Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3132382e302f31382d3237203d3e2031393136.roa
File:                     3230302e31382e3132382e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          ZnDS/zpk6OzkR33iL1HW219p3eNLVO0jA1nwTEpizy0=
Subject key identifier:   E0:95:14:79:16:56:E6:4B:EC:57:14:26:5C:CC:E3:72:AF:C0:43:DD
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       2A9694FE4CE10DA005DA91CCF541FA04BDB22DA7
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3132382e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:24 +0000
ROA not before:           Fri 16 Aug 2024 19:18:24 +0000
ROA not after:            Fri 15 Aug 2025 19:23:24 +0000
asID:                     1916
IP address blocks:        200.18.128.0/18 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:96:94:fe:4c:e1:0d:a0:05:da:91:cc:f5:41:fa:04:bd:b2:2d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:24 2024 GMT
            Not After : Aug 15 19:23:24 2025 GMT
        Subject: CN=E09514791656E64BEC5714265CCCE372AFC043DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:7d:9e:1d:85:b6:75:28:57:09:5c:b2:16:
                    18:d1:a6:16:c1:71:b6:69:e9:f1:47:94:9f:db:ad:
                    24:22:bc:b1:6e:28:fc:61:32:8c:63:6a:20:f0:89:
                    24:67:5e:c9:ac:dc:41:40:4d:ef:26:67:4b:ed:83:
                    42:04:7f:62:de:18:6c:94:6c:6b:94:2f:f2:30:f8:
                    fe:21:34:dd:38:99:34:9e:cc:5d:18:ee:05:5b:e4:
                    ba:3c:0c:fd:19:31:1b:ab:17:cb:83:cc:a1:25:3b:
                    b0:8f:f7:64:4b:80:a0:de:a7:f8:7b:df:05:14:a8:
                    fd:5c:b2:a2:55:f7:b8:ae:6f:d7:69:03:73:5d:d7:
                    7f:b4:85:c5:f6:cc:51:2c:d7:5f:71:95:7f:c0:22:
                    41:ac:b2:f7:f6:e2:90:3d:d7:79:30:e5:35:be:c9:
                    2b:a0:89:cd:a8:7b:11:66:98:7e:e5:10:fb:7d:46:
                    aa:d3:66:7d:10:9d:78:73:7b:2d:33:85:eb:e1:30:
                    fe:17:ae:7b:53:e4:7c:0b:61:43:5d:c4:38:52:0e:
                    dc:d7:49:51:13:66:f2:8f:e4:90:ee:89:ff:d8:8a:
                    ca:6b:63:81:cd:bb:c2:b0:08:55:12:da:91:2b:78:
                    1f:4c:68:b9:fc:fc:3f:bb:1a:3d:33:a5:bb:44:36:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:95:14:79:16:56:E6:4B:EC:57:14:26:5C:CC:E3:72:AF:C0:43:DD
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3132382e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:25:e8:b3:c5:32:88:62:29:be:d6:a1:13:cb:c0:88:d3:f6:
         db:9a:3f:d5:ef:0d:01:f1:08:6a:16:f5:2a:cc:79:e5:72:d3:
         12:21:89:3b:60:89:29:4a:11:ce:6e:c9:7c:f6:c1:97:5d:c4:
         c9:14:8d:be:f3:99:62:33:79:fa:5c:14:de:e9:a1:53:97:a1:
         6c:06:09:77:f3:32:5a:5b:67:87:70:5a:c5:a2:fd:ab:65:e8:
         4a:14:b1:d8:cb:5b:66:f4:01:1c:23:97:53:35:e6:df:01:c4:
         b4:1c:6e:e2:68:04:2e:f2:30:29:f5:86:48:af:db:1e:ba:0f:
         da:b2:0e:b8:d0:90:91:78:f9:77:1e:f6:f9:2b:15:1b:25:84:
         ef:12:8b:d1:a0:ec:ac:26:4c:15:d1:74:ae:84:fa:0c:8e:e8:
         4f:f0:f9:1a:2b:a6:29:bb:65:31:17:d8:af:b8:12:70:db:a5:
         a1:e2:b1:a5:54:ac:33:77:a2:e2:50:5b:09:8b:a8:17:fe:5d:
         0b:71:64:f0:34:94:e8:e0:8a:e6:b7:96:10:fd:5d:b4:2d:0e:
         9a:aa:82:90:d3:22:1a:5a:8f:48:54:ec:c3:6d:ea:41:e2:40:
         46:28:f1:26:2b:55:5d:82:cb:61:25:a5:ea:b1:1e:30:c9:5b:
         da:b0:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:34 2024 by rpki-client on console-fra.rpki-client.org