Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3132382e302f31382d3237203d3e2031393136.roa
File:                     3230302e3132382e3132382e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          A+Kl7L1Sc8qlLdt9yZRjaHVV2sdXhX2kBwuzZfkYJYk=
Subject key identifier:   9B:B5:5E:09:D0:46:25:6E:39:68:32:2E:91:FE:00:AF:82:DB:01:95
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       2AE6BDFEA7217BB2B7D24DBFBE9BFCA5C235F482
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3132382e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:30 +0000
ROA not before:           Fri 16 Aug 2024 19:18:30 +0000
ROA not after:            Fri 15 Aug 2025 19:23:30 +0000
asID:                     1916
IP address blocks:        200.128.128.0/18 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e6:bd:fe:a7:21:7b:b2:b7:d2:4d:bf:be:9b:fc:a5:c2:35:f4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:30 2024 GMT
            Not After : Aug 15 19:23:30 2025 GMT
        Subject: CN=9BB55E09D046256E3968322E91FE00AF82DB0195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:84:e5:26:11:ec:e5:88:c5:6d:74:84:3c:
                    ff:61:c9:4a:63:7d:af:f2:a6:2d:c5:fd:ab:c8:83:
                    7e:d8:8d:8e:f4:c2:a1:0b:d4:6e:7c:c9:11:db:c4:
                    42:a8:e1:84:51:ee:d3:02:3f:5e:83:c7:f0:46:b5:
                    4f:e3:9f:74:f7:3b:b9:6d:5e:0a:6a:89:87:dd:4d:
                    31:db:c4:34:8f:26:c2:3f:79:57:26:55:69:1d:3c:
                    a2:9e:ff:fe:ae:00:a6:6b:9c:c8:91:f8:09:7b:08:
                    8a:ec:87:fa:09:ac:d3:f3:e9:98:a0:cc:77:66:74:
                    71:d1:3a:c3:e7:36:ca:4b:91:bb:6a:08:1c:27:d3:
                    2b:b8:08:24:67:4a:09:3c:3a:68:6f:73:50:ae:51:
                    92:ef:c5:1c:3e:f1:18:e0:69:62:c8:f8:72:92:8d:
                    03:7b:02:d4:3d:ee:a2:4b:6d:d6:5a:d3:36:59:60:
                    9b:db:8a:61:26:4f:a4:84:41:5b:c1:4c:87:15:10:
                    4d:8b:d4:ab:56:9e:19:f5:e0:dd:5d:b9:3d:af:5c:
                    2f:39:3c:76:8d:f4:04:6a:22:20:8a:86:08:b9:40:
                    4c:13:98:9a:60:a2:eb:62:a6:5c:9b:50:4f:07:fa:
                    1e:07:b7:9f:c7:40:d1:a3:7b:a7:48:b5:2a:45:cb:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:5E:09:D0:46:25:6E:39:68:32:2E:91:FE:00:AF:82:DB:01:95
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3132382e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:7a:14:15:46:75:5e:37:89:c5:2d:32:90:00:e2:32:a0:43:
         32:8e:23:ac:d3:45:fd:57:75:5f:9e:3f:74:18:c4:10:b6:fc:
         ee:d8:2b:60:38:98:25:0d:86:f8:1b:3e:13:8a:d7:5f:b9:9e:
         11:a7:6f:01:b6:86:75:4f:f2:4c:91:f1:f1:95:c8:fd:4e:0c:
         2d:ad:60:33:4e:f2:b5:d0:3d:0c:9e:6f:04:3a:8b:2c:93:48:
         1d:ed:f0:a8:9f:ad:08:23:e1:a8:64:ff:97:15:4f:ca:a0:42:
         9e:50:34:a7:77:65:7e:b6:c4:47:c3:f9:6e:56:5e:03:11:97:
         ec:e4:58:7c:25:52:ce:72:5e:c1:c9:75:d6:18:e2:6e:c3:a7:
         64:c9:8a:3b:39:ec:68:3e:d6:b3:4d:ec:4a:9c:a4:df:c2:f2:
         af:57:c0:de:81:92:98:10:76:7b:8a:c0:4a:de:99:34:ba:52:
         cf:20:93:1a:ed:3d:80:6e:46:a1:f7:28:dd:fc:c7:99:c9:0a:
         a7:e1:bd:2a:cf:05:b3:cb:0f:d2:36:27:ee:f8:80:e9:d4:ed:
         b0:e3:7d:66:48:4a:49:1b:eb:fb:79:65:c2:f4:93:6c:2b:94:
         e1:e4:f5:42:8a:96:86:68:53:8c:dc:3b:d2:dc:72:cc:d5:d4:
         fc:56:ea:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKua9/qche7K30k2/vpv8pcI19IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNDA4MTYxOTE4MzBaFw0yNTA4MTUxOTIzMzBaMDMxMTAvBgNV
BAMTKDlCQjU1RTA5RDA0NjI1NkUzOTY4MzIyRTkxRkUwMEFGODJEQjAxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImoTlJhHs5YjFbXSEPP9hyUpj
fa/ypi3F/avIg37YjY70wqEL1G58yRHbxEKo4YRR7tMCP16Dx/BGtU/jn3T3O7lt
XgpqiYfdTTHbxDSPJsI/eVcmVWkdPKKe//6uAKZrnMiR+Al7CIrsh/oJrNPz6Zig
zHdmdHHROsPnNspLkbtqCBwn0yu4CCRnSgk8Omhvc1CuUZLvxRw+8RjgaWLI+HKS
jQN7AtQ97qJLbdZa0zZZYJvbimEmT6SEQVvBTIcVEE2L1KtWnhn14N1duT2vXC85
PHaN9ARqIiCKhgi5QEwTmJpgoutiplybUE8H+h4Ht5/HQNGje6dItSpFy4lRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUm7VeCdBGJW45aDIukf4Ar4LbAZUwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMyMzgyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzcyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyICAMA0GCSqGSIb3DQEBCwUAA4IBAQAHehQVRnVe
N4nFLTKQAOIyoEMyjiOs00X9V3Vfnj90GMQQtvzu2CtgOJglDYb4Gz4TitdfuZ4R
p28BtoZ1T/JMkfHxlcj9TgwtrWAzTvK10D0Mnm8EOossk0gd7fCon60II+GoZP+X
FU/KoEKeUDSnd2V+tsRHw/luVl4DEZfs5Fh8JVLOcl7ByXXWGOJuw6dkyYo7Oexo
PtazTexKnKTfwvKvV8DegZKYEHZ7isBK3pk0ulLPIJMa7T2Abkah9yjd/MeZyQqn
4b0qzwWzyw/SNifu+IDp1O2w431mSEpJG+v7eWXC9JNsK5Th5PVCipaGaFOM3DvS
3HLM1dT8Vuo8
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:34 2024 by rpki-client on console-fra.rpki-client.org