Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3232342e302f32302d3237203d3e2031393136.roa
File:                     3230302e3132382e3232342e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          hrOZIwGH5hWAsn6DzL+7xRd7T5Db7JMjj1WYU/LuqKc=
Subject key identifier:   75:31:35:5B:98:15:78:A6:3A:23:E0:FE:53:B2:FE:56:A6:7E:D6:BE
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       58A43DA7D0C8C2BAD6BE9ECC7B1F9A5076749D28
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3232342e302f32302d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:30 +0000
ROA not before:           Fri 16 Aug 2024 19:18:30 +0000
ROA not after:            Fri 15 Aug 2025 19:23:30 +0000
asID:                     1916
IP address blocks:        200.128.224.0/20 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a4:3d:a7:d0:c8:c2:ba:d6:be:9e:cc:7b:1f:9a:50:76:74:9d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:30 2024 GMT
            Not After : Aug 15 19:23:30 2025 GMT
        Subject: CN=7531355B981578A63A23E0FE53B2FE56A67ED6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:3f:ca:1e:d3:c5:7b:98:26:9e:08:0d:28:
                    67:51:62:17:a4:bf:8e:f6:b8:f8:d4:41:11:e0:50:
                    08:83:a8:c6:d5:20:e6:f0:ca:b9:7a:d2:aa:8a:0a:
                    55:22:5e:b9:8b:c4:3d:26:b6:bf:7e:7f:de:e1:f4:
                    c2:c8:66:b8:65:4b:b4:30:0e:15:2e:1e:56:39:2c:
                    ce:c4:4d:fc:8f:71:dc:a9:d4:06:4c:7c:23:3d:c1:
                    de:c5:4e:68:d5:a9:96:a7:2d:61:ae:a9:72:dd:38:
                    17:98:a7:74:c5:d8:5d:d2:f1:c9:60:20:c1:c1:fb:
                    56:5d:f7:5a:e8:a2:b7:13:b0:ee:d6:ee:f9:10:f7:
                    b0:f4:7e:69:bd:ef:7b:da:97:5a:91:c9:97:8a:c6:
                    9e:1e:5d:43:50:a5:a9:95:89:87:75:9b:20:ec:19:
                    ea:d8:f2:73:4d:1b:bb:b6:63:f6:a0:8b:67:1b:42:
                    38:94:a6:20:e8:80:55:6f:0d:5f:b6:74:16:19:5f:
                    eb:98:7d:c6:02:54:f9:bf:39:6e:7a:76:b4:03:64:
                    2b:1e:f9:bc:c8:77:2b:f0:10:46:c9:d3:1f:35:8c:
                    11:bd:78:2c:62:62:62:fe:b9:c0:4a:d7:d2:ea:c0:
                    e9:ff:a4:52:e1:0e:78:6c:ae:d5:70:32:44:35:06:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:35:5B:98:15:78:A6:3A:23:E0:FE:53:B2:FE:56:A6:7E:D6:BE
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3232342e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:ee:a4:45:fa:de:4f:5e:bc:94:29:1a:4c:fb:d4:de:4c:
         72:9a:b4:42:c3:d7:0a:4c:a1:ef:3f:33:71:98:0d:61:bf:30:
         f5:3c:a6:8b:c6:76:d4:41:f8:b6:c9:7c:10:31:85:d0:aa:87:
         90:25:9c:a2:b3:da:31:6f:55:54:b0:a0:4b:39:ab:46:4d:be:
         58:b8:96:67:2c:33:fa:79:38:3b:c6:b2:e0:1d:a5:bf:9d:6f:
         31:d5:80:0d:fa:4b:8a:f4:ad:26:b1:3b:d7:01:a0:01:63:33:
         85:76:e7:c9:70:fb:e3:b5:03:97:42:d6:42:88:9a:79:d7:6a:
         84:26:7a:cf:16:42:c0:e0:99:a7:f2:f3:8b:1e:4b:97:d7:25:
         51:f6:2c:25:14:72:ab:26:4a:81:c7:ac:32:ca:2a:6c:d8:4c:
         39:2b:9a:c1:71:af:d2:a4:44:1f:e7:95:e8:be:56:ba:71:d9:
         94:36:b9:5d:5c:2c:41:62:72:80:ce:15:50:15:f3:fd:b1:cd:
         be:56:82:fe:a3:b5:77:2b:e7:1b:2e:fc:ce:76:d3:ec:f7:5d:
         b4:b6:bc:f8:fb:88:29:89:2d:48:c9:8e:1b:7c:f1:20:30:ae:
         66:2a:29:1e:d3:51:20:e2:6d:e6:af:a3:06:49:7d:ca:09:59:
         6d:85:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:34 2024 by rpki-client on console-fra.rpki-client.org