Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133312e302e302f31362d3237203d3e2031393136.roa
File:                     3230302e3133312e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          OlsWh2jHfrm03eZgP3KAekKHlMUQtW2Ed5C61pj5nOA=
Subject key identifier:   28:CB:17:AB:27:A9:6A:B7:99:9C:DC:A6:A5:51:34:1A:78:3A:BE:9A
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       03FCFD6373A2DC04B85C529596D3A332692C8E02
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133312e302e302f31362d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:27 +0000
ROA not before:           Thu 07 Aug 2025 12:19:27 +0000
ROA not after:            Thu 06 Aug 2026 12:24:27 +0000
asID:                     1916
IP address blocks:        200.131.0.0/16 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 07:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:fd:63:73:a2:dc:04:b8:5c:52:95:96:d3:a3:32:69:2c:8e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:27 2025 GMT
            Not After : Aug  6 12:24:27 2026 GMT
        Subject: CN=28CB17AB27A96AB7999CDCA6A551341A783ABE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:bc:63:67:d7:b2:45:d6:4c:07:0e:1f:db:
                    8a:de:1e:47:d3:ac:d0:1a:f4:2f:77:a6:a1:aa:30:
                    c2:78:af:a7:a9:56:c5:b7:69:47:c9:bc:af:62:59:
                    10:c9:89:c9:30:6e:33:2c:12:a1:88:55:46:07:c1:
                    18:ae:76:53:1d:7f:32:7c:e0:61:66:b3:b1:cf:7b:
                    89:02:f7:4c:41:44:17:cb:ed:01:b2:59:34:c3:f8:
                    ca:11:56:fc:da:c2:8e:7d:e5:9d:6f:a2:23:95:6e:
                    80:da:8e:f5:7f:94:59:e0:84:4d:f1:f9:ab:b6:49:
                    3f:bb:8b:42:b3:8b:a5:4d:20:8b:4b:2c:90:d1:89:
                    1d:fb:8f:fd:d4:86:30:6e:71:54:c7:f0:82:3c:fc:
                    b0:80:b7:c3:a4:90:ad:bc:dd:69:08:c6:e1:67:f1:
                    e6:1f:67:1b:cb:a4:82:2b:67:a4:b1:63:10:57:b0:
                    3e:91:05:b8:d5:96:37:01:a0:d3:15:3b:a7:e4:0a:
                    31:51:fb:e5:9e:b7:27:9e:d4:b0:b7:60:3b:79:d7:
                    d1:95:ef:d6:12:fe:39:71:9a:ee:ef:72:93:d6:f2:
                    a1:f2:8a:68:6c:ef:b8:b5:c4:b3:fa:4c:e5:cd:2f:
                    fa:ef:05:b6:ef:6e:e7:1d:04:7b:7b:af:86:9d:d4:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:17:AB:27:A9:6A:B7:99:9C:DC:A6:A5:51:34:1A:78:3A:BE:9A
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133312e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:61:95:8a:8e:c7:f9:49:84:a0:24:49:c0:4f:a1:b1:82:
         2b:dc:84:77:30:52:17:6b:73:5b:2f:d2:16:45:c4:b5:29:36:
         e1:7d:1a:32:08:a3:16:82:5f:b3:dc:a8:b9:e4:bb:e8:7f:76:
         d2:65:65:b5:a3:85:b8:7d:75:19:ac:6b:cc:07:0a:0c:f9:2a:
         06:bd:92:be:7b:db:34:e5:ba:63:1b:40:98:cf:69:38:e3:e9:
         48:1c:e6:76:1b:a8:e4:a8:92:5e:ee:b9:dc:e0:ca:d5:dd:f0:
         f4:47:59:b6:59:7e:90:62:47:12:64:9d:8c:9d:33:eb:9f:53:
         36:73:7e:03:c3:f1:7a:2b:74:e8:9c:f2:e8:d9:65:09:1f:cc:
         89:d8:72:98:b5:ec:4f:cb:a3:06:b1:e3:b2:07:32:77:71:4e:
         ba:56:ac:3e:88:36:c7:6d:4d:a7:7b:dc:de:ec:8d:dc:08:4c:
         65:ab:9c:3a:0a:e9:8e:9e:a7:ee:32:27:8c:3f:92:27:cd:d1:
         dc:ff:5a:d0:91:5f:31:4e:e3:bd:ca:8b:cf:c3:a5:eb:66:ef:
         33:23:d4:a8:13:b3:dc:5e:6a:3d:9b:e1:69:99:a6:95:59:b8:
         a1:9b:f4:c8:e3:ee:01:7b:f6:f7:fb:c3:86:89:8f:94:d6:5e:
         90:31:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:14 2025 by rpki-client