Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa
File:                     3137302e37392e3231322e302f32322d3237203d3e2031393136.roa (raw, json)
Hash identifier:          qs+aZ74UorPrtF6YZpvY/E6LufqRPxWxSBJn4H2IzCs=
Subject key identifier:   D4:72:D6:3A:BB:B2:2B:69:20:5C:1B:3F:5B:88:CD:65:83:B0:ED:A2
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       45C264D2A7452FDF389A9A23CA853DCDC70CB8FD
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:28 +0000
ROA not before:           Thu 07 Aug 2025 12:19:28 +0000
ROA not after:            Thu 06 Aug 2026 12:24:28 +0000
asID:                     1916
IP address blocks:        170.79.212.0/22 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c2:64:d2:a7:45:2f:df:38:9a:9a:23:ca:85:3d:cd:c7:0c:b8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:28 2025 GMT
            Not After : Aug  6 12:24:28 2026 GMT
        Subject: CN=D472D63ABBB22B69205C1B3F5B88CD6583B0EDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:d1:cd:25:33:7b:48:d3:a1:4b:73:05:bd:
                    4c:06:7c:8c:dd:66:bc:ab:30:1c:2e:5f:c7:5b:66:
                    81:c7:b8:28:19:69:d5:7c:e2:70:1d:5e:65:d9:b1:
                    0a:b1:fc:d8:62:bb:8a:0e:13:29:a4:0d:5e:8f:3f:
                    db:7e:bc:df:16:1d:f2:e9:fe:d7:c8:04:8b:f6:4f:
                    dd:1d:39:38:d1:be:2c:7d:df:22:37:cc:f4:67:48:
                    23:03:5c:a8:1a:fd:70:dd:b4:e0:c9:a3:89:9a:04:
                    4c:41:19:a1:50:e6:d4:05:e6:14:3d:82:8e:5d:b1:
                    d5:f9:6f:6a:d1:06:3b:4e:ba:e0:0d:24:dd:03:f7:
                    d6:2a:4a:74:fe:42:c9:47:9e:13:b8:f0:4a:45:4a:
                    91:06:91:ba:b3:51:9c:1e:ad:1d:c3:03:39:c9:44:
                    52:c9:20:cf:53:22:8e:dc:0e:2a:87:23:66:0a:56:
                    73:a6:08:64:f8:0b:56:e5:fb:85:43:2b:74:a0:d6:
                    49:25:ed:31:4c:08:97:4e:ca:4d:77:fe:4d:dc:4a:
                    24:e8:73:a0:21:5a:3b:c5:e2:c4:09:f8:9f:7a:77:
                    ef:94:b9:c6:08:bd:55:a6:10:e3:43:4c:0b:9a:17:
                    0b:c2:8b:d9:84:7a:7c:b3:b4:a0:43:14:46:e5:47:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:D6:3A:BB:B2:2B:69:20:5C:1B:3F:5B:88:CD:65:83:B0:ED:A2
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:47:8a:78:ed:84:83:dd:f9:29:4d:c9:c1:0d:e7:cb:44:7e:
         2d:c1:a3:34:2d:b4:40:e2:bc:50:a7:03:c6:cd:02:76:e8:93:
         aa:5a:4a:42:5d:78:ad:66:6c:bb:fc:6e:f0:86:a3:60:71:b8:
         fa:07:fc:5e:77:9f:c8:fb:06:cb:59:58:83:d1:70:8f:a1:1e:
         47:ff:cc:e5:d9:a4:e1:89:22:10:6a:54:53:56:6f:a6:28:00:
         73:6d:1c:66:5b:e6:9f:e0:58:c5:f1:b4:3e:25:20:c2:88:fb:
         f5:ec:a8:cd:eb:26:47:c9:e9:e1:bd:bf:a6:1d:1e:cb:7c:2f:
         77:a6:bd:fc:e5:85:c9:ef:8b:a1:a4:94:c7:bc:00:c4:37:83:
         6f:63:a5:fe:79:3d:86:21:71:3a:a9:4c:b4:a3:f0:2e:89:74:
         36:7a:2d:72:d2:33:51:34:aa:c6:f6:af:bb:7b:f1:d0:d3:e6:
         61:81:4a:4f:e6:63:41:24:67:f0:ba:68:6e:8b:84:63:26:d9:
         b6:f9:07:8b:60:c5:3d:6a:30:21:c0:27:bd:c2:2a:8b:6e:34:
         34:52:88:3d:5a:0c:27:20:38:dc:26:d4:06:8f:b2:b5:56:ce:
         c2:95:e9:3e:5d:58:7b:c4:b8:7d:20:07:1f:99:bc:d8:3e:f7:
         7d:08:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:44:40 2025 by rpki-client