Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          jf5pv1DLkMb8uX7nUMbTRyvKDl2WNO/+d2rkaH7Rg+w=
Subject key identifier:   1C:E9:20:1F:9C:C9:59:9B:E0:AF:63:2C:2A:3F:01:5E:B8:FC:8F:68
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       242791DD739EB86B3800B3312DEC054A38656509
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa
Signing time:             Sat 31 May 2025 16:01:50 +0000
ROA not before:           Sat 31 May 2025 15:56:50 +0000
ROA not after:            Sat 30 May 2026 16:01:50 +0000
asID:                     28572
IP address blocks:        200.192.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 19:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:27:91:dd:73:9e:b8:6b:38:00:b3:31:2d:ec:05:4a:38:65:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: May 31 15:56:50 2025 GMT
            Not After : May 30 16:01:50 2026 GMT
        Subject: CN=1CE9201F9CC9599BE0AF632C2A3F015EB8FC8F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:62:6d:71:0d:40:c3:5f:e3:a2:9b:88:52:
                    39:f5:f9:99:b2:91:d6:64:1a:d3:f1:f1:15:91:88:
                    05:5e:08:43:23:87:8c:d5:39:36:c3:79:e2:f5:a6:
                    5d:25:ff:31:a7:07:bd:07:c9:e9:ec:a2:9e:9d:75:
                    f7:89:d0:84:2f:5b:d9:da:01:28:55:9e:25:c8:df:
                    0e:1f:2e:c3:53:f6:aa:8e:f6:89:35:02:70:70:90:
                    b4:e8:f1:50:90:f1:77:bb:e4:62:31:92:8b:88:6d:
                    74:ef:cd:5b:da:8c:51:c5:37:84:bd:71:a9:7d:b0:
                    36:0e:8f:1c:bc:b3:a0:b8:2f:16:1e:56:4c:e5:46:
                    15:90:69:8d:0b:87:8f:67:89:f4:d4:23:01:a2:cf:
                    e1:8d:9a:59:df:6a:4f:e4:64:0a:17:60:f5:c6:71:
                    8d:eb:8b:a5:4e:0c:a5:1c:36:57:cb:21:09:7d:33:
                    0d:86:1d:0b:c3:c1:da:76:5d:50:d1:2f:d4:5e:77:
                    b8:f2:33:76:1a:6b:ed:c5:27:18:81:58:48:4c:d8:
                    92:55:1c:61:db:22:19:27:8c:cb:51:1f:f2:5a:24:
                    bb:5b:47:47:91:8c:69:48:52:ba:c5:40:f7:9f:9e:
                    09:fe:69:01:0f:86:90:85:d6:3d:82:67:a6:52:2b:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:20:1F:9C:C9:59:9B:E0:AF:63:2C:2A:3F:01:5E:B8:FC:8F:68
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0a:5d:fd:f0:5d:02:ef:94:a5:31:b7:bd:71:03:e4:19:47:
         18:db:4d:15:ab:15:c6:5a:df:fa:3a:33:03:13:af:04:36:73:
         1a:18:a0:10:9d:82:50:5a:95:d2:0e:76:9c:ee:37:e6:52:53:
         bf:63:1e:25:19:e8:f9:79:c4:29:b9:e5:a1:70:56:c2:67:45:
         c2:0f:c0:cf:b1:bb:69:17:f2:d8:37:e0:17:c6:67:a5:a6:d4:
         1a:0d:28:63:47:f0:4a:73:26:d2:69:3e:ff:fb:22:87:36:e2:
         c9:12:73:ac:51:4b:10:3f:45:dd:16:72:3e:d4:1e:7e:88:fe:
         10:67:2e:3b:8d:1f:8c:e8:10:5a:d0:03:b9:8b:8d:1e:fa:d9:
         8a:a7:9b:6d:67:a2:e7:aa:f4:92:af:54:2a:34:65:b1:e7:aa:
         47:6a:b8:cb:3a:05:a2:00:b1:44:9a:43:35:23:3a:1e:65:23:
         7b:3d:88:c9:7e:c3:d6:63:88:99:c3:35:6c:6e:a2:4c:73:c0:
         f8:46:bd:e2:f0:6c:d6:0a:f6:88:cc:57:4d:ae:fd:d2:a6:7a:
         f1:ce:48:8d:21:48:83:71:21:d6:e2:5a:2e:ab:bf:49:95:b8:
         4b:7f:d4:3f:5e:30:00:c7:f2:aa:49:ee:a5:62:9f:7b:65:77:
         24:2b:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:32:31 2025 by rpki-client