:21:75:bc:4a:b6:12:dc:61:19:
                    a5:70:43:40:c1:70:bb:91:4e:e2:f1:23:36:19:2f:
                    ad:03:bc:fa:6a:54:81:1e:86:bb:02:54:28:ef:83:
                    dd:0f:97:5d:a3:3d:19:fa:fd:98:c8:55:b6:44:52:
                    d5:3f:1b:14:18:ba:05:92:12:06:0c:5e:45:89:53:
                    c3:b8:49:73:29:99:00:f0:0a:5c:cd:7a:76:4e:cc:
                    be:24:dc:72:5d:61:67:3f:ca:87:b1:1d:7d:96:62:
                    93:3f:2d:a0:eb:a5:c0:3d:f8:c7:a4:91:51:a0:1e:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:49:1E:CC:4F:CE:7E:57:88:26:C8:5D:C8:B7:68:DE:5C:99:91:54
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3139322e302f31392d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:2c:09:e0:6b:0e:a5:99:6c:dd:ce:07:df:fb:0f:5c:e4:
         fb:aa:3c:72:25:33:9a:ae:83:74:6c:80:24:60:85:86:26:b3:
         99:7f:01:4c:18:9f:a4:67:5b:3a:48:8e:86:21:7b:d5:b2:15:
         3b:18:d2:4e:35:ec:2d:44:56:1e:e0:46:d8:d3:b6:4b:25:a2:
         35:bc:21:f5:9c:04:d9:71:57:95:2f:b6:6d:09:4e:ef:56:15:
         e9:0a:ee:88:95:fc:80:c4:1f:54:6b:ff:35:9b:50:f7:bc:18:
         29:93:f3:eb:49:28:50:35:31:69:8b:78:ce:8a:b0:df:ab:ca:
         1c:71:90:2d:86:ae:f5:4b:d6:58:74:48:3c:f1:f9:ec:a1:8d:
         23:78:db:57:9d:ae:80:7f:6f:67:25:48:32:c3:26:a0:4f:d5:
         eb:c1:c5:4a:01:fb:81:30:6d:3a:37:ca:1f:f8:20:d8:fd:25:
         78:ef:1c:8e:0d:57:f6:72:43:f5:4f:ba:1f:b0:6f:1f:48:8e:
         8f:00:ed:ac:a6:50:d9:29:23:88:0d:18:7b:11:61:f7:2a:09:
         f9:49:7f:b1:73:12:9a:c3:c0:21:87:cc:fb:6d:3b:e2:15:3b:
         4c:a3:d9:ea:b4:1c:d7:4c:69:2b:ee:6f:eb:ad:f3:d2:c4:14:
         55:1c:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:35 2024 by rpki-client on console-ams.rpki-client.org