Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133382e3132312e36382e302f32322d3237203d3e2031393136.roa
File:                     3133382e3132312e36382e302f32322d3237203d3e2031393136.roa (raw, json)
Hash identifier:          qUvQXH6YmkBHxdzOlsVcN8gAZflIxK4KNu0H0l1ePzE=
Subject key identifier:   D1:83:AC:7B:8B:C5:AF:BF:02:CA:82:6F:77:30:8A:AD:D8:E4:87:A2
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       4C51341C2CE5EEE11A16CB0F5B610ABE36647757
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133382e3132312e36382e302f32322d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:29 +0000
ROA not before:           Thu 07 Aug 2025 12:19:29 +0000
ROA not after:            Thu 06 Aug 2026 12:24:29 +0000
asID:                     1916
IP address blocks:        138.121.68.0/22 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 03:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:34:1c:2c:e5:ee:e1:1a:16:cb:0f:5b:61:0a:be:36:64:77:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:29 2025 GMT
            Not After : Aug  6 12:24:29 2026 GMT
        Subject: CN=D183AC7B8BC5AFBF02CA826F77308AADD8E487A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:54:00:25:40:e8:56:4d:e0:2e:9c:19:76:
                    34:73:7b:27:74:f8:ca:23:20:d2:71:74:9d:c6:4e:
                    68:36:70:a5:2d:e0:b6:3c:0e:c3:29:24:d1:2f:c6:
                    01:af:98:25:ae:a5:84:2e:f2:e7:16:c9:36:de:6e:
                    5b:9a:f3:20:ff:59:16:7d:bc:31:db:1c:39:4d:f7:
                    02:9f:14:35:3e:99:83:71:d5:3c:50:6a:2f:64:a5:
                    b1:d9:ff:59:9c:e2:f3:0b:a4:be:92:de:08:8d:f6:
                    c8:28:e7:2a:42:31:fe:16:9c:ba:00:7d:77:31:93:
                    cb:5a:67:88:c7:17:1e:85:dc:d0:cd:9d:31:39:83:
                    18:cb:43:80:3f:e7:49:98:f4:37:70:e3:97:34:bd:
                    0e:6c:ce:a2:a1:28:e5:8c:eb:df:9a:ad:b5:d1:8e:
                    0e:90:6a:92:ba:12:87:5d:34:e7:fa:b2:ab:be:09:
                    3c:6b:a5:ab:05:b7:8b:15:bf:34:0a:49:63:4a:e7:
                    d7:85:a3:2d:3b:70:07:95:b4:ed:32:4e:25:2c:a0:
                    18:e7:06:97:80:b7:d5:b1:4f:94:5f:1d:cc:de:ba:
                    f6:15:c6:15:6c:1d:96:36:4f:8a:de:ef:e6:35:25:
                    12:00:1c:cf:6c:4c:88:7a:4a:40:e3:38:fc:6b:57:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:83:AC:7B:8B:C5:AF:BF:02:CA:82:6F:77:30:8A:AD:D8:E4:87:A2
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133382e3132312e36382e302f32322d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:78:4e:1e:3d:6d:26:1f:0c:53:1a:22:e5:52:12:b0:70:4b:
         38:4e:d4:b5:e9:59:f1:80:fe:a3:57:f9:12:40:ce:46:2b:59:
         5d:60:a3:27:c8:bb:b4:f0:04:7a:d8:d9:40:03:e4:ef:92:af:
         4c:24:31:f6:d9:0b:39:12:f5:cd:74:88:c0:09:b5:ff:66:e1:
         8e:a4:e4:c5:e9:09:b1:fd:c1:a2:97:e2:a4:a8:97:da:f5:0f:
         43:27:0e:40:8e:71:12:e0:04:99:7a:3e:1d:41:a2:d0:40:5b:
         ee:01:e3:dc:0c:2a:62:a8:31:30:a2:d4:e5:a8:af:2d:ae:6f:
         59:1d:84:a0:f1:f8:e3:67:a0:7d:be:3f:69:40:06:7a:af:ff:
         c7:57:15:f0:fc:12:65:6b:99:0e:f4:b3:07:ba:c9:19:74:1e:
         dc:c8:2a:e8:19:c2:e1:3c:f0:94:15:82:09:dc:0e:62:65:04:
         82:2f:ac:48:25:4d:05:0b:8a:b1:61:07:88:da:ac:46:01:18:
         5b:1a:7a:40:62:41:3e:83:77:dd:7d:46:c8:91:b6:2b:8d:f5:
         89:95:d4:33:98:c7:69:a2:ff:55:48:e1:8f:bc:63:fe:55:16:
         56:0a:b3:c6:43:cb:c1:8a:96:34:43:b6:65:6d:da:16:81:26:
         7d:87:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:48 2025 by rpki-client