Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3132382e302f31382d3237203d3e2031393136.roa
File:                     3230302e31392e3132382e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          jsPs+t3ldM/1mo70Ps5gXatHAZQafpy46SnGkCwIlYg=
Subject key identifier:   4A:6A:F7:25:3E:40:9D:92:9F:A0:FA:0B:BF:53:29:DA:20:A4:AD:7F
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       71C01661CDB7CDC2AF564098B29D581C980C44AB
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3132382e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:24 +0000
ROA not before:           Fri 18 Jul 2025 20:10:24 +0000
ROA not after:            Fri 17 Jul 2026 20:15:24 +0000
asID:                     1916
IP address blocks:        200.19.128.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c0:16:61:cd:b7:cd:c2:af:56:40:98:b2:9d:58:1c:98:0c:44:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:24 2025 GMT
            Not After : Jul 17 20:15:24 2026 GMT
        Subject: CN=4A6AF7253E409D929FA0FA0BBF5329DA20A4AD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:a2:44:c6:e7:f4:cc:f1:06:19:1e:53:15:
                    69:da:e6:aa:a6:d1:73:15:e3:26:e9:34:95:7d:d8:
                    f2:32:96:b9:70:6f:30:78:c5:43:98:7b:1a:b2:da:
                    48:49:c6:f2:f4:95:ba:13:a9:4c:b8:0c:6a:ce:80:
                    da:65:b8:d7:d7:0a:5a:e5:3d:99:cd:58:b4:1d:0e:
                    89:0d:a9:73:95:90:96:69:01:e8:eb:3d:bf:28:e3:
                    5b:63:52:cb:31:a7:ca:a6:08:39:8c:c4:64:6e:47:
                    e4:9c:78:94:32:24:4e:8c:6f:1c:9d:c9:c7:34:d8:
                    e5:fc:15:58:13:e1:15:c1:04:96:a5:cc:4a:51:e9:
                    73:47:cf:74:ba:70:81:a7:ea:ba:22:2d:1d:11:a0:
                    76:88:93:56:67:05:5b:52:ac:39:fb:ba:0d:58:28:
                    6d:44:b8:19:c3:a6:c8:e9:da:42:56:99:ba:41:41:
                    59:b1:5c:55:0b:a9:5c:9e:fe:d4:4d:6a:b6:8e:ce:
                    4a:46:90:d5:fe:05:e4:1e:53:6b:f5:54:37:ca:df:
                    b8:9b:00:bb:af:0e:4a:54:2f:7b:1a:f1:c3:41:39:
                    ef:f5:e7:6f:e1:7f:76:0e:4c:61:72:1e:41:81:eb:
                    ef:d7:aa:ae:c8:26:4f:33:36:86:02:27:db:18:9f:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:F7:25:3E:40:9D:92:9F:A0:FA:0B:BF:53:29:DA:20:A4:AD:7F
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3132382e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:de:bf:cc:89:8c:6e:61:2f:3d:99:02:d7:b4:49:71:b1:
         b8:e0:40:56:27:5d:52:2a:52:c7:ea:53:f7:7a:0a:2c:63:70:
         37:65:0c:e2:d2:0e:78:4c:52:65:d1:af:b2:b9:6c:d2:99:43:
         7a:73:eb:03:4b:d6:39:26:dd:51:02:c1:59:78:9f:1c:78:e5:
         8c:83:2a:09:4f:a3:e1:dd:0c:d9:89:33:95:6b:97:84:2f:e4:
         65:4c:e1:ef:ee:c3:65:67:2d:6a:4b:e1:25:e5:2f:ed:3c:e1:
         d1:61:41:b2:86:67:6e:d5:19:71:5b:66:01:80:68:12:70:84:
         1b:5d:af:ac:a6:6d:a0:21:dc:b3:03:70:a3:25:2e:fa:de:3e:
         9b:fe:3d:0b:d6:a6:40:91:e3:3d:f3:ec:cd:79:41:8d:2c:0c:
         74:e1:d6:af:72:67:1d:3f:7f:9a:21:70:ca:71:cb:b5:4e:9c:
         e4:70:87:11:ba:c1:fa:22:86:3e:8f:99:6b:f9:77:3d:27:8a:
         eb:a4:10:45:c7:9c:21:4d:2b:2f:f4:f5:ab:3c:32:64:e3:73:
         70:6e:7e:c3:13:2f:1a:73:d7:aa:c7:79:ae:d9:cf:37:01:89:
         36:e9:f8:6d:93:e6:d4:92:ad:42:e3:f6:0d:2a:b4:25:33:96:
         1b:ac:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:43:38 2025 by rpki-client