Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e31362e302f32302d3237203d3e2031393136.roa
File:                     3230302e31392e31362e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          fGA5Y5jocVz6ID9foLVcPPwFr2BjlIRp4OQCiwMPZIA=
Subject key identifier:   86:B5:E4:FF:DF:7E:16:18:5A:A8:25:07:18:C0:9F:E9:01:F9:10:01
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       3D6285ACE7FAF8BC5E4AAF2AC9F924674C9EC795
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e31362e302f32302d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:04 +0000
ROA not before:           Fri 19 Jun 2026 19:56:04 +0000
ROA not after:            Fri 18 Jun 2027 20:01:04 +0000
asID:                     1916
IP address blocks:        200.19.16.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:62:85:ac:e7:fa:f8:bc:5e:4a:af:2a:c9:f9:24:67:4c:9e:c7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:04 2026 GMT
            Not After : Jun 18 20:01:04 2027 GMT
        Subject: CN=86B5E4FFDF7E16185AA8250718C09FE901F91001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:18:a3:9c:19:c5:c2:3c:b1:2b:eb:73:07:
                    3f:eb:a7:1b:75:9c:7a:8b:42:38:d5:2f:c2:2a:55:
                    2b:42:e6:b7:48:d3:f0:ba:5d:56:14:e8:79:16:a8:
                    80:70:e6:ed:5b:f8:05:77:e3:73:b6:fe:d6:b7:47:
                    18:ec:d6:86:8c:c1:64:b8:5e:09:15:86:cd:7a:fb:
                    a1:ab:20:ee:c1:fc:43:c0:59:6b:bc:59:57:d5:4b:
                    10:3e:09:45:03:63:ea:70:b6:d6:1e:99:8f:1e:dc:
                    c8:71:34:47:f0:b0:a9:34:fe:82:5e:80:67:b2:ce:
                    9c:a0:40:1f:b3:9a:4f:59:17:72:af:7e:b2:8c:e4:
                    2e:fe:73:15:34:6e:8c:88:57:de:d8:ff:99:c6:3e:
                    77:a7:7b:24:78:93:6f:bc:f9:3e:c8:0f:a4:e2:09:
                    28:eb:65:ca:38:f8:9f:15:8a:1f:2c:8a:f7:26:55:
                    75:e2:fd:71:8a:71:3f:a0:47:c9:28:28:9d:7c:3b:
                    36:1e:40:f9:98:fd:ff:2e:ef:7c:a5:ae:ae:b6:2c:
                    15:64:69:b4:a5:3c:65:8f:6d:ed:5d:89:21:67:f3:
                    0d:a8:40:cd:35:b6:e3:61:1d:80:a2:b6:64:2b:ab:
                    56:56:f2:9f:c3:a1:00:2b:17:37:e4:5c:6e:9b:11:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B5:E4:FF:DF:7E:16:18:5A:A8:25:07:18:C0:9F:E9:01:F9:10:01
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e31362e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:a4:7c:53:82:48:ac:b5:a5:f5:94:9f:da:62:cb:d3:8c:
         f9:f3:42:4a:c1:b6:e6:e5:e0:79:0a:b0:50:29:91:e7:30:b1:
         ab:fc:72:60:f4:b1:d7:40:d3:67:fa:82:61:02:c0:85:6d:20:
         63:0b:1e:47:08:84:7f:0d:e8:00:61:7b:d6:df:ed:fe:05:1a:
         5c:b6:46:c4:fb:40:62:73:c6:e7:9f:39:b0:65:3c:d5:aa:06:
         28:77:a1:2b:86:0d:cb:cc:b7:ac:be:7a:cf:bc:ff:8d:13:23:
         7e:f6:4e:38:bf:1a:28:fa:1e:40:cc:74:16:aa:25:22:d3:3c:
         e7:4e:31:c4:5d:a0:77:81:52:61:c4:98:ec:64:de:06:42:24:
         4c:f4:4f:cc:02:dd:18:d9:30:61:8b:63:02:14:e7:df:91:d0:
         5c:db:c2:e2:9f:ae:13:06:9c:f7:9d:73:84:17:f2:11:73:36:
         d1:2b:d1:66:39:91:01:24:33:44:cc:2a:3f:75:77:d3:64:43:
         a1:20:98:a7:c9:8f:ba:b3:d7:93:2b:cc:e1:fc:83:59:3f:c0:
         13:4e:94:c7:fd:87:6d:d5:74:6c:0e:f6:fa:ff:a0:28:41:dc:
         64:14:e6:35:67:f5:ab:de:49:fc:c5:3c:ec:e8:01:37:aa:8b:
         c6:1a:14:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:20:51 2026 by rpki-client