Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134382e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3134382e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          DBw4BHvTiXrRbPbXmjEbBofR50n+oN3CUkoDxkNwpEE=
Subject key identifier:   4E:F0:0A:AD:2F:6B:A6:89:10:09:12:FF:28:F3:C4:64:0F:D8:AA:EA
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       3E818C818E64C7DC1DFB4EEE2893CD6BFF82E215
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134382e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 31 May 2025 16:01:51 +0000
ROA not before:           Sat 31 May 2025 15:56:51 +0000
ROA not after:            Sat 30 May 2026 16:01:51 +0000
asID:                     28572
IP address blocks:        200.192.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 19:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:81:8c:81:8e:64:c7:dc:1d:fb:4e:ee:28:93:cd:6b:ff:82:e2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: May 31 15:56:51 2025 GMT
            Not After : May 30 16:01:51 2026 GMT
        Subject: CN=4EF00AAD2F6BA689100912FF28F3C4640FD8AAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:0b:ff:24:dd:9d:56:df:27:d7:80:96:e3:
                    52:f7:4b:9c:4d:46:69:78:a6:88:d6:fa:b8:82:d5:
                    a9:95:e7:f5:b5:36:0d:e5:7f:1a:3d:66:4b:ee:a3:
                    83:8b:55:ca:8a:f7:cd:4d:0e:91:2b:f5:47:a9:13:
                    0e:13:48:02:3d:96:64:e4:09:5a:12:3e:30:e8:db:
                    64:e7:05:3e:e6:11:f2:ed:7f:e0:22:72:a1:2f:34:
                    70:df:a8:9a:a6:2c:aa:81:1e:47:af:55:af:bb:d0:
                    d4:2c:a7:8b:31:68:9c:f2:dd:ca:d4:e7:44:4c:75:
                    b3:36:7a:f7:8e:7d:8b:ef:61:cb:68:6a:1b:82:9d:
                    5f:f9:c3:7f:0a:a0:d5:99:c1:4b:95:65:67:6c:25:
                    cb:ce:34:73:95:ef:25:01:a8:0d:05:3c:46:d6:91:
                    6c:d3:f9:82:a4:b7:74:0d:d3:b2:1c:e6:71:43:65:
                    d6:de:20:8d:25:2a:49:14:99:f7:2d:4b:75:9d:b0:
                    bb:dd:32:e4:f0:30:ba:cf:91:c8:64:79:53:ba:ff:
                    e3:21:b9:2c:26:a7:e8:6a:19:0b:ed:a9:b2:30:42:
                    54:78:06:21:5b:2b:f5:2c:3c:33:cb:9f:07:17:33:
                    fd:00:94:2d:a3:88:29:37:fe:ad:af:09:1d:13:06:
                    03:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F0:0A:AD:2F:6B:A6:89:10:09:12:FF:28:F3:C4:64:0F:D8:AA:EA
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3134382e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:4b:f4:38:83:70:6c:61:b7:df:6a:5c:46:cb:6f:a1:4f:89:
         3e:67:28:a0:e2:f9:1e:08:37:96:77:c3:7f:df:3e:64:64:b0:
         b9:b0:ad:f5:b9:fb:f7:f4:70:a3:ca:dd:3f:c1:7e:46:07:c7:
         47:4c:4a:65:7e:e6:a5:2d:90:12:f6:76:af:75:e7:86:a0:76:
         42:20:3a:e4:43:15:28:94:7b:2f:34:ca:d7:49:09:1e:fd:ae:
         22:4e:23:9b:62:0e:f5:c5:38:7e:42:27:ae:31:af:7a:34:e8:
         37:e6:7c:d6:48:7b:d5:e1:f5:55:c5:07:85:21:72:0d:c6:1a:
         8f:ee:71:0f:82:dc:4a:4b:d4:5d:f6:2d:30:85:ee:92:57:b3:
         20:89:ba:d0:07:a3:38:13:42:cf:ab:95:b3:80:c5:fe:27:04:
         97:0a:cd:51:28:04:e1:14:46:19:3d:b5:64:1e:4a:7f:f3:68:
         99:89:58:7d:7d:51:b4:70:63:0b:c4:b8:04:a0:ec:7a:40:57:
         8b:54:14:85:23:fe:20:37:8f:50:d0:f5:4f:63:b1:9b:62:9c:
         df:5c:d0:b7:75:6b:e5:7c:83:8c:31:db:d6:96:7c:ab:d0:55:
         f1:09:19:1d:a8:48:12:4e:68:77:82:12:14:62:97:19:7c:da:
         c2:04:5e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:46:39 2025 by rpki-client