Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35342e302f32342d3234203d3e203136353039.roa
File:                     3230302e3133302e35342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          WYsRYLX8UCBj8gWUFxSnprxHEltRxOsaPIAY9r+MQ7U=
Subject key identifier:   49:3A:26:38:50:2C:9A:40:A3:CE:23:9B:34:2A:FF:3A:B7:3F:EA:08
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       19C4D7715E634F9D22E7A8CB512C04387DEDA4CE
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35342e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Nov 2024 11:31:01 +0000
ROA not before:           Tue 05 Nov 2024 11:26:01 +0000
ROA not after:            Tue 04 Nov 2025 11:31:01 +0000
asID:                     16509
IP address blocks:        200.130.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c4:d7:71:5e:63:4f:9d:22:e7:a8:cb:51:2c:04:38:7d:ed:a4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Nov  5 11:26:01 2024 GMT
            Not After : Nov  4 11:31:01 2025 GMT
        Subject: CN=493A2638502C9A40A3CE239B342AFF3AB73FEA08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:b6:57:80:ff:41:4c:ab:c0:aa:4d:dd:5e:
                    e2:f7:e4:04:c5:40:40:fa:51:4a:39:b8:76:2d:b3:
                    62:17:c6:c4:61:6c:cf:b2:80:1d:4e:1c:3f:79:d9:
                    ed:2d:5a:cb:e5:dc:df:93:45:4c:9c:97:6b:f0:a4:
                    3c:b9:5a:d6:7e:54:54:83:e8:b8:9c:ea:96:d9:17:
                    00:ca:31:16:fd:0f:d6:59:35:88:82:86:a1:5e:6e:
                    f0:08:3f:aa:ab:ad:1d:d1:d7:43:db:eb:fe:f9:35:
                    5c:e9:a6:a6:cd:83:11:0d:18:f0:cb:54:40:4e:ca:
                    d0:1a:c0:10:ce:36:5b:88:fe:e8:85:eb:21:63:9b:
                    2d:94:ab:c0:9c:90:10:03:41:37:d5:13:2c:3e:1e:
                    21:d5:e3:e7:6a:be:14:b8:df:c1:63:ae:ae:61:21:
                    0b:0f:27:ce:76:61:15:03:2a:8a:8b:c0:e5:17:ec:
                    2b:ff:13:36:30:4e:c1:76:d5:75:81:62:73:0d:5e:
                    43:3c:21:e0:4f:62:be:e0:c1:05:19:65:77:35:86:
                    d6:0c:d1:ef:0a:33:0d:b7:89:c3:de:ce:28:f8:70:
                    c4:63:25:89:7f:ae:57:c0:a6:f7:b0:2a:68:d1:bd:
                    37:8a:7f:69:07:70:b4:e8:47:cb:7d:91:2f:04:02:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:26:38:50:2C:9A:40:A3:CE:23:9B:34:2A:FF:3A:B7:3F:EA:08
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:e2:8c:76:4c:39:d8:5f:45:91:a2:35:db:6e:19:14:0a:
         9e:28:e5:4d:63:12:95:d4:36:9a:47:43:2d:e3:4c:ba:6c:aa:
         80:29:5c:80:7f:ef:e7:b3:ce:f7:18:3f:e9:cd:eb:7a:2f:c0:
         0e:f6:5f:1d:2e:1d:19:7d:ce:59:73:3e:fa:47:fa:84:5e:74:
         b4:2a:0e:c5:3d:4c:7b:a3:3e:79:5e:b0:94:9a:72:28:af:07:
         05:16:07:e4:cc:22:4c:09:4d:16:f2:03:7a:a3:39:4e:9c:db:
         9e:cf:b6:71:cf:16:90:b7:6c:4c:2e:27:39:4b:14:a2:0b:b9:
         77:6d:6f:e3:f5:78:72:a5:29:aa:9b:a1:97:01:41:15:81:8d:
         36:51:24:63:df:6c:88:26:80:11:82:b1:50:d1:e3:ab:0b:ef:
         a6:1d:aa:6b:ad:eb:17:0d:dd:25:de:c9:72:39:5e:9d:39:7b:
         6e:ad:54:f4:ca:8e:00:e4:58:8b:17:f3:07:bd:26:2f:94:da:
         5e:c1:8a:6f:6f:fb:67:d7:13:de:97:7d:2b:1a:eb:25:19:8a:
         39:08:ad:e7:e0:0a:1d:32:1e:7f:b9:c9:d2:06:5f:b3:88:e0:
         38:44:29:c5:48:bc:5c:db:89:ab:b2:a0:41:96:ab:62:d0:61:
         a0:d6:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:28 2025 by rpki-client