Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3237203d3e2031393136.roa
File:                     3230302e3132392e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          P9WqkbgWfFPqts9dR3O2dIhIRoALQXO5faiA5BVlebg=
Subject key identifier:   DF:AD:E2:BF:BD:55:08:34:F9:20:19:E1:32:02:99:65:3B:3C:6A:D3
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       1858847CAF862902FBB740AFC38200E9C614C9C5
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:24 +0000
ROA not before:           Fri 18 Jul 2025 20:10:24 +0000
ROA not after:            Fri 17 Jul 2026 20:15:24 +0000
asID:                     1916
IP address blocks:        200.129.0.0/16 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:58:84:7c:af:86:29:02:fb:b7:40:af:c3:82:00:e9:c6:14:c9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:24 2025 GMT
            Not After : Jul 17 20:15:24 2026 GMT
        Subject: CN=DFADE2BFBD550834F92019E1320299653B3C6AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:8a:21:5d:bb:47:5a:1e:88:86:ec:8a:cb:
                    67:a7:64:e7:19:53:9b:80:19:08:2f:d9:d5:04:45:
                    00:12:0e:96:af:84:05:e1:d5:2c:02:e6:f2:aa:f8:
                    c1:f5:26:02:6a:b3:0c:60:1d:6c:06:7c:30:97:6e:
                    d4:1b:c0:85:a8:f8:46:de:50:4e:4e:88:66:fd:32:
                    68:99:60:8b:9c:9b:9d:8e:88:63:8a:e5:e3:c9:dc:
                    19:8d:75:23:24:df:56:2d:87:39:ff:ee:34:e8:85:
                    78:d2:55:19:b5:09:07:b8:be:51:a1:9a:ce:7f:75:
                    94:70:34:47:55:59:7f:6f:45:97:19:7e:a7:83:45:
                    8e:1d:97:e8:98:d5:f2:a0:75:fa:b5:34:33:dc:4a:
                    97:b1:8b:55:ad:00:10:5c:13:5c:b7:f7:87:06:68:
                    44:31:ea:aa:62:64:23:8a:63:c9:6a:3a:4e:c0:bc:
                    64:13:b5:b3:e2:a4:6f:3d:17:c7:1a:64:40:ae:0b:
                    28:05:65:50:f4:d2:ec:49:c6:4c:60:20:a6:c3:50:
                    95:3a:7e:29:ac:41:9c:4d:f5:c0:13:70:19:b4:90:
                    4e:8c:96:26:37:c1:32:0c:88:34:bc:16:4a:98:d4:
                    fe:a7:e4:6c:db:a6:f8:02:c0:6a:eb:fb:08:64:17:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AD:E2:BF:BD:55:08:34:F9:20:19:E1:32:02:99:65:3B:3C:6A:D3
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:1a:9a:8b:13:c1:4c:b0:bc:b2:b7:22:cf:fd:12:7e:92:
         32:c6:ce:9b:ac:1d:79:a2:d3:c0:59:89:31:13:e0:6c:cc:51:
         c9:df:d3:cf:d3:f8:c4:42:9a:53:df:31:fa:5c:ff:6f:2e:fe:
         93:f1:d4:f6:e7:f3:af:94:0b:30:29:89:79:4b:1f:de:9d:68:
         6b:10:89:3e:d5:16:33:36:ce:64:e1:76:4a:1d:22:32:cd:b1:
         96:5f:bf:4b:84:59:31:10:a4:4d:e3:0f:90:e1:fd:33:c4:9d:
         08:fd:11:bd:5e:d5:77:ec:0a:85:55:75:75:94:86:0f:a8:f7:
         d6:b4:9f:fc:c3:69:46:46:d5:2f:67:d3:f7:a8:59:a9:90:d8:
         fb:37:24:c0:e7:f9:3e:b4:99:11:2a:80:fb:4f:2d:a1:21:1b:
         a3:20:d3:a1:87:1b:0d:e3:64:e6:54:aa:9c:63:9b:59:50:52:
         0a:cf:14:c6:74:b8:dc:88:f5:aa:b7:02:b3:c5:b5:f5:30:7f:
         07:d1:62:fc:e6:6b:88:6e:93:f9:ef:8e:14:0b:ce:38:e8:de:
         ec:b9:0d:8b:e0:b4:51:ef:68:e3:36:5e:0c:68:ba:ee:83:1e:
         ba:6d:cb:71:98:57:16:03:3b:6f:e3:b3:79:df:30:d1:a0:3e:
         15:67:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:42:35 2025 by rpki-client