Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133392e302e302f31382d3237203d3e2031393136.roa
File:                     3230302e3133392e302e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          3Su6ihzeEGzSEoXxkVLIcPM0iyW1DwQ0ew7MosbaO7w=
Subject key identifier:   0A:6D:9D:2B:19:6F:C0:C3:E3:37:BB:B8:CE:46:6E:C5:FE:EF:C8:58
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       66CB0232E214C00090B23BACBA7958A74B0164E0
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133392e302e302f31382d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:26 +0000
ROA not before:           Thu 07 Aug 2025 12:19:26 +0000
ROA not after:            Thu 06 Aug 2026 12:24:26 +0000
asID:                     1916
IP address blocks:        200.139.0.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cb:02:32:e2:14:c0:00:90:b2:3b:ac:ba:79:58:a7:4b:01:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:26 2025 GMT
            Not After : Aug  6 12:24:26 2026 GMT
        Subject: CN=0A6D9D2B196FC0C3E337BBB8CE466EC5FEEFC858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:e4:d7:03:26:7a:fe:e9:62:a6:11:7e:c5:
                    32:7d:b4:fa:03:44:32:97:94:52:f3:a8:8a:6a:9f:
                    3e:b2:e0:df:43:53:63:de:41:9e:92:60:09:a4:91:
                    5d:27:00:b9:e1:33:0a:18:1b:4e:39:46:c2:5a:27:
                    7e:ea:59:3b:00:2c:0e:d0:2c:2f:79:bf:e0:bc:9a:
                    48:1e:aa:ce:bd:2f:3b:47:2d:68:8e:88:8c:04:fb:
                    d6:fe:93:02:c2:80:64:7f:b8:a5:b7:48:25:ac:2b:
                    aa:6e:fa:c4:3d:46:86:90:9e:dc:d8:2d:08:6c:93:
                    cd:ef:bd:07:5b:63:f2:be:a0:bb:b5:04:1f:63:7b:
                    21:66:d9:a1:c1:13:97:f0:56:1c:c7:b1:aa:22:1c:
                    32:84:26:c0:83:ab:6e:70:a7:83:61:2b:6e:97:f2:
                    86:8c:42:f5:1f:89:6e:bd:a1:93:c9:d1:ef:74:68:
                    e1:5f:08:08:5c:95:ab:63:be:8f:68:22:60:11:53:
                    72:ea:62:9f:b7:f5:39:5c:96:fc:c3:fd:a2:8f:0f:
                    9c:f5:08:8d:f6:14:19:55:07:1d:2b:5b:b3:76:78:
                    4f:f7:44:48:7b:ea:c3:e1:e4:c1:8f:14:f7:34:8b:
                    e8:17:52:6c:46:e1:fb:3b:64:61:51:9f:03:6c:38:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:9D:2B:19:6F:C0:C3:E3:37:BB:B8:CE:46:6E:C5:FE:EF:C8:58
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133392e302e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:4c:2e:68:ba:bd:1f:96:94:2e:8e:d4:36:02:24:6f:e0:
         e7:9d:5b:15:91:85:c3:d6:d7:39:57:b7:63:6b:3d:c5:89:93:
         9e:90:11:4f:15:88:af:a5:f2:4b:86:39:03:e8:06:27:a1:d9:
         49:32:17:39:b1:e3:fe:17:17:fd:e5:93:d5:b6:f9:d6:b1:19:
         7e:50:e9:dc:95:56:11:30:71:40:99:b9:26:8d:aa:a0:bd:04:
         9a:d1:f0:d9:5f:07:d9:d3:3b:d9:1b:46:d0:07:53:3b:7f:2c:
         2d:62:48:16:e3:0b:d0:6f:16:9a:da:f8:0a:11:f8:38:9b:6d:
         d4:c2:df:c3:88:fa:fb:ba:0b:d4:76:76:1e:d3:6b:a3:4a:48:
         68:aa:5e:86:63:21:8f:78:76:42:58:53:a1:f5:e8:71:6d:86:
         a0:bd:d7:e3:97:96:04:4f:1e:a9:b2:04:09:7b:46:07:15:0d:
         ae:e1:f3:64:1a:3d:6d:de:43:fa:c2:ec:8c:b2:dc:09:92:52:
         1e:85:cc:66:4a:5b:14:91:ac:98:4f:93:01:ad:70:dc:8c:37:
         77:91:5a:0a:5d:37:eb:c4:de:72:04:c2:9b:53:6d:b9:64:cd:
         f2:fd:ae:6c:bd:89:8f:7d:66:7c:ba:76:b9:88:71:09:1d:e1:
         4e:3d:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:21 2025 by rpki-client