Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e382e302f32312d3237203d3e2031393136.roa
File:                     3230302e31392e382e302f32312d3237203d3e2031393136.roa (raw, json)
Hash identifier:          1zDJjex0/Z82RYtmi7ikyYmVt576T7QAu5IGiKOl7ZY=
Subject key identifier:   AF:25:76:FB:47:EB:B2:33:86:E4:0C:55:A4:9F:97:04:C3:99:40:94
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       4A6FCBBAFAA6212C998D4552179A66AFE1E279A1
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e382e302f32312d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:22 +0000
ROA not before:           Fri 18 Jul 2025 20:10:22 +0000
ROA not after:            Fri 17 Jul 2026 20:15:22 +0000
asID:                     1916
IP address blocks:        200.19.8.0/21 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6f:cb:ba:fa:a6:21:2c:99:8d:45:52:17:9a:66:af:e1:e2:79:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:22 2025 GMT
            Not After : Jul 17 20:15:22 2026 GMT
        Subject: CN=AF2576FB47EBB23386E40C55A49F9704C3994094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:72:30:1b:e6:e4:69:c5:30:5f:9e:16:d7:
                    56:36:92:49:03:c3:ac:42:ec:b3:39:02:9f:73:bb:
                    4d:fa:de:b8:4e:5d:53:2c:e3:dd:c9:39:6b:49:aa:
                    ae:20:22:88:f1:fc:4a:7e:84:e7:ed:39:29:19:70:
                    dd:b2:7f:93:23:54:b2:cc:90:45:23:52:20:f3:b0:
                    83:b6:50:a0:2b:4a:cc:df:9b:a4:74:c7:07:d2:c0:
                    d1:1a:d5:3a:00:20:c8:88:5f:81:d8:1d:81:9f:33:
                    ee:75:0e:f2:3a:1a:b6:cd:fd:34:9e:4f:7a:74:30:
                    09:b6:e3:db:8d:22:f6:c5:bc:97:a3:e6:02:5c:29:
                    8d:7e:12:5c:51:9f:6b:83:99:b7:76:95:3f:21:23:
                    af:eb:a0:cf:9e:cb:43:19:52:be:c2:9c:62:c4:1d:
                    ff:a2:3b:aa:55:69:cb:97:0a:ad:4f:00:f4:4a:2e:
                    50:f4:81:f1:06:96:bc:63:e4:14:60:89:ab:8c:6c:
                    02:36:ee:93:9f:ff:e2:1a:26:13:e7:df:86:bb:50:
                    c9:67:64:d3:b0:bb:2d:7b:03:0c:45:e9:03:bb:e5:
                    9e:98:4a:00:30:fa:ce:4f:63:e7:40:1f:ec:1c:f5:
                    b0:25:1d:8d:f3:de:37:25:12:a0:9c:61:63:77:c4:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:25:76:FB:47:EB:B2:33:86:E4:0C:55:A4:9F:97:04:C3:99:40:94
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e382e302f32312d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:c3:ae:64:38:4e:f9:84:c7:f2:26:55:5f:79:00:88:19:
         ff:bd:28:8b:5a:73:45:30:6c:35:5e:b9:a1:b1:11:c2:40:eb:
         08:1f:64:4c:b0:fc:fb:77:1c:4c:e2:d8:8a:46:e5:2f:50:d8:
         ff:f2:63:e0:0c:b4:65:ce:60:b4:1e:cb:62:7e:81:db:86:f7:
         d1:c0:32:c0:f8:54:12:4e:75:ef:08:21:27:19:a9:ba:7f:f6:
         39:93:ca:e2:82:52:73:bc:84:a9:0c:80:db:6b:15:2f:42:10:
         e5:b1:c8:b4:ab:df:61:16:66:1a:f2:61:2d:df:52:66:2a:d3:
         12:ff:e6:8a:86:85:e6:1a:13:54:f7:72:40:ee:b5:31:8a:68:
         41:5a:d7:5b:ad:c3:e9:fe:da:84:fc:61:ed:8c:80:bb:7d:7f:
         cd:2d:ec:95:fa:a3:9b:e0:b3:d4:09:94:bd:51:bf:60:71:ec:
         ad:ba:77:e1:7d:0a:0b:61:28:ad:fc:99:33:f3:9f:ba:ae:76:
         59:82:cc:d8:88:9c:db:21:19:16:39:17:86:a8:98:00:e6:d0:
         72:e5:2d:da:f4:1f:a4:6e:01:43:0c:77:b0:fe:b5:97:2b:b9:
         9f:b7:d3:22:4f:00:23:cc:db:01:6c:c2:41:87:a0:c5:1b:71:
         2c:32:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:48:24 2025 by rpki-client