Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa
File:                     3137302e37392e3231322e302f32322d3237203d3e2031393136.roa (raw, json)
Hash identifier:          EjvxzKt+sODqO+C1mxvsTjNaJ9zKVxApQE7BWHRLEAc=
Subject key identifier:   6E:DD:F7:01:97:20:BB:74:4E:52:0E:85:AA:ED:DF:4F:28:C8:45:7D
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       310F92924D45E4F5E4164BFF25E8EC0F220EA17F
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:22 +0000
ROA not before:           Fri 18 Jul 2025 20:10:22 +0000
ROA not after:            Fri 17 Jul 2026 20:15:22 +0000
asID:                     1916
IP address blocks:        170.79.212.0/22 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0f:92:92:4d:45:e4:f5:e4:16:4b:ff:25:e8:ec:0f:22:0e:a1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:22 2025 GMT
            Not After : Jul 17 20:15:22 2026 GMT
        Subject: CN=6EDDF7019720BB744E520E85AAEDDF4F28C8457D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:22:39:90:b2:72:48:fd:87:a7:60:1f:e0:
                    11:e5:12:36:13:34:54:f0:09:7e:10:23:24:b1:06:
                    f0:47:4d:f4:5a:c9:d4:e1:e6:8f:70:d1:52:61:d8:
                    69:e5:b1:4a:8d:81:88:70:28:22:c8:2d:e2:c0:5e:
                    b4:15:8c:2d:49:75:63:6a:5b:fe:90:94:9a:11:a3:
                    cd:a4:71:30:b1:cb:80:ef:09:51:e5:8b:1f:5b:6a:
                    c0:1d:8f:af:ee:c5:03:82:e9:36:87:04:cf:d5:02:
                    94:fc:29:9f:ea:06:ba:67:8f:5f:88:79:c1:d6:64:
                    35:89:74:9d:35:62:ad:2d:71:ca:ed:3d:58:ee:40:
                    ff:e0:2e:e2:af:b8:a7:e3:d9:96:c2:02:25:9d:fb:
                    c1:7d:23:a5:77:ba:9e:53:0e:09:05:94:29:64:9d:
                    91:5d:26:24:da:2b:78:60:cc:31:f0:38:95:9c:3a:
                    95:b8:54:53:7a:1d:88:37:28:63:6b:b3:b6:27:b0:
                    3b:7a:c6:b3:4a:08:72:5e:43:09:15:75:a8:42:43:
                    93:82:cd:88:16:ce:b7:db:2a:58:b8:59:e7:7b:f8:
                    9b:61:39:12:66:f7:36:78:a8:a3:b5:12:1c:74:26:
                    32:63:bf:3e:8b:80:74:e2:cc:37:7e:3b:2f:53:6c:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:F7:01:97:20:BB:74:4E:52:0E:85:AA:ED:DF:4F:28:C8:45:7D
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:dc:25:77:ee:4d:1e:c8:f4:04:7c:0f:35:5b:ea:5f:27:
         4b:b6:9d:18:81:64:1c:c7:9c:1a:fc:6f:85:f1:ec:f5:f6:68:
         51:40:87:46:06:d6:47:8b:89:dd:cc:02:7e:f9:a7:54:5b:b4:
         eb:c3:0d:00:ef:5e:db:f5:44:fe:4b:87:f1:91:d1:d1:88:5f:
         c1:f6:1c:05:80:19:f0:b3:32:73:0d:81:b6:ea:10:ae:61:df:
         58:43:d6:0b:31:5a:04:eb:2e:dd:4a:55:11:b4:4f:81:fe:e3:
         cf:7f:34:56:ee:18:42:ae:0e:1a:f8:76:0e:1c:80:1c:f8:5e:
         ed:f1:82:b5:62:25:6e:3e:f2:ed:ff:26:55:f1:c7:4f:86:33:
         c5:eb:53:11:53:00:1f:ac:d7:dc:d9:fd:e7:25:4c:e7:2c:b9:
         3e:c3:81:1c:9c:3a:ad:51:ba:30:59:5a:3e:61:1e:2f:8a:3d:
         90:d4:0b:00:4d:79:69:6b:5a:da:83:e3:e1:60:ef:06:ac:f9:
         1e:c6:07:49:0f:2c:cf:98:c0:a8:35:54:06:f4:ff:4f:8b:40:
         81:85:87:63:e4:d4:fd:93:c5:bb:7f:e7:58:f8:9a:8f:d0:8e:
         ab:09:cd:9e:bc:21:04:fa:b6:cc:a9:5a:77:26:1b:51:69:eb:
         49:2d:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:46:05 2025 by rpki-client