Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233372e302e302f31382d3237203d3e2031393136.roa
File:                     3230302e3233372e302e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          XpGg25A+kVnk/nuFXjsZLS9clixscMOx3d6qPYJNf9M=
Subject key identifier:   01:E8:B4:23:9B:12:EB:2A:E9:82:51:99:00:8D:A2:24:09:24:7E:62
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       5374CFEBF4849C5C96B3D47CBFA5FBCC539E981E
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233372e302e302f31382d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:26 +0000
ROA not before:           Fri 16 Aug 2024 19:18:26 +0000
ROA not after:            Fri 15 Aug 2025 19:23:26 +0000
asID:                     1916
IP address blocks:        200.237.0.0/18 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:74:cf:eb:f4:84:9c:5c:96:b3:d4:7c:bf:a5:fb:cc:53:9e:98:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:26 2024 GMT
            Not After : Aug 15 19:23:26 2025 GMT
        Subject: CN=01E8B4239B12EB2AE9825199008DA22409247E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:7b:41:f5:f5:a0:e3:25:90:a3:d0:2c:b1:
                    22:5d:3d:67:6b:3a:6d:5c:12:b9:f8:f7:fb:a2:18:
                    a6:b9:3c:8a:7a:bc:81:c8:51:af:c5:f3:6c:67:df:
                    66:e9:7d:26:ec:cc:04:e1:d0:0e:ea:29:0b:24:41:
                    14:cd:0b:7f:80:12:ad:9b:21:51:8d:33:bc:d3:99:
                    cd:bb:f7:26:97:b4:39:64:3d:8b:2d:a7:72:51:e3:
                    7f:fb:e1:0f:06:5b:ac:2d:29:18:47:ac:76:f9:ed:
                    3f:1d:e4:9d:ea:71:2a:8c:92:dd:ef:1d:4c:5d:77:
                    9c:9a:57:06:2d:1c:dd:04:b8:f7:d0:8f:49:4c:70:
                    2f:4d:52:7a:ab:1e:d1:37:08:66:a1:8f:e7:9b:3c:
                    54:5b:94:2f:3f:93:72:f2:7d:4d:ee:56:51:b5:4d:
                    50:f7:1a:53:36:65:bc:fd:3f:b0:74:89:ca:fd:e7:
                    91:6a:f1:b7:81:45:b1:bb:7b:df:08:9c:6d:34:3b:
                    0f:81:43:e9:a1:2f:f1:2d:11:60:b5:11:50:5f:1d:
                    f7:2e:0c:d1:21:ff:56:92:3e:6b:a8:d4:e1:6f:4a:
                    28:30:79:10:eb:99:34:7f:0d:d8:11:9d:a7:23:bc:
                    54:3b:b8:76:f3:ed:89:8c:84:bc:17:19:00:f0:6b:
                    17:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:B4:23:9B:12:EB:2A:E9:82:51:99:00:8D:A2:24:09:24:7E:62
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233372e302e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.237.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:47:24:dd:0c:c5:1f:2d:46:e4:c9:41:21:7a:82:61:8d:
         52:79:5e:0a:e6:3e:84:81:68:be:64:77:eb:9d:35:d5:f3:b9:
         9b:c6:8c:82:5f:4b:78:d5:2e:d5:19:e2:6d:09:07:1e:ee:19:
         07:3b:92:4e:d5:95:e5:e7:cd:1b:51:61:0b:8e:6b:cd:af:6f:
         58:f0:bc:ab:7f:99:5a:5d:61:ac:1a:97:12:70:8a:02:74:90:
         eb:a3:a8:58:bf:9e:b0:06:c2:5c:3c:dc:e3:f6:d8:60:ae:c7:
         c4:a4:31:59:d6:9c:d1:bc:0d:ca:29:a6:54:a3:e5:1d:4e:8a:
         6d:a2:30:bb:2a:cb:54:1d:b1:43:be:96:e0:83:26:9a:79:07:
         71:cf:35:f4:d6:1a:2e:cf:de:fa:6c:25:3f:aa:54:6d:cc:95:
         4a:34:86:aa:49:01:77:09:84:9c:4d:5c:36:2f:b5:0d:14:15:
         2d:60:38:d8:b3:69:b2:98:22:6d:3b:c8:aa:dc:a7:0f:b4:dc:
         70:f6:1b:dc:55:81:a2:7b:17:40:87:94:7d:e3:af:36:63:85:
         bd:5f:1c:34:c2:c1:dd:50:7d:92:01:f0:06:a4:fb:20:f8:c0:
         9c:72:36:1f:60:5f:1c:bc:27:ef:bb:e3:8e:08:c2:7e:82:52:
         6b:f8:60:7b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUU3TP6/SEnFyWs9R8v6X7zFOemB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNDA4MTYxOTE4MjZaFw0yNTA4MTUxOTIzMjZaMDMxMTAvBgNV
BAMTKDAxRThCNDIzOUIxMkVCMkFFOTgyNTE5OTAwOERBMjI0MDkyNDdFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAXtB9fWg4yWQo9AssSJdPWdr
Om1cErn49/uiGKa5PIp6vIHIUa/F82xn32bpfSbszATh0A7qKQskQRTNC3+AEq2b
IVGNM7zTmc279yaXtDlkPYstp3JR43/74Q8GW6wtKRhHrHb57T8d5J3qcSqMkt3v
HUxdd5yaVwYtHN0EuPfQj0lMcC9NUnqrHtE3CGahj+ebPFRblC8/k3LyfU3uVlG1
TVD3GlM2Zbz9P7B0icr955Fq8beBRbG7e98InG00Ow+BQ+mhL/EtEWC1EVBfHfcu
DNEh/1aSPmuo1OFvSigweRDrmTR/DdgRnacjvFQ7uHbz7YmMhLwXGQDwaxclAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUAei0I5sS6yrpglGZAI2iJAkkfmIwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMjMzMzcyZTMwMmUzMDJmMzEzODJkMzIzNzIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAbI7QAwDQYJKoZIhvcNAQELBQADggEBADesRyTdDMUfLUbk
yUEheoJhjVJ5XgrmPoSBaL5kd+udNdXzuZvGjIJfS3jVLtUZ4m0JBx7uGQc7kk7V
leXnzRtRYQuOa82vb1jwvKt/mVpdYawalxJwigJ0kOujqFi/nrAGwlw83OP22GCu
x8SkMVnWnNG8DcopplSj5R1Oim2iMLsqy1QdsUO+luCDJpp5B3HPNfTWGi7P3vps
JT+qVG3MlUo0hqpJAXcJhJxNXDYvtQ0UFS1gONizabKYIm07yKrcpw+03HD2G9xV
gaJ7F0CHlH3jrzZjhb1fHDTCwd1QfZIB8Aak+yD4wJxyNh9gXxy8J++7444Iwn6C
Umv4YHs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:04 2024 by rpki-client on console-ams.rpki-client.org