Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3131322e302f32302d3237203d3e2031393136.roa
File:                     3230302e31392e3131322e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          0ISxOc3RMo0EzfrWrS5Z8x/MbhtgANoRVmpJWe+D/wo=
Subject key identifier:   63:6D:CA:45:97:51:E8:84:2E:C8:BC:5B:47:76:79:95:26:10:4F:EF
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       068353FC98EFEED202FA0B0F8E0831E308BBF1B3
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3131322e302f32302d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:28 +0000
ROA not before:           Thu 07 Aug 2025 12:19:28 +0000
ROA not after:            Thu 06 Aug 2026 12:24:28 +0000
asID:                     1916
IP address blocks:        200.19.112.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 03:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:83:53:fc:98:ef:ee:d2:02:fa:0b:0f:8e:08:31:e3:08:bb:f1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:28 2025 GMT
            Not After : Aug  6 12:24:28 2026 GMT
        Subject: CN=636DCA459751E8842EC8BC5B4776799526104FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:90:9c:56:fc:e8:d2:5c:23:7b:c5:d1:16:
                    ba:69:23:1d:e3:73:45:8a:9b:b5:29:8a:a8:c4:1f:
                    99:c1:85:94:1a:31:b2:6b:1d:c1:26:2f:b2:9f:81:
                    ab:de:e4:55:5d:28:b3:2b:35:dd:2e:8f:95:d7:2a:
                    ee:69:d6:62:5a:4c:28:c1:23:74:86:3d:c1:95:03:
                    c0:f2:eb:0d:bb:67:d5:10:cc:11:6f:6c:e4:a3:b4:
                    b5:b7:ee:4d:47:17:11:6c:b3:f9:50:d9:08:be:1d:
                    b5:1d:8a:2d:7b:3d:c2:57:33:15:fe:95:be:22:98:
                    a9:bd:fe:6f:dd:81:b2:d2:04:26:01:0b:6a:8c:d1:
                    21:1c:8b:cb:ce:6d:f9:fe:f0:18:b6:d5:38:6a:44:
                    99:9a:3c:27:94:73:f2:c4:91:fb:ab:96:08:fb:e9:
                    83:50:8b:fb:a2:4d:27:86:e2:06:45:6d:e5:dc:a8:
                    42:ca:e3:3c:cf:5c:e8:ff:64:ad:4b:73:e1:2d:16:
                    c4:b2:7a:c3:8f:78:20:74:91:64:10:30:b1:de:83:
                    a0:38:79:81:82:3a:96:7f:6a:89:c4:40:fc:00:4d:
                    e4:1d:0b:82:9d:96:76:7d:81:12:be:bb:1a:20:0d:
                    1c:d5:98:9a:4e:ea:9b:d0:11:0f:04:d4:20:36:2c:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:CA:45:97:51:E8:84:2E:C8:BC:5B:47:76:79:95:26:10:4F:EF
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3131322e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:94:d6:c2:fe:3b:1b:cd:37:ed:40:ba:93:2b:7e:a3:c6:
         1e:73:2c:95:46:02:84:c1:d4:3e:ee:cd:33:3b:80:10:40:95:
         32:a0:33:fd:06:35:ba:d5:ce:d6:77:14:8b:34:73:ac:46:a4:
         47:18:54:18:83:2e:9c:35:f7:d6:e3:23:8a:da:51:29:08:ac:
         fd:ea:f6:8e:c9:20:88:b4:d4:b2:fd:72:b8:ef:b1:40:54:36:
         51:41:84:e0:d3:1d:38:9b:8c:03:e6:69:fe:59:f5:0a:f0:9d:
         e2:fe:19:6b:83:2d:0e:c2:14:8a:93:72:0e:b2:78:22:61:01:
         b6:a5:7c:74:18:eb:91:d9:73:39:d7:cc:62:a7:04:58:71:34:
         62:40:74:28:3c:9a:27:3a:da:be:ce:28:ef:d3:a9:9b:ae:61:
         20:71:28:df:15:63:ed:21:b0:df:3c:4d:59:51:9f:6f:4d:87:
         80:6e:5e:1e:04:be:a0:49:1f:10:a8:bb:4d:e5:15:4f:29:ff:
         c0:0f:a1:43:d6:1d:95:8a:ae:cc:f8:40:35:52:ef:65:e9:7e:
         05:b5:b1:43:b3:13:c6:51:0a:de:84:a4:f0:8d:48:bc:1e:ba:
         15:2f:c9:f8:4b:82:a8:11:ed:11:99:ed:60:0c:e6:0a:62:1b:
         b1:09:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:22 2025 by rpki-client