Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e38302e302f32302d3237203d3e2031393136.roa
File:                     3230302e31382e38302e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          HhpAtAM4DF0Eq8pxjfSSxtdD1PvMeEoB+9IePhZPzag=
Subject key identifier:   4B:B8:44:E4:A8:1C:15:96:40:2B:76:B8:07:73:13:CD:D2:92:D1:15
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       17D0F47861721F5AEB6BF84132227B53785DE5E0
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e38302e302f32302d3237203d3e2031393136.roa
Signing time:             Fri 18 Jul 2025 20:15:24 +0000
ROA not before:           Fri 18 Jul 2025 20:10:24 +0000
ROA not after:            Fri 17 Jul 2026 20:15:24 +0000
asID:                     1916
IP address blocks:        200.18.80.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d0:f4:78:61:72:1f:5a:eb:6b:f8:41:32:22:7b:53:78:5d:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Jul 18 20:10:24 2025 GMT
            Not After : Jul 17 20:15:24 2026 GMT
        Subject: CN=4BB844E4A81C1596402B76B8077313CDD292D115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:60:73:e7:d2:3e:50:fe:c8:04:d2:43:0d:
                    33:1b:7b:46:a4:29:da:94:c4:2d:b9:a8:8f:75:82:
                    3c:70:1a:d7:cf:d4:bb:1a:7f:65:a9:ee:c5:4a:62:
                    ea:df:78:c6:1b:f3:dd:d9:aa:5f:7b:5c:0c:f7:c9:
                    80:d1:d9:79:42:95:88:bf:ff:6c:3a:08:e6:46:f4:
                    83:a8:b6:e9:c3:63:9d:b7:8b:83:1d:c6:30:68:33:
                    1b:f5:f2:27:cf:6a:d1:d0:d8:73:b6:2d:7a:18:c3:
                    42:98:46:bc:7e:44:54:26:f9:9e:33:1b:f3:2f:2a:
                    73:f5:c3:2e:eb:3f:e2:61:5a:8a:1a:f4:b3:e4:d8:
                    49:78:a2:fa:f9:02:9d:c1:58:3b:f7:b2:5e:ff:3f:
                    6e:e8:14:a8:6d:c9:e1:40:9b:6a:a1:70:20:4b:7a:
                    07:2f:8c:d8:9c:f6:3a:5d:e4:12:b8:0f:8b:45:90:
                    31:bb:01:41:dd:7b:e5:da:45:8a:50:0b:dd:bf:90:
                    9f:9a:ff:da:53:bd:64:da:9e:57:7e:dc:78:d1:53:
                    96:54:aa:77:80:47:e9:20:b7:3d:a0:9b:a2:7f:83:
                    57:bd:e0:08:77:4d:ce:b9:65:6e:c7:28:06:95:a9:
                    bb:81:e0:e1:ba:70:08:50:8c:2c:e6:5e:e0:a3:59:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B8:44:E4:A8:1C:15:96:40:2B:76:B8:07:73:13:CD:D2:92:D1:15
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e38302e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:b8:02:c4:6b:39:e8:f0:b7:58:6a:50:ed:0b:91:90:21:
         61:e4:42:50:11:00:a4:c8:74:e4:73:70:6c:9c:77:75:26:07:
         77:a4:2c:af:dc:84:b2:9f:d1:61:90:e9:99:90:8d:c5:6e:84:
         43:08:8a:20:1c:1a:50:91:f7:3f:8f:72:2d:6a:c2:d1:38:b5:
         4a:5e:be:b9:f6:ac:f5:24:09:f8:b1:71:c4:4e:af:57:ce:84:
         4a:4e:4f:3a:98:09:0e:52:97:d2:84:a4:71:61:de:86:66:78:
         49:9d:5b:22:b0:f1:1a:69:e3:a5:16:b0:38:e2:c8:56:07:e1:
         3d:6a:d6:e5:19:b5:8a:9f:76:42:6c:bc:9f:03:41:85:0b:52:
         cb:2e:25:fc:be:c6:c7:67:64:16:fa:cd:69:5f:03:42:17:b8:
         ac:bb:1e:14:e9:6c:7a:06:7a:f9:40:79:8b:3e:0e:cb:48:ef:
         60:27:91:d9:43:d7:b0:0d:08:7b:02:59:b1:79:8a:55:32:b2:
         a7:83:a2:cd:9b:9a:b9:49:36:b9:6a:14:40:e4:4a:08:ee:3e:
         e9:92:a6:ec:71:33:99:16:c7:a0:cb:16:cc:a5:0d:52:14:0f:
         41:c7:b8:d5:d3:fe:06:d0:81:0b:cd:94:9e:53:13:9c:bf:af:
         6c:c2:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:46:05 2025 by rpki-client