Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3237203d3e2031393136.roa
File:                     3230302e3132392e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          3JiNKn6po3rvgsdyb74Yity9E63WTLxdTF6mb6iEjGc=
Subject key identifier:   7C:A2:A0:A2:1E:58:5C:B3:3C:44:A1:56:49:66:29:73:EB:03:42:40
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       52FBA1CC9093DC1E01AB68F7CB6FCD53FEC5233F
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:23 +0000
ROA not before:           Fri 16 Aug 2024 19:18:23 +0000
ROA not after:            Fri 15 Aug 2025 19:23:23 +0000
asID:                     1916
IP address blocks:        200.129.0.0/16 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fb:a1:cc:90:93:dc:1e:01:ab:68:f7:cb:6f:cd:53:fe:c5:23:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:23 2024 GMT
            Not After : Aug 15 19:23:23 2025 GMT
        Subject: CN=7CA2A0A21E585CB33C44A15649662973EB034240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:92:ca:e5:50:a4:b4:36:c7:88:0f:ea:43:
                    1f:a4:9d:f0:16:04:59:fd:db:fd:5f:5c:85:41:cc:
                    e5:1e:94:8b:3b:eb:f1:ef:fe:41:25:26:0d:02:fc:
                    df:79:61:b6:b0:d9:69:ec:ca:50:82:51:60:71:b9:
                    e6:5b:9f:8f:e2:7e:b3:9c:7c:24:c0:0b:d4:aa:e7:
                    71:72:ac:12:61:e9:5c:24:ed:d2:90:f3:0f:0e:a4:
                    ee:15:bb:09:cf:12:f6:6f:85:07:eb:97:0a:f2:7f:
                    0b:4a:87:8d:63:3d:13:ef:6e:29:ae:bd:db:e8:62:
                    e9:ae:4b:ad:0a:92:d8:d7:92:19:b0:d4:2a:e9:00:
                    7d:4d:39:e0:a3:dd:a6:51:72:00:76:39:7d:b3:0f:
                    bc:49:b3:6e:d3:59:05:6e:03:cd:4f:39:f1:ae:fb:
                    6b:04:84:9e:9d:44:5b:44:a0:0c:02:77:8d:0d:ca:
                    4f:b0:6f:bc:1c:df:18:8f:68:0e:cd:bd:a4:59:c7:
                    0b:73:ad:7a:62:b6:bf:e8:ac:3c:b4:8e:5d:c7:ff:
                    32:07:b2:c3:1d:17:88:08:01:93:67:7f:3f:9b:be:
                    e5:4f:eb:05:36:69:47:67:b9:f0:6d:da:59:f2:8a:
                    6d:9c:cc:0b:87:3d:a3:f4:f5:ad:4b:54:00:c8:3f:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A2:A0:A2:1E:58:5C:B3:3C:44:A1:56:49:66:29:73:EB:03:42:40
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:a4:e9:2c:c2:e3:62:a6:cb:55:38:4e:c7:a2:00:8d:76:
         d9:79:0b:32:d1:65:00:3d:28:8c:b0:38:ba:97:8d:24:78:f6:
         b0:8e:86:e8:be:58:ed:59:e1:2d:90:70:8a:b4:ba:fa:b7:99:
         cc:85:07:08:da:54:0b:1f:25:d8:40:74:bc:27:f7:04:10:f7:
         c6:5e:dd:25:8f:80:c3:87:f9:64:a9:a0:54:23:c5:a0:13:b4:
         c4:fa:cd:49:b3:68:87:32:2d:14:04:c0:17:29:7a:ca:74:84:
         63:31:81:26:13:59:09:50:88:a7:82:7f:ab:c0:69:de:04:b6:
         f9:fe:fb:e7:c5:4e:85:32:7f:a0:45:ef:7d:4c:05:69:1f:9f:
         c3:99:bc:5c:89:3f:2c:97:64:99:ed:bb:68:98:78:f3:50:42:
         9f:63:35:38:f4:23:81:43:37:cb:d4:71:6f:d4:89:6b:5a:a5:
         95:2e:8b:e3:89:30:99:c9:77:53:ee:60:d9:ac:bd:92:76:a9:
         fa:57:5b:f7:db:c4:05:a1:87:10:3b:7e:bf:a8:3b:e0:83:34:
         49:ef:0f:ac:15:51:6d:16:64:99:89:9c:03:a4:76:06:62:6d:
         ca:09:94:12:18:3c:82:19:b4:74:c9:e7:b5:3c:97:6b:31:06:
         d6:0d:01:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:04 2024 by rpki-client on console-ams.rpki-client.org