Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa
File:                     3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa (raw, json)
Hash identifier:          yf9WfnGF1OHFuJQZZogjzLHdOkpS/suly8v5SQEHU+M=
Subject key identifier:   55:14:70:35:1D:9C:26:2E:A5:C2:0B:E0:C2:61:6B:81:2F:CE:84:6F
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       4273B07765B65730BCD0CD8209DA5A2F8F743371
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:26 +0000
ROA not before:           Thu 07 Aug 2025 12:19:26 +0000
ROA not after:            Thu 06 Aug 2026 12:24:26 +0000
asID:                     1916
IP address blocks:        200.128.192.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 07:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:73:b0:77:65:b6:57:30:bc:d0:cd:82:09:da:5a:2f:8f:74:33:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:26 2025 GMT
            Not After : Aug  6 12:24:26 2026 GMT
        Subject: CN=551470351D9C262EA5C20BE0C2616B812FCE846F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:ac:6e:5e:4c:e2:57:3c:c0:95:b8:48:1f:
                    58:37:50:09:8a:57:54:c8:18:3d:5d:0f:d6:84:3f:
                    34:da:96:5c:0c:8b:6a:46:d3:f2:37:63:ee:75:c9:
                    5f:f7:1c:e8:4b:95:81:ad:07:be:82:66:1d:3f:71:
                    d5:a7:6c:c4:9b:68:eb:55:a5:0f:5d:fa:9e:94:c3:
                    40:40:7b:0e:1e:0a:62:3b:54:02:7e:76:6d:08:30:
                    e1:8f:c9:dc:a4:cc:81:32:fb:03:c9:c0:d9:48:71:
                    a6:1e:ee:fa:a1:01:ce:dc:d5:0e:02:a7:13:6e:cd:
                    72:44:8a:73:01:99:c5:da:f1:55:71:49:c1:0f:ce:
                    62:d0:1b:b5:9f:a9:8d:db:42:7d:fa:64:bc:0b:8f:
                    9a:31:77:c5:90:d5:3f:e8:61:34:f6:57:00:8a:c7:
                    08:b5:14:ff:5b:bb:c0:52:31:2c:87:56:c8:98:65:
                    6d:09:c1:f9:49:76:ef:46:7f:bf:63:67:86:a3:29:
                    fe:34:a6:48:5d:8e:b1:64:42:af:8a:9a:77:77:2c:
                    38:7f:cb:c1:4b:fd:e3:9f:57:08:3c:33:9e:2e:0d:
                    7b:c8:68:7a:8b:46:8d:21:d1:72:ff:b0:a0:5a:18:
                    76:36:6a:94:8a:41:31:7a:2e:e8:1f:99:04:bb:ea:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:14:70:35:1D:9C:26:2E:A5:C2:0B:E0:C2:61:6B:81:2F:CE:84:6F
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:c1:e1:aa:49:44:2d:c7:e0:d9:d3:3e:6d:a3:c1:22:c5:
         49:59:d6:b3:06:18:9d:33:1d:cb:53:ab:1c:12:ac:61:0a:1c:
         ec:ff:ce:0a:a1:bb:99:ad:bc:31:fb:13:60:b6:bd:2a:5b:0c:
         29:8f:12:1e:2d:6f:5e:c2:48:cd:9a:c8:ba:52:5e:71:c4:23:
         a5:9b:0c:f8:a3:2c:3d:2d:b4:2d:22:31:00:80:73:97:28:4d:
         fb:34:74:72:e3:d1:4d:4e:1b:a9:9e:8f:3d:b2:8a:af:d9:e4:
         21:ea:4a:39:56:6d:07:91:52:7b:1e:98:e9:20:d4:54:98:b8:
         d8:c2:bc:ac:56:4a:89:e2:2c:2d:b4:97:66:07:4f:7b:17:dc:
         b1:b8:de:61:49:08:f2:e7:10:30:11:19:8b:1a:e6:68:6f:54:
         ab:10:90:5c:4c:7e:25:5b:11:a0:4e:8d:20:78:5b:92:94:3b:
         d3:63:b0:98:e7:a3:56:a4:d0:53:d1:c5:3b:0e:d5:95:47:ef:
         e4:90:ac:23:8a:dd:8a:bc:c5:3a:bf:45:bd:04:41:cf:c9:f6:
         cb:33:f4:3a:4c:a2:51:43:cd:2d:53:e6:ec:f8:95:26:92:ec:
         a6:38:c8:5d:dc:45:c6:ad:91:c9:2e:f6:8d:de:ff:08:6c:1c:
         c9:4b:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:36 2025 by rpki-client