Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e36342e302f32302d3237203d3e2031393136.roa
File:                     3230302e31372e36342e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          /QOt2QCmo8aEf0MGr000hyGyzFFY+khOntYyXj55eZY=
Subject key identifier:   DB:4D:6A:2F:E9:21:31:3B:9A:20:8E:C7:FD:A8:42:35:0E:00:00:22
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       2356593F28C3686DFBBB7D0E8F21B4D36AADFB57
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e36342e302f32302d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:23 +0000
ROA not before:           Fri 18 Jul 2025 20:10:23 +0000
ROA not after:            Fri 17 Jul 2026 20:15:23 +0000
asID:                     1916
IP address blocks:        200.17.64.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:59:3f:28:c3:68:6d:fb:bb:7d:0e:8f:21:b4:d3:6a:ad:fb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:23 2025 GMT
            Not After : Jul 17 20:15:23 2026 GMT
        Subject: CN=DB4D6A2FE921313B9A208EC7FDA842350E000022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:db:de:3a:c9:c1:eb:75:e8:8d:e0:b2:95:
                    50:0f:65:56:63:ef:90:fa:cc:ce:a0:bc:6b:e9:ac:
                    33:be:1f:ca:3b:bf:b1:67:73:8f:3d:e3:6b:92:a4:
                    78:8b:f4:bf:55:a3:c3:82:87:e3:41:cf:cc:74:41:
                    b5:ba:e9:c0:ab:6e:2a:5d:00:13:91:30:29:58:be:
                    70:ac:03:f6:41:9a:c7:e8:ec:39:bd:d1:c7:d9:f7:
                    44:28:7c:ab:75:ae:9e:53:25:83:3b:c0:b1:cd:82:
                    26:b7:a2:99:67:9f:c1:7c:37:31:d0:d9:36:f3:a9:
                    45:8e:d5:45:cf:83:a8:49:a3:98:fb:4c:ba:81:23:
                    cd:42:fc:84:f4:6d:51:b8:f3:32:cb:d9:15:69:0c:
                    9a:c3:45:b9:ff:73:f6:31:e2:97:cb:9f:df:32:47:
                    8e:61:67:02:da:99:48:36:03:c0:a4:ca:d7:1b:70:
                    d9:c7:53:d8:99:39:d5:62:6e:70:36:9e:20:19:74:
                    a7:32:00:12:48:bf:52:f4:65:f7:7d:8d:8c:c0:53:
                    26:b6:09:5c:c5:90:d6:1a:d9:8c:73:9b:c2:8d:8e:
                    36:36:fa:48:71:70:9f:cd:2d:d6:ec:3e:f2:da:3a:
                    ea:13:11:00:3b:a5:8a:a9:b9:ba:f0:9b:d3:c8:e9:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:6A:2F:E9:21:31:3B:9A:20:8E:C7:FD:A8:42:35:0E:00:00:22
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e36342e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:4e:69:51:70:ae:41:e3:31:e2:d9:0d:e8:85:47:b1:d4:ab:
         64:52:9a:b2:bf:29:d4:6b:42:e6:93:c5:5a:6b:63:6d:62:95:
         0b:95:9c:3a:9f:63:ea:b4:cb:c1:72:87:3e:6c:5d:fc:c0:09:
         f9:2c:66:94:c2:39:8f:47:ad:05:05:ce:6e:1d:f5:53:df:41:
         84:d8:1c:04:7f:d7:42:ff:34:5f:e6:50:50:03:02:fd:d7:6d:
         5c:9b:6e:9e:9c:86:df:82:74:20:3d:27:77:a7:48:da:c8:b4:
         1b:d1:b0:ed:30:ba:13:13:7b:a8:55:79:d3:0e:c9:47:82:15:
         ad:d1:25:10:50:be:6b:5f:7e:92:73:9f:bb:6c:74:1e:e6:7e:
         46:2e:c0:2b:fb:b8:30:30:0c:af:8f:c6:cb:de:ab:e5:1c:d3:
         fa:53:e0:5b:30:53:3b:bf:97:2a:c7:a8:d2:36:65:3a:21:a0:
         95:3c:db:02:7d:5f:38:56:7a:33:d2:33:c9:eb:66:bb:ad:e6:
         92:40:8a:e3:12:c5:71:dc:22:84:cf:18:1e:91:51:3c:53:c5:
         8c:65:36:8f:d8:42:9e:7e:88:90:a3:c8:26:f6:e3:8d:a8:2f:
         ab:06:a7:1e:c7:7b:8c:ea:90:c6:4b:73:64:84:59:a0:9b:1e:
         28:35:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:43:39 2025 by rpki-client