Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3237203d3e2031393136.roa
File:                     3230302e3133302e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          w1PaQfHWMyiEPTyar7Y54sGNTQ3iFd4SVabMbuGoKBo=
Subject key identifier:   D2:EE:6B:BA:81:A3:AC:3F:1B:77:A5:A5:49:73:E7:88:33:2D:D6:30
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       2CF0FB62B8D4151A38891809426B9069A4D5111E
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:22 +0000
ROA not before:           Fri 18 Jul 2025 20:10:22 +0000
ROA not after:            Fri 17 Jul 2026 20:15:22 +0000
asID:                     1916
IP address blocks:        200.130.0.0/16 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f0:fb:62:b8:d4:15:1a:38:89:18:09:42:6b:90:69:a4:d5:11:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:22 2025 GMT
            Not After : Jul 17 20:15:22 2026 GMT
        Subject: CN=D2EE6BBA81A3AC3F1B77A5A54973E788332DD630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:90:ab:e6:8f:82:55:27:f8:04:55:02:b3:
                    c7:c7:15:bd:63:78:c3:5c:9d:e8:fa:a7:7b:6e:f5:
                    43:88:7f:34:af:37:8b:ce:75:d4:76:1b:32:a7:ec:
                    5f:b7:25:b2:f2:6b:99:f7:1d:66:de:6e:d8:52:4d:
                    4b:00:87:51:1d:c1:53:eb:44:0b:13:65:b1:a5:c2:
                    02:7c:fb:13:56:7e:5b:28:6d:41:2f:02:b0:4f:e8:
                    57:51:a0:7e:52:20:28:3c:f1:f4:24:9c:7f:78:19:
                    6b:28:00:9d:b9:5e:fb:e4:c6:47:b9:af:99:ba:4c:
                    ea:f6:ca:44:ae:7c:22:91:63:f9:13:76:24:2f:f4:
                    6f:d7:3b:b3:69:49:95:2d:12:66:f6:d5:6e:db:6f:
                    59:e0:4b:c1:1d:85:84:56:e4:07:10:85:cd:06:c7:
                    21:51:22:46:a4:47:8d:e9:46:09:a7:04:15:de:f1:
                    d9:ea:62:59:dd:72:22:dd:eb:87:df:33:da:19:10:
                    3a:db:82:05:3d:e1:c6:6f:b1:5e:00:85:64:fd:7c:
                    0c:f5:75:f7:83:76:a9:59:32:3c:fc:47:74:88:87:
                    c0:4e:b8:d1:af:97:d8:12:4b:ab:e5:70:90:c8:da:
                    43:43:f6:7e:d7:a4:66:60:63:f0:cf:f0:93:a2:0c:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:6B:BA:81:A3:AC:3F:1B:77:A5:A5:49:73:E7:88:33:2D:D6:30
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:85:f2:c9:cb:75:fd:2c:f4:4b:42:48:b6:79:48:ef:b3:
         7a:db:9c:55:b4:01:e5:8f:18:85:89:88:d7:96:b7:35:9d:2f:
         26:14:7a:0f:56:55:96:4a:1c:c7:7c:de:dc:f0:fe:a9:16:f0:
         6b:58:50:be:61:69:1f:0b:ee:cd:86:ff:5b:f2:04:d6:cd:4c:
         c3:d9:92:5b:38:92:a7:0d:a1:a9:12:3f:93:a2:89:9b:ec:12:
         d5:33:ba:ee:d8:16:f8:cc:c6:72:3d:92:6c:aa:5b:c1:96:6d:
         32:1a:ab:5d:62:22:bc:ac:7d:f1:dd:93:2c:ec:e4:d3:d7:5c:
         df:42:a7:92:20:14:27:fb:62:62:e0:8d:81:94:a6:db:25:77:
         04:19:ce:e3:5d:3a:2b:4f:c1:cc:91:bb:72:0a:dc:42:35:42:
         37:02:70:cb:30:fe:68:c6:f4:a1:68:4d:ba:57:66:11:b3:4f:
         4a:7c:8f:e4:55:39:d4:0b:99:38:41:52:29:a6:05:5d:99:1f:
         f3:b7:e2:2b:6b:fb:9d:dd:07:6c:f0:c6:e0:43:59:13:88:8e:
         b5:dc:f4:e9:bc:5c:3b:e5:48:96:5d:a7:e2:d2:80:8b:a8:ea:
         93:b6:d8:17:37:ce:19:37:4b:02:32:1f:9b:74:27:4d:c3:63:
         8e:88:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:45:06 2025 by rpki-client