Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3237203d3e2031393136.roa
File:                     3230302e31372e3131322e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          aAbX3URPZZH441hx9SCUZSzW8X+OXjWUD3ZmpfFFleY=
Subject key identifier:   2C:15:04:B8:50:2B:2A:4C:F2:72:A3:26:13:3C:36:08:FC:E2:32:FC
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       3A2E5F387BBEFA156D026CE853E84289FA76EBA4
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:23 +0000
ROA not before:           Fri 18 Jul 2025 20:10:23 +0000
ROA not after:            Fri 17 Jul 2026 20:15:23 +0000
asID:                     1916
IP address blocks:        200.17.112.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2e:5f:38:7b:be:fa:15:6d:02:6c:e8:53:e8:42:89:fa:76:eb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:23 2025 GMT
            Not After : Jul 17 20:15:23 2026 GMT
        Subject: CN=2C1504B8502B2A4CF272A326133C3608FCE232FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:83:af:43:ec:d8:23:e1:c9:8a:5c:0c:73:
                    1b:f4:05:10:80:04:3e:1c:53:f7:50:2f:32:f8:e6:
                    45:26:c1:8a:fb:77:28:a2:c5:ed:62:e5:58:30:68:
                    4f:32:f5:2c:fc:9d:73:95:26:8a:51:84:60:63:64:
                    8a:e0:02:1b:5c:f9:61:f5:ad:a9:be:94:f5:b8:c2:
                    4a:16:31:a9:67:ec:20:1e:a5:dd:1f:76:7a:13:13:
                    6b:c5:7b:e1:bd:3a:76:eb:4d:3d:d9:c1:57:94:76:
                    37:e9:3b:d9:9a:27:5b:b0:a8:af:03:2f:21:bc:e3:
                    f4:ea:18:01:97:7e:67:00:50:a0:47:4f:ec:9d:3e:
                    b5:47:03:e7:0d:d3:29:a1:fb:6e:4c:83:fe:e2:05:
                    ec:6d:f5:c6:02:b0:5c:03:12:82:9f:4b:c4:61:74:
                    ae:ab:b5:19:1a:04:57:af:72:79:67:7a:8f:a1:57:
                    1f:79:14:39:80:74:69:8c:b7:b2:0c:9e:c4:68:ff:
                    a1:d6:23:ff:34:0d:0b:8f:04:09:84:a6:59:20:08:
                    d4:a1:9f:81:a9:b3:66:b6:99:85:bd:78:0c:46:10:
                    ec:56:4f:0f:f7:32:32:8c:25:3e:84:03:25:83:d7:
                    f4:9a:f5:fd:1d:59:95:72:fa:7d:0c:41:e7:3c:78:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:04:B8:50:2B:2A:4C:F2:72:A3:26:13:3C:36:08:FC:E2:32:FC
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:92:ed:20:0c:40:ee:0f:80:60:ee:ac:ae:da:09:ba:35:
         88:fb:d0:9b:62:ad:f5:d2:84:c4:78:4e:91:34:36:81:4f:80:
         e4:50:69:61:58:8a:b8:83:a9:fc:f8:f2:e6:96:cd:12:d3:25:
         9e:9e:ea:fb:3d:0a:d0:30:21:a8:56:71:d1:fc:c9:a2:c0:d9:
         88:c5:6b:1d:c5:ad:bc:ab:02:d4:2c:3c:b1:95:0a:61:87:d2:
         12:f9:7a:03:34:0a:5a:1c:74:a7:28:fb:b1:9c:b6:ff:17:f3:
         ae:fb:b8:41:3e:4b:0f:93:d8:56:fe:57:bf:4e:e9:e5:17:cd:
         87:36:e2:b4:d1:1e:da:3b:7c:79:48:71:e5:8c:e6:7a:69:de:
         f4:89:4d:ea:85:ec:1c:81:31:52:b5:a9:3f:93:2a:98:14:b0:
         0c:25:16:97:5e:d7:36:a9:93:60:c9:51:80:14:74:95:92:1c:
         b6:fd:f1:5a:af:a1:7b:a6:31:dd:d3:c2:30:49:19:26:35:19:
         7d:68:5d:90:5d:b3:ba:31:1a:17:bf:95:ae:e4:76:af:9e:3b:
         13:42:ee:9b:a0:13:41:a7:73:33:95:2e:90:8c:b2:2e:d5:9b:
         cc:be:79:80:c9:55:7b:60:28:e6:88:a2:5f:25:b5:d6:56:df:
         55:c2:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:59:26 2025 by rpki-client