Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203136353039.roa
File:                     3230302e3133302e35362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          +KKkWtcIw6ZNXgRndOw96d44oEFTgmeCg3w+9m7B780=
Subject key identifier:   4D:49:E1:1B:E3:88:5E:E8:D5:67:0B:35:FD:6C:F6:FD:49:EC:85:FF
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       5FB0F5D7206B46B458242D47B81FA8D51D937F63
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Nov 2024 13:52:40 +0000
ROA not before:           Tue 05 Nov 2024 13:47:40 +0000
ROA not after:            Tue 04 Nov 2025 13:52:40 +0000
asID:                     16509
IP address blocks:        200.130.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 01:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b0:f5:d7:20:6b:46:b4:58:24:2d:47:b8:1f:a8:d5:1d:93:7f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Nov  5 13:47:40 2024 GMT
            Not After : Nov  4 13:52:40 2025 GMT
        Subject: CN=4D49E11BE3885EE8D5670B35FD6CF6FD49EC85FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:29:40:d0:e2:1a:f8:5a:7a:c6:60:bd:ed:
                    f3:e0:9b:a8:12:69:83:e6:ab:09:be:ca:32:73:6f:
                    f3:d2:40:cd:c6:86:39:3a:91:64:3e:7c:8d:3a:24:
                    99:c6:6a:ed:a7:67:41:1d:f0:ea:b7:e8:fd:4a:7f:
                    0f:c5:61:f6:43:da:e4:d2:77:f6:4e:71:2f:87:6a:
                    6f:ca:1b:2e:59:fb:36:d4:e0:4b:ba:27:b4:69:a6:
                    8b:7b:d8:de:f2:81:34:2e:6d:0a:11:d4:30:a5:df:
                    ea:67:c2:06:b6:e4:01:b0:19:98:14:e1:68:71:83:
                    37:f9:6c:b7:ff:f1:91:73:e7:a3:23:85:b8:7f:8e:
                    c6:15:f8:bd:81:f3:d8:cd:c5:d1:86:1a:f0:9e:2e:
                    b7:98:3e:4d:4d:10:e8:d3:4e:70:5e:82:6c:c1:b7:
                    d3:55:9d:bc:cb:a9:e7:43:96:d8:35:cb:66:57:ce:
                    1a:c1:3b:44:c5:ea:85:7d:96:e0:40:a2:d2:f7:45:
                    5e:95:e7:33:c1:eb:d1:ad:8d:f4:7c:cf:e2:fc:cb:
                    6d:7f:25:41:10:d2:8f:0a:23:b8:4e:0a:50:62:70:
                    8c:88:2a:96:5f:ea:02:ce:24:cd:20:7c:13:72:18:
                    35:4e:03:f7:4a:05:5d:76:43:87:09:e3:4f:22:2a:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:E1:1B:E3:88:5E:E8:D5:67:0B:35:FD:6C:F6:FD:49:EC:85:FF
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:53:9b:f3:8d:7a:9b:1c:85:5a:60:ba:38:34:c7:0c:f4:
         52:18:55:97:a7:84:0a:ec:f5:5b:0d:5b:5e:9e:18:f5:f3:59:
         5a:2e:7e:4d:99:3c:1d:c2:89:fb:1d:d6:f6:d7:91:c6:5f:61:
         8c:bc:d0:b8:38:37:01:4a:37:66:cb:7c:72:55:8b:0a:7c:6f:
         1d:6a:14:38:bb:cf:3e:75:7e:1e:11:d5:b4:e4:a0:6d:bc:d1:
         b1:3a:be:68:2b:52:57:0c:0a:fb:fd:13:91:55:10:f2:71:5f:
         b5:a8:1e:aa:06:a7:ea:ee:e1:34:90:c2:11:28:6d:5f:b5:c4:
         41:df:5e:01:45:db:db:f8:5f:79:96:db:4f:8e:06:5b:35:4f:
         65:0f:e0:78:50:fa:3e:4d:b6:e1:35:13:18:be:db:bc:81:6b:
         dc:46:9a:2e:bf:20:cf:f7:c2:fe:03:df:4e:2f:83:41:80:a5:
         6e:c5:5f:ae:9a:b6:3d:0d:71:85:4e:b7:98:61:77:9d:0b:9a:
         0d:cd:a3:6f:5b:d6:f8:8c:b6:18:6f:56:4e:5e:a9:7f:b4:7e:
         ba:8a:8f:ae:9a:11:08:db:8d:43:fa:45:2f:28:11:19:c0:4c:
         9b:6d:0a:73:90:05:10:df:32:aa:a1:65:74:2c:b5:fa:32:64:
         22:8c:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:45:54 2025 by rpki-client