Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3237203d3e2031393136.roa
File:                     3230302e3133302e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          TmxJJpJgATqjXZSX9dsbwrlOMCxqf5S317NCku+s0ds=
Subject key identifier:   7F:6E:7F:46:82:7C:71:8F:0F:D5:D2:02:CE:8B:BB:47:AE:A2:2F:10
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       456D15BBFC551364B33C1079DA3AA1C4C753734D
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:23 +0000
ROA not before:           Fri 16 Aug 2024 19:18:23 +0000
ROA not after:            Fri 15 Aug 2025 19:23:23 +0000
asID:                     1916
IP address blocks:        200.130.0.0/16 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6d:15:bb:fc:55:13:64:b3:3c:10:79:da:3a:a1:c4:c7:53:73:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:23 2024 GMT
            Not After : Aug 15 19:23:23 2025 GMT
        Subject: CN=7F6E7F46827C718F0FD5D202CE8BBB47AEA22F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:1e:c3:34:c8:d0:c0:39:99:5a:ab:ba:02:
                    cb:63:64:9e:a0:aa:58:e4:bb:d4:f9:d8:49:5a:02:
                    d3:f9:54:0c:2b:b0:39:f3:c5:98:fb:20:a8:76:c1:
                    eb:f9:6e:6d:45:9b:24:4c:0c:ab:a0:c8:bb:a3:99:
                    f9:44:09:9e:93:8d:e1:86:1a:f5:d9:1f:7e:84:27:
                    d1:d1:11:27:58:05:39:e3:30:6b:87:e8:77:0c:ab:
                    6c:1a:88:8a:c7:0e:15:2f:38:05:6c:65:0b:cd:6b:
                    32:f0:69:ce:ff:40:32:a4:71:f4:58:3f:12:ff:d2:
                    47:ce:fd:30:dd:40:07:21:5d:fc:59:5d:31:79:00:
                    be:7f:79:2f:66:5f:dc:9b:63:38:d6:76:cc:72:05:
                    10:cb:43:ab:c3:47:72:d7:02:01:89:db:3f:b3:23:
                    a3:80:3d:ce:33:50:7e:37:75:8e:a1:a0:dc:fe:5b:
                    86:aa:34:a6:29:dd:4c:28:67:f6:dc:e2:6f:d7:c3:
                    a0:c1:70:47:4c:42:1d:b0:e4:6a:dc:06:75:e0:23:
                    b0:83:9d:76:d0:22:a8:f0:cf:fa:71:aa:f3:5c:52:
                    96:1a:2a:96:10:c4:78:b8:0c:7a:84:1d:c6:ec:02:
                    6e:d1:9d:8e:63:e8:6c:2d:3e:60:02:f9:22:c3:b7:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:7F:46:82:7C:71:8F:0F:D5:D2:02:CE:8B:BB:47:AE:A2:2F:10
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:bb:95:32:92:a6:d3:8d:6a:5f:55:e4:a6:5f:c8:e9:6d:be:
         e4:e9:fb:54:e2:de:ff:34:0f:85:10:db:c4:05:60:59:db:ab:
         81:69:5e:c9:bc:3c:97:ac:45:c1:af:e8:ce:41:4d:54:93:23:
         7b:a6:ff:11:8f:a2:d2:c6:48:7a:4f:b3:38:56:75:69:d7:4c:
         94:23:2a:e1:cd:24:5d:fa:8f:f9:73:47:dd:b7:d9:47:1d:c0:
         96:7a:08:03:b3:6f:36:d5:a6:fa:c1:29:37:92:f4:57:4d:ba:
         f2:c7:e0:cb:e9:91:3a:41:46:28:5b:34:10:ab:a7:89:7b:8f:
         9c:bd:70:0b:9f:f7:ce:eb:c2:80:ed:33:bd:f9:65:69:08:f3:
         0a:33:8f:db:b9:c0:c4:86:af:17:cb:a8:3e:07:49:a7:ae:33:
         88:4b:d0:8b:02:ce:27:b7:27:6e:03:fe:51:92:1e:ea:a6:e4:
         73:e4:60:fd:e8:51:83:2a:98:30:18:57:d7:02:dc:5b:ae:07:
         58:54:18:34:ca:b6:a0:95:b4:cf:6b:17:aa:00:8e:39:4c:3f:
         eb:ac:37:e1:1c:6f:ab:03:7b:03:be:51:80:d6:18:04:fa:74:
         03:e5:f0:8e:d5:72:d1:ee:41:78:ec:fb:31:8d:be:18:86:3d:
         e8:0c:4f:da
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIURW0Vu/xVE2SzPBB52jqhxMdTc00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNDA4MTYxOTE4MjNaFw0yNTA4MTUxOTIzMjNaMDMxMTAvBgNV
BAMTKDdGNkU3RjQ2ODI3QzcxOEYwRkQ1RDIwMkNFOEJCQjQ3QUVBMjJGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwR7DNMjQwDmZWqu6AstjZJ6g
qljku9T52ElaAtP5VAwrsDnzxZj7IKh2wev5bm1FmyRMDKugyLujmflECZ6TjeGG
GvXZH36EJ9HRESdYBTnjMGuH6HcMq2waiIrHDhUvOAVsZQvNazLwac7/QDKkcfRY
PxL/0kfO/TDdQAchXfxZXTF5AL5/eS9mX9ybYzjWdsxyBRDLQ6vDR3LXAgGJ2z+z
I6OAPc4zUH43dY6hoNz+W4aqNKYp3UwoZ/bc4m/Xw6DBcEdMQh2w5GrcBnXgI7CD
nXbQIqjwz/pxqvNcUpYaKpYQxHi4DHqEHcbsAm7RnY5j6GwtPmAC+SLDt0SVAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUf25/RoJ8cY8P1dICzou7R66iLxAwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMzMzAyZTMwMmUzMDJmMzEzNjJkMzIzNzIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwDIgjANBgkqhkiG9w0BAQsFAAOCAQEAI7uVMpKm041qX1Xk
pl/I6W2+5On7VOLe/zQPhRDbxAVgWdurgWleybw8l6xFwa/ozkFNVJMje6b/EY+i
0sZIek+zOFZ1addMlCMq4c0kXfqP+XNH3bfZRx3AlnoIA7NvNtWm+sEpN5L0V026
8sfgy+mROkFGKFs0EKuniXuPnL1wC5/3zuvCgO0zvfllaQjzCjOP27nAxIavF8uo
PgdJp64ziEvQiwLOJ7cnbgP+UZIe6qbkc+Rg/ehRgyqYMBhX1wLcW64HWFQYNMq2
oJW0z2sXqgCOOUw/66w34RxvqwN7A75RgNYYBPp0A+XwjtVy0e5BeOz7MY2+GIY9
6AxP2g==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:35 2024 by rpki-client on console-ams.rpki-client.org