Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa
File:                     3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          aJkN9j805Y5/eRxA++MWFS/S4mW0QnPItatmIg5R0UQ=
Subject key identifier:   EA:23:B8:B1:C7:A2:00:85:37:F3:B9:3E:7A:29:CB:B4:B1:71:3C:7E
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       335F9375268F0715AAC0A2478AD16C457FF6B16A
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:23 +0000
ROA not before:           Fri 18 Jul 2025 20:10:23 +0000
ROA not after:            Fri 17 Jul 2026 20:15:23 +0000
asID:                     1916
IP address blocks:        200.143.192.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5f:93:75:26:8f:07:15:aa:c0:a2:47:8a:d1:6c:45:7f:f6:b1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:23 2025 GMT
            Not After : Jul 17 20:15:23 2026 GMT
        Subject: CN=EA23B8B1C7A2008537F3B93E7A29CBB4B1713C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:55:65:08:42:a7:77:f5:16:6a:db:f2:9b:
                    36:69:15:30:6d:ef:51:fb:ce:a3:da:79:71:23:94:
                    bd:09:b8:9d:e7:81:bd:5e:b5:91:68:d1:12:89:25:
                    62:45:c0:b4:d1:43:35:37:c0:2c:21:50:92:fb:e3:
                    7e:c7:b1:bd:17:4b:3f:a1:d7:68:c6:fe:19:41:3b:
                    ba:1a:39:8d:10:d6:7d:6b:3e:43:87:47:5d:ed:e6:
                    a3:e5:4a:db:19:8c:c5:75:51:8d:ca:ed:80:db:82:
                    65:b5:bc:dd:b6:57:2c:ec:96:3b:64:b9:ae:ab:fb:
                    c8:dc:54:2a:df:af:7c:e6:7e:e7:5a:0b:d7:b2:c1:
                    87:75:33:70:c4:66:53:43:e3:59:0c:01:cc:c1:cb:
                    41:15:eb:33:c1:08:a0:c9:3b:d6:42:07:b8:94:fc:
                    46:d2:f4:5d:1c:0c:db:55:65:e5:6e:58:c3:aa:94:
                    3f:64:fa:55:c3:d7:96:2d:d7:06:f7:b6:92:f3:cd:
                    73:04:98:0e:f4:3a:a0:c8:06:e9:cf:c9:22:5d:bd:
                    2d:4f:38:0b:52:27:98:b6:1e:47:a7:82:63:cd:5b:
                    56:a5:17:44:9b:e2:3a:11:e5:9f:21:dc:75:86:73:
                    ee:fd:01:76:9b:a4:e7:33:73:0f:18:1f:45:28:78:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:B8:B1:C7:A2:00:85:37:F3:B9:3E:7A:29:CB:B4:B1:71:3C:7E
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:f6:c6:67:fb:aa:fc:b3:78:a0:1b:da:21:be:35:65:d7:
         4c:61:0d:b1:24:2f:d5:e3:ca:b9:86:62:70:e8:0b:3d:7d:1e:
         ab:b8:b3:2b:44:c6:2c:9f:ad:77:8e:9f:40:05:1b:46:d4:3d:
         fc:4e:e4:59:a7:23:8f:b6:48:82:45:99:b3:ee:44:38:a4:ef:
         c1:ca:f3:24:7d:68:e9:eb:44:39:07:c6:79:8c:88:87:c1:1e:
         b1:3c:9c:f4:9a:26:14:06:5f:f0:bd:f8:50:f4:83:58:c9:01:
         f0:0e:e1:8c:d8:06:63:73:95:be:3c:71:b1:3d:40:04:af:74:
         b2:eb:fd:b3:93:eb:f4:6e:b4:cf:3b:95:d1:44:c2:71:f1:69:
         fe:b6:6e:8e:c0:00:a0:0d:d4:41:f0:ec:45:24:35:79:0a:73:
         02:cd:10:de:1d:66:1d:c3:4f:36:3e:4b:ce:de:49:67:7e:91:
         70:b4:b9:e4:46:c8:2b:d3:45:9a:b6:ae:74:5b:16:63:eb:a2:
         f4:17:c1:0e:94:cc:b0:25:45:5f:49:73:17:31:bd:16:64:a4:
         ba:a4:66:e3:81:5e:a4:20:2d:18:2f:c5:99:6a:b0:d9:14:c6:
         1a:b0:bb:11:e4:7e:2c:12:c3:e5:91:55:0f:1d:70:27:14:cc:
         65:23:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:46:06 2025 by rpki-client