Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3237203d3e2031393136.roa
File:                     3230302e31372e3131322e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          GKa3eJJj9asFQbReWKkVXB3rA8OmY0Y38XC4Al6VJrw=
Subject key identifier:   57:E8:44:30:AF:76:8F:D3:E0:BE:63:98:07:A0:5D:69:D3:62:C4:EA
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       21485952CC83332A5A16620D5CFCC507578EC3CE
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:27 +0000
ROA not before:           Thu 07 Aug 2025 12:19:27 +0000
ROA not after:            Thu 06 Aug 2026 12:24:27 +0000
asID:                     1916
IP address blocks:        200.17.112.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:59:52:cc:83:33:2a:5a:16:62:0d:5c:fc:c5:07:57:8e:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:27 2025 GMT
            Not After : Aug  6 12:24:27 2026 GMT
        Subject: CN=57E84430AF768FD3E0BE639807A05D69D362C4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:66:eb:c1:e9:aa:68:39:c3:7c:4f:f8:61:
                    46:59:76:8c:fb:89:7d:44:7f:81:64:cd:50:53:ef:
                    c4:a3:a2:49:99:85:1e:f6:09:1a:59:46:f6:02:77:
                    2e:3f:94:9f:15:6e:9b:3b:6a:66:ed:77:af:34:16:
                    1d:b7:16:e2:1d:09:54:5d:9c:1b:57:71:8b:03:98:
                    42:4d:be:47:e8:04:59:c0:e9:35:4a:81:d7:40:f4:
                    91:1d:51:af:a5:33:db:62:5f:9a:86:10:f1:ba:13:
                    7b:08:a7:c4:ad:3d:23:2d:49:70:ac:5e:c3:28:b3:
                    73:ad:5d:26:7d:26:01:1b:e1:df:c8:32:54:6f:23:
                    6a:36:c3:aa:b1:2c:6a:db:a8:55:56:00:e9:a8:de:
                    15:c0:32:2a:5a:04:c2:ac:b1:33:d6:67:55:6b:e6:
                    38:a8:86:50:fd:30:53:c3:77:3c:7e:55:13:b8:06:
                    0a:07:6e:45:ec:04:61:e6:bd:1e:0f:47:74:e7:b5:
                    e9:a3:cf:f0:b7:d5:7e:f6:d3:9e:84:9a:3c:a2:13:
                    64:40:e5:b6:a8:ba:ac:7f:38:de:e8:55:de:79:76:
                    39:72:61:7d:58:80:4f:b7:dc:5c:69:a6:85:91:8c:
                    a9:a8:c3:c8:5b:fb:ea:ca:5c:9c:5d:01:3d:ad:5c:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:44:30:AF:76:8F:D3:E0:BE:63:98:07:A0:5D:69:D3:62:C4:EA
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3131322e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:a7:ad:37:a6:62:8e:bf:3f:87:b0:d3:1d:b8:72:5e:5f:
         e6:8c:ef:45:23:29:ef:b2:7d:55:0c:98:7c:02:23:d1:d4:7f:
         c0:11:c4:00:a0:37:ba:56:cf:f7:29:6f:ef:4a:26:b4:6e:dd:
         da:d6:7f:b6:59:4e:dd:a6:76:ef:df:8c:5d:ac:df:f5:ce:7f:
         bc:2e:d1:53:43:66:0f:2e:dd:ab:34:0c:70:69:a4:e9:fe:ba:
         39:ad:fd:3d:6c:6a:25:de:ce:5e:39:d7:52:7f:0b:94:d9:4b:
         bd:97:af:11:cc:c0:ef:72:6e:02:2d:95:b6:91:b3:e9:7d:f5:
         c3:9e:71:c7:84:38:b3:4b:ee:36:20:4f:56:22:8d:ac:f3:4a:
         b9:b6:14:a3:2f:a3:71:5b:26:77:bd:b5:3f:33:bc:a1:46:ad:
         98:2c:de:6e:ac:59:14:9c:5b:3c:27:83:82:cf:ce:5f:7c:57:
         e8:a8:ed:70:02:c1:69:b7:0b:27:96:e0:70:14:20:9d:a6:92:
         8a:ac:b9:a7:af:31:48:86:ab:b2:77:ce:bf:f7:4d:c2:32:7b:
         f8:0a:e7:6d:0a:ad:36:66:47:cb:41:f4:e2:d4:15:f5:02:ad:
         8a:8a:f8:bb:05:66:bd:ff:f1:49:34:fe:59:fa:ed:91:c8:84:
         57:1e:48:e1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIUhZUsyDMypaFmINXPzFB1eOw84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTA4MDcxMjE5MjdaFw0yNjA4MDYxMjI0MjdaMDMxMTAvBgNV
BAMTKDU3RTg0NDMwQUY3NjhGRDNFMEJFNjM5ODA3QTA1RDY5RDM2MkM0RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCWbrwemqaDnDfE/4YUZZdoz7
iX1Ef4FkzVBT78SjokmZhR72CRpZRvYCdy4/lJ8Vbps7ambtd680Fh23FuIdCVRd
nBtXcYsDmEJNvkfoBFnA6TVKgddA9JEdUa+lM9tiX5qGEPG6E3sIp8StPSMtSXCs
XsMos3OtXSZ9JgEb4d/IMlRvI2o2w6qxLGrbqFVWAOmo3hXAMipaBMKssTPWZ1Vr
5jiohlD9MFPDdzx+VRO4BgoHbkXsBGHmvR4PR3Tntemjz/C31X72056EmjyiE2RA
5baouqx/ON7oVd55djlyYX1YgE+33FxppoWRjKmow8hb++rKXJxdAT2tXFhbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUV+hEMK92j9PgvmOYB6BdadNixOowHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTM3MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM3MjAzZDNlMjAzMTM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMgRcDANBgkqhkiG9w0BAQsFAAOCAQEAwLynrTemYo6/
P4ew0x24cl5f5ozvRSMp77J9VQyYfAIj0dR/wBHEAKA3ulbP9ylv70omtG7d2tZ/
tllO3aZ279+MXazf9c5/vC7RU0NmDy7dqzQMcGmk6f66Oa39PWxqJd7OXjnXUn8L
lNlLvZevEczA73JuAi2VtpGz6X31w55xx4Q4s0vuNiBPViKNrPNKubYUoy+jcVsm
d721PzO8oUatmCzebqxZFJxbPCeDgs/OX3xX6KjtcALBabcLJ5bgcBQgnaaSiqy5
p68xSIarsnfOv/dNwjJ7+ArnbQqtNmZHy0H04tQV9QKtior4uwVmvf/xSTT+Wfrt
kciEVx5I4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:02 2025 by rpki-client