Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3137362e302f32302d3237203d3e2031393136.roa
File:                     3230302e31372e3137362e302f32302d3237203d3e2031393136.roa (raw, json)
Hash identifier:          145g7MIwTxmsPNwTa7agRaaPt51tpxFQoQZGCme6MWU=
Subject key identifier:   F0:AE:12:A2:3D:A6:F9:32:2E:41:CF:D3:0B:B3:DA:07:19:F3:A4:ED
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       5B4E21B15072F45061D3F1D1AE45C61AFD1BBD36
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3137362e302f32302d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:26 +0000
ROA not before:           Thu 07 Aug 2025 12:19:26 +0000
ROA not after:            Thu 06 Aug 2026 12:24:26 +0000
asID:                     1916
IP address blocks:        200.17.176.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4e:21:b1:50:72:f4:50:61:d3:f1:d1:ae:45:c6:1a:fd:1b:bd:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:26 2025 GMT
            Not After : Aug  6 12:24:26 2026 GMT
        Subject: CN=F0AE12A23DA6F9322E41CFD30BB3DA0719F3A4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:c4:4e:29:c8:4d:42:0b:61:44:6b:d5:57:
                    ff:c8:20:6d:61:68:bd:6d:0a:42:8e:78:c9:e7:29:
                    da:14:fe:48:32:9a:0e:9d:1a:3b:d2:2c:2c:92:a8:
                    45:24:c6:bc:91:3e:6d:fc:ea:07:82:39:4e:91:23:
                    f7:a1:76:b1:c9:ea:c5:02:d7:47:f4:d9:20:41:c5:
                    9e:20:33:55:2a:34:fa:74:50:dd:a0:65:61:91:77:
                    0c:90:44:cc:0d:18:02:d9:9e:e3:ea:54:79:d6:aa:
                    d7:fc:93:c7:08:b7:31:c0:c1:57:87:06:a6:3f:a6:
                    14:de:9d:ae:c8:cd:53:1f:0f:72:20:07:60:a3:f3:
                    cb:fa:48:c3:e5:ca:c2:8e:cf:80:d6:04:d9:6c:67:
                    ca:4c:bc:c8:ef:b4:46:53:15:68:53:4b:d8:1a:1e:
                    b1:58:56:cf:17:c5:33:5e:2f:64:ab:c1:8e:3e:a5:
                    67:fa:76:af:40:ec:98:1a:99:78:aa:35:43:1b:04:
                    d6:1c:4e:2c:ad:6e:f3:a0:30:68:60:38:c9:8e:1b:
                    de:67:d8:bb:55:38:b5:4d:ad:10:15:43:b0:34:75:
                    91:16:b1:73:09:0c:be:2c:32:af:5d:42:4f:d4:e6:
                    87:24:88:d5:20:8e:7d:fe:41:7e:d2:de:0a:89:64:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:12:A2:3D:A6:F9:32:2E:41:CF:D3:0B:B3:DA:07:19:F3:A4:ED
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3137362e302f32302d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:56:26:aa:d6:23:95:40:5f:3c:79:bc:0d:ed:73:c4:0a:
         a6:85:7e:af:b9:d1:fd:1e:ac:76:d3:6d:bd:a0:eb:ad:d5:9f:
         5a:cf:4b:0d:92:46:03:e7:58:ad:d0:49:5c:f1:dc:d7:e0:9d:
         d7:7f:82:d3:f8:3f:24:c7:01:7d:ae:7f:bc:e3:83:4f:4f:b5:
         0a:d9:b4:9c:a1:85:83:6c:e6:a4:93:9f:0b:29:bc:bb:f8:6a:
         e7:d6:29:3f:3d:88:c1:ed:7e:b9:ad:02:7f:9c:f5:3b:b2:01:
         12:9f:f2:5a:e8:b0:05:a4:9f:90:38:84:7a:3d:1d:99:26:2e:
         1a:71:33:6a:95:ae:d2:6e:5f:98:fb:c2:71:79:ef:a4:94:22:
         e1:94:82:cd:ae:32:dd:18:73:47:c0:89:88:6b:39:90:15:fc:
         d3:12:7b:a6:7d:d3:c5:4e:a0:20:6e:4c:7c:5e:4d:23:84:2d:
         8f:be:8b:71:09:37:6f:f0:9d:81:01:cc:f2:be:93:b8:2e:ad:
         c2:07:2a:bf:db:7d:7d:ec:7d:99:8e:cd:72:20:e8:4e:9f:53:
         f0:67:50:f2:98:3f:db:16:d3:07:d8:d6:c4:cf:19:5a:d5:2f:
         55:ab:73:8a:76:04:38:0c:9a:8d:40:3e:de:7c:c3:57:a4:f1:
         29:52:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:53 2025 by rpki-client