Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3132382e302f31382d3237203d3e2031393136.roa
File:                     3230302e3133332e3132382e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          MabcT0vl1JcEgCsUzfyuBWNnS29JUThKNk1H/rSHTaU=
Subject key identifier:   C5:88:8E:3A:63:11:DA:8F:34:20:3D:56:38:7C:6D:83:FA:8F:00:1E
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       229CDA5B3C378F17A0F57AE2BB530A5115A41C5F
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3132382e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:24 +0000
ROA not before:           Fri 18 Jul 2025 20:10:24 +0000
ROA not after:            Fri 17 Jul 2026 20:15:24 +0000
asID:                     1916
IP address blocks:        200.133.128.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9c:da:5b:3c:37:8f:17:a0:f5:7a:e2:bb:53:0a:51:15:a4:1c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:24 2025 GMT
            Not After : Jul 17 20:15:24 2026 GMT
        Subject: CN=C5888E3A6311DA8F34203D56387C6D83FA8F001E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c7:c1:4b:ff:1c:4a:c0:91:e8:49:46:7f:25:
                    32:70:ab:2a:70:8b:d6:72:8d:e6:82:4d:84:e4:c9:
                    10:6b:b1:82:24:f3:3c:87:bc:f5:44:5c:b8:f0:ae:
                    3c:0d:42:ba:7e:02:44:1d:69:ff:fd:3c:69:7c:a7:
                    07:13:f9:6a:19:00:6c:96:8e:24:bb:6b:ff:53:d7:
                    04:c1:34:7d:2f:b0:01:49:37:fd:c1:c3:dd:e1:2f:
                    fb:38:1a:40:79:8d:d0:8d:12:83:26:d7:29:52:e4:
                    2f:c0:35:d5:43:70:e4:5b:f0:de:44:2b:b4:03:43:
                    aa:0c:b5:ed:23:81:06:e0:2f:27:ca:9c:95:1f:8a:
                    32:a8:a6:55:51:d3:0b:47:7b:c2:25:68:fc:d1:4c:
                    93:67:28:32:57:3d:86:95:48:02:72:34:39:42:0b:
                    36:2d:27:1b:dc:90:fc:8c:cc:76:bd:fc:8a:38:8b:
                    3c:e2:57:a2:93:ba:76:49:e5:fc:82:1c:10:53:e2:
                    eb:10:9c:e0:99:4e:fd:c0:3b:f2:bc:66:eb:9f:1f:
                    af:58:f5:75:fb:de:a4:a3:d9:53:47:1f:eb:4b:2a:
                    c4:ad:33:73:13:f5:47:77:fe:ca:c9:b1:14:22:f6:
                    62:56:be:1e:c5:0b:7d:a9:8e:7c:39:9a:0a:53:ef:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:8E:3A:63:11:DA:8F:34:20:3D:56:38:7C:6D:83:FA:8F:00:1E
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3132382e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:9a:2a:82:91:53:23:d4:83:91:c1:31:a5:b7:63:92:0f:
         43:b5:4e:bb:08:f1:be:d7:49:73:89:c4:10:af:80:40:0e:e4:
         33:7e:8a:a5:fd:20:01:4b:e5:0d:79:11:29:d5:16:7f:e2:5d:
         f8:86:ab:26:13:bd:8a:9d:eb:09:84:ad:ce:5a:b2:5b:21:99:
         de:e4:b2:a5:af:c5:61:49:9f:28:4f:20:4e:47:b9:ff:e8:50:
         a2:b5:24:7c:a8:73:35:52:88:92:74:ef:84:5d:b2:97:76:61:
         0b:40:71:88:40:c0:43:70:42:0d:e9:f2:ed:76:1b:63:95:80:
         60:43:fd:d4:37:19:d8:d5:66:05:e8:5b:90:49:e5:7f:a5:52:
         d6:50:a2:37:0a:fd:0c:6f:c0:fc:07:ed:0b:bf:07:97:88:9b:
         0d:94:8d:26:25:d4:b8:0e:0b:3e:d8:b8:59:17:4d:8e:2a:56:
         45:20:48:1d:6d:28:95:d2:06:bb:52:28:3d:0d:d2:12:51:7d:
         77:10:f8:e2:af:24:3d:72:5a:a0:ec:f4:d8:86:47:7a:aa:29:
         c8:9c:c9:fb:37:25:51:c4:ae:2d:f0:5b:36:b8:87:f6:a3:57:
         93:b1:0b:5f:33:f0:12:0b:c1:af:61:3f:e1:cc:23:4e:75:d8:
         74:d9:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:44:18 2025 by rpki-client