Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133372e302e302f31362d3237203d3e2031393136.roa
File:                     3230302e3133372e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          stq1j88X4boPYN+5tqt1Y5OBn8VYT5hEX407N5Gmz0Q=
Subject key identifier:   36:0F:76:11:AD:9C:B5:91:9D:D7:2E:D6:35:40:41:4F:55:48:E9:E1
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       413F6BED26A25BBAAC0B0875B229C5875620F50E
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133372e302e302f31362d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:23 +0000
ROA not before:           Fri 18 Jul 2025 20:10:23 +0000
ROA not after:            Fri 17 Jul 2026 20:15:23 +0000
asID:                     1916
IP address blocks:        200.137.0.0/16 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3f:6b:ed:26:a2:5b:ba:ac:0b:08:75:b2:29:c5:87:56:20:f5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:23 2025 GMT
            Not After : Jul 17 20:15:23 2026 GMT
        Subject: CN=360F7611AD9CB5919DD72ED63540414F5548E9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:35:90:52:45:17:00:3f:96:9c:3c:eb:b9:
                    0f:ca:1b:be:85:6c:8b:ee:ea:fa:83:11:1a:ff:06:
                    d1:c4:c7:91:99:4e:0c:88:2a:df:56:1e:38:09:50:
                    09:0f:f4:e0:83:6c:4b:c3:24:9a:7f:04:3f:c9:2c:
                    6c:9d:21:9d:46:7f:8d:dd:3f:a8:8b:f5:02:df:e4:
                    be:34:4b:2e:19:30:3f:df:db:44:94:9b:8d:83:a9:
                    aa:e0:52:93:b6:d5:27:ed:e8:7f:00:5c:de:55:3a:
                    5b:3b:82:fb:73:8d:0e:c1:3c:7c:9e:95:48:a1:3a:
                    50:8e:5a:ae:61:c6:c6:ed:a4:ba:34:f6:e0:7f:6e:
                    d6:d9:5f:eb:b5:63:dd:d8:e1:1f:62:c7:4a:5a:42:
                    48:08:04:85:fd:69:09:b3:ea:ca:84:86:61:12:9a:
                    07:d2:bb:09:43:a9:57:5c:d6:8a:38:01:f2:48:38:
                    2a:28:59:ef:52:9d:c5:14:65:6b:75:79:a7:23:57:
                    70:89:9f:b4:64:3c:9c:86:13:e3:b3:f4:1f:23:22:
                    75:02:98:cd:72:ba:37:0a:84:70:af:fd:eb:dc:65:
                    ef:d7:d0:dd:1d:73:39:f8:31:25:f3:5a:91:9f:bd:
                    c1:9f:b0:a0:81:72:4f:cb:24:6a:16:71:29:29:1b:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:76:11:AD:9C:B5:91:9D:D7:2E:D6:35:40:41:4F:55:48:E9:E1
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133372e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:85:62:2d:ab:5f:dc:72:c3:73:ad:82:6c:3f:b5:fd:c5:
         86:20:59:01:04:86:30:de:e3:0a:5d:22:db:a5:f5:f7:c1:f6:
         6f:ce:93:aa:fe:51:ef:0b:87:e9:5d:a4:be:3c:f5:38:ac:35:
         63:4f:d5:0d:84:0d:1e:55:35:c0:28:b7:c1:91:47:28:42:54:
         6b:85:1f:fc:d3:b5:b1:c4:07:9d:ca:85:77:e9:68:fd:e5:bb:
         fe:a7:6c:e6:8d:22:b6:a1:29:3f:a6:3a:c4:c7:05:15:6b:b8:
         60:f3:6d:fc:3e:b4:83:31:08:4a:c6:29:8d:23:61:81:d6:ba:
         11:ae:cd:72:16:7b:9e:6d:d8:45:4a:94:39:f9:19:00:ca:f7:
         49:e9:07:99:fa:da:a3:64:c6:44:35:9c:ee:1c:50:56:45:21:
         38:18:12:19:2b:c5:4a:83:ea:24:03:8c:f4:23:83:85:03:c3:
         84:28:41:b2:f6:b5:18:0b:ad:73:07:87:cb:43:dd:b3:75:40:
         06:bc:b0:9e:71:69:b2:c2:af:7c:a1:46:7a:29:35:a9:8f:27:
         28:dc:30:15:f5:51:a8:25:83:b7:ba:c5:55:1e:1b:fb:f1:9a:
         04:e7:02:4b:e8:ef:94:05:47:b5:a1:fc:b1:34:98:17:ed:f8:
         44:4c:31:3e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUQT9r7SaiW7qsCwh1sinFh1Yg9Q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTA3MTgyMDEwMjNaFw0yNjA3MTcyMDE1MjNaMDMxMTAvBgNV
BAMTKDM2MEY3NjExQUQ5Q0I1OTE5REQ3MkVENjM1NDA0MTRGNTU0OEU5RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT8DWQUkUXAD+WnDzruQ/KG76F
bIvu6vqDERr/BtHEx5GZTgyIKt9WHjgJUAkP9OCDbEvDJJp/BD/JLGydIZ1Gf43d
P6iL9QLf5L40Sy4ZMD/f20SUm42DqargUpO21Sft6H8AXN5VOls7gvtzjQ7BPHye
lUihOlCOWq5hxsbtpLo09uB/btbZX+u1Y93Y4R9ix0paQkgIBIX9aQmz6sqEhmES
mgfSuwlDqVdc1oo4AfJIOCooWe9SncUUZWt1eacjV3CJn7RkPJyGE+Oz9B8jInUC
mM1yujcKhHCv/evcZe/X0N0dczn4MSXzWpGfvcGfsKCBck/LJGoWcSkpG5MpAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUNg92Ea2ctZGd1y7WNUBBT1VI6eEwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMzMzcyZTMwMmUzMDJmMzEzNjJkMzIzNzIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwDIiTANBgkqhkiG9w0BAQsFAAOCAQEAXSuFYi2rX9xyw3Ot
gmw/tf3FhiBZAQSGMN7jCl0i26X198H2b86Tqv5R7wuH6V2kvjz1OKw1Y0/VDYQN
HlU1wCi3wZFHKEJUa4Uf/NO1scQHncqFd+lo/eW7/qds5o0itqEpP6Y6xMcFFWu4
YPNt/D60gzEISsYpjSNhgda6Ea7NchZ7nm3YRUqUOfkZAMr3SekHmfrao2TGRDWc
7hxQVkUhOBgSGSvFSoPqJAOM9CODhQPDhChBsva1GAutcweHy0Pds3VABrywnnFp
ssKvfKFGeik1qY8nKNwwFfVRqCWDt7rFVR4b+/GaBOcCS+jvlAVHtaH8sTSYF+34
REwxPg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 06:44:20 2025 by rpki-client