Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa
File:                     3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          eKx0uGC1c2DYXhzEiuU9uqMGQWjiV0iPn5q/RzI5rO0=
Subject key identifier:   3D:E4:08:AD:0B:A6:0A:76:04:3E:75:9F:80:B5:56:2C:B8:DB:41:15
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       33515A4680091B912F13D8F63B48698428B028A2
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:27 +0000
ROA not before:           Thu 07 Aug 2025 12:19:27 +0000
ROA not after:            Thu 06 Aug 2026 12:24:27 +0000
asID:                     1916
IP address blocks:        200.143.192.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:51:5a:46:80:09:1b:91:2f:13:d8:f6:3b:48:69:84:28:b0:28:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:27 2025 GMT
            Not After : Aug  6 12:24:27 2026 GMT
        Subject: CN=3DE408AD0BA60A76043E759F80B5562CB8DB4115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:42:11:5a:bf:35:47:a1:0e:58:03:e5:b2:
                    69:3f:9e:b8:93:02:14:79:8f:90:b7:fe:f2:47:de:
                    8d:de:97:e8:63:50:4a:af:83:e2:78:c7:10:16:9e:
                    a5:09:49:79:1e:59:5b:6c:49:93:23:82:48:ee:81:
                    7a:81:b2:f8:73:0b:ec:c7:68:1b:76:35:72:40:a2:
                    53:c3:e0:02:dd:9d:0d:0f:a7:d8:ee:b4:00:69:8f:
                    8c:c8:9c:0b:8c:f9:7d:6f:82:5d:39:84:c6:e8:f6:
                    3a:1c:aa:17:23:70:3c:d3:8a:07:29:8a:ec:54:fe:
                    fc:72:5a:62:b5:37:6d:f4:4f:b9:cf:4c:48:21:a1:
                    1c:00:ce:05:7a:20:90:00:59:ff:01:d5:38:02:b7:
                    b3:41:24:e2:bc:96:63:bd:90:5d:84:5d:fc:14:92:
                    51:e1:f1:cf:18:97:77:06:ef:e4:21:a6:56:2d:85:
                    9a:21:b3:21:b9:ea:5c:4a:e0:31:a1:39:e2:a6:05:
                    85:82:d9:e7:5e:f6:b5:3c:e5:6f:ae:7b:38:a6:5d:
                    ad:18:20:8a:54:ba:3c:e3:fa:5a:79:f8:d5:42:a9:
                    7d:c9:ae:74:31:8c:06:1f:c6:e6:36:5f:61:cc:4f:
                    5a:cf:6e:fa:55:d8:37:69:c4:9b:69:8a:2e:40:9f:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E4:08:AD:0B:A6:0A:76:04:3E:75:9F:80:B5:56:2C:B8:DB:41:15
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:13:4a:c3:ae:7c:60:04:64:7e:c2:e5:c5:9b:da:84:c0:7a:
         0a:a5:33:2c:b7:ea:a2:fd:7d:43:29:ab:54:cb:f1:af:59:0f:
         5a:dc:5f:09:b6:7b:47:2e:b6:69:21:bd:46:5b:ae:09:be:5b:
         82:d7:c1:84:a0:ac:9d:96:d5:e5:66:94:c1:cc:be:d3:ca:8a:
         e3:0a:2e:5d:b1:28:63:ee:06:da:52:37:7d:90:ac:51:d7:eb:
         3c:e5:10:0e:34:67:73:fd:dc:18:69:99:43:ed:3d:90:a5:ea:
         31:59:8a:ee:4f:a3:0d:95:05:0a:2c:80:b7:d1:4b:0b:07:b6:
         e8:19:37:17:5e:b7:5b:f8:b8:9c:a0:22:f5:36:8f:c1:a9:92:
         49:e4:08:c0:e1:a1:36:2f:59:63:ee:50:fe:33:96:8d:b8:13:
         29:4a:da:de:bd:2b:0a:d2:f8:8f:75:12:fd:ac:a8:01:b8:bf:
         52:ec:54:89:08:84:bb:ff:b7:0e:27:38:79:c6:75:a6:34:09:
         2e:6f:e3:d5:08:02:a1:37:52:40:fa:79:72:67:bc:bb:30:ac:
         31:78:d2:4f:11:6d:f4:a0:53:f4:30:b6:5e:37:4e:58:b2:99:
         8c:e9:56:5b:92:cb:01:a8:b2:b7:d6:62:e7:0a:f2:37:fd:48:
         e2:f9:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:45:26 2025 by rpki-client