Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e33322e302f31392d3237203d3e2031393136.roa
File:                     3230302e31372e33322e302f31392d3237203d3e2031393136.roa (raw, json)
Hash identifier:          efXuamuDAKLvTkh8EJhZssnQLVsKow/SQjeOP9hsxT4=
Subject key identifier:   7E:99:FF:5D:A2:31:C2:3E:9B:20:53:E8:FF:FD:71:B5:48:07:F8:E2
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       63EC61675A7FAD77082673F1C19B95F9FCAD85C3
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e33322e302f31392d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:26 +0000
ROA not before:           Thu 07 Aug 2025 12:19:26 +0000
ROA not after:            Thu 06 Aug 2026 12:24:26 +0000
asID:                     1916
IP address blocks:        200.17.32.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ec:61:67:5a:7f:ad:77:08:26:73:f1:c1:9b:95:f9:fc:ad:85:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:26 2025 GMT
            Not After : Aug  6 12:24:26 2026 GMT
        Subject: CN=7E99FF5DA231C23E9B2053E8FFFD71B54807F8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:5d:fd:e4:a3:41:92:6f:4f:23:c5:1b:9e:
                    5a:85:94:cc:b7:64:bd:71:81:a9:6e:5a:04:1c:88:
                    06:d3:18:ec:ae:02:bc:e2:e2:4e:e9:99:ad:b1:eb:
                    a0:a3:13:48:cb:64:26:c9:8f:da:81:8d:ab:b8:0f:
                    8a:72:9f:d6:c6:5c:f2:f5:37:e3:dc:f9:f4:5d:5c:
                    ee:fa:f6:ba:2a:97:92:51:29:80:df:00:62:bb:f8:
                    b0:09:e7:35:3a:fc:cc:27:2e:b8:fa:ad:b8:9d:01:
                    ee:18:01:85:e9:5d:ed:8c:86:c2:bb:18:c4:03:ae:
                    cb:66:8f:5c:76:26:dd:ba:c1:62:e6:f8:0a:3d:a4:
                    25:a7:05:6b:97:60:10:8a:20:bc:d4:bd:7c:d2:0a:
                    b6:8f:ff:87:9c:da:bf:a2:8f:d8:83:23:fe:05:47:
                    dd:08:80:20:3a:fd:61:21:33:46:f3:15:5b:8f:8b:
                    81:a8:e7:79:05:f5:7f:8f:10:e9:ee:ad:e9:c6:3d:
                    2b:ca:9c:22:b9:b7:20:e3:68:e3:56:fa:d5:d8:48:
                    87:b2:fc:e5:d7:9d:19:9d:36:b4:35:21:5f:5a:e5:
                    69:17:ae:08:9b:71:da:37:9e:c9:d7:96:72:66:3a:
                    fd:8a:21:af:ac:24:fe:d5:9e:6f:df:74:8e:96:1a:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:FF:5D:A2:31:C2:3E:9B:20:53:E8:FF:FD:71:B5:48:07:F8:E2
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e33322e302f31392d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:f4:7b:16:db:22:5a:52:03:5b:d8:01:22:1c:05:b1:37:
         86:47:08:66:39:1c:97:c9:ed:7f:5d:f9:69:f9:c3:7d:f4:c0:
         42:16:df:33:c8:31:f0:dc:e3:77:d9:56:be:7e:57:bb:02:43:
         15:cd:f5:a7:8f:b1:86:f2:d3:b0:51:ae:0e:5d:12:0c:63:6a:
         12:71:b5:eb:65:9c:52:f6:93:28:4b:a8:ca:2c:2c:13:6e:3b:
         95:e9:4e:6b:89:c6:5d:64:a8:86:15:46:98:03:a2:b6:44:03:
         ef:1c:f1:eb:69:48:c0:7a:8f:00:1a:12:9c:1c:77:58:5c:bf:
         c1:5f:e0:7c:78:c4:66:71:36:35:02:3e:2f:b6:ee:73:d4:1e:
         47:26:bd:38:5c:40:b3:ae:3f:1a:3d:28:14:3d:9a:67:f2:50:
         37:55:43:ed:dc:e2:61:64:25:0b:69:a6:a6:4a:d7:8e:ab:21:
         fd:cb:be:ea:fa:91:18:40:13:77:4c:29:43:ea:ae:05:6b:49:
         43:dc:db:9c:a8:3d:f7:33:91:8e:b9:b0:e8:6b:77:e3:a1:92:
         0c:00:fc:14:39:f2:67:11:94:48:d0:f0:a9:75:dc:5d:82:ed:
         49:75:a1:b1:12:aa:af:ec:ce:e6:f3:e1:b2:a6:ba:8d:96:86:
         59:c6:4e:8b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUY+xhZ1p/rXcIJnPxwZuV+fythcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTA4MDcxMjE5MjZaFw0yNjA4MDYxMjI0MjZaMDMxMTAvBgNV
BAMTKDdFOTlGRjVEQTIzMUMyM0U5QjIwNTNFOEZGRkQ3MUI1NDgwN0Y4RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4l395KNBkm9PI8UbnlqFlMy3
ZL1xgaluWgQciAbTGOyuArzi4k7pma2x66CjE0jLZCbJj9qBjau4D4pyn9bGXPL1
N+Pc+fRdXO769roql5JRKYDfAGK7+LAJ5zU6/MwnLrj6rbidAe4YAYXpXe2MhsK7
GMQDrstmj1x2Jt26wWLm+Ao9pCWnBWuXYBCKILzUvXzSCraP/4ec2r+ij9iDI/4F
R90IgCA6/WEhM0bzFVuPi4Go53kF9X+PEOnurenGPSvKnCK5tyDjaONW+tXYSIey
/OXXnRmdNrQ1IV9a5WkXrgibcdo3nsnXlnJmOv2KIa+sJP7Vnm/fdI6WGjyjAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUfpn/XaIxwj6bIFPo//1xtUgH+OIwHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTM3MmUzMzMyMmUzMDJmMzEzOTJkMzIzNzIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAXIESAwDQYJKoZIhvcNAQELBQADggEBAFk89HsW2yJaUgNb
2AEiHAWxN4ZHCGY5HJfJ7X9d+Wn5w330wEIW3zPIMfDc43fZVr5+V7sCQxXN9aeP
sYby07BRrg5dEgxjahJxtetlnFL2kyhLqMosLBNuO5XpTmuJxl1kqIYVRpgDorZE
A+8c8etpSMB6jwAaEpwcd1hcv8Ff4Hx4xGZxNjUCPi+27nPUHkcmvThcQLOuPxo9
KBQ9mmfyUDdVQ+3c4mFkJQtppqZK146rIf3Lvur6kRhAE3dMKUPqrgVrSUPc25yo
PfczkY65sOhrd+OhkgwA/BQ58mcRlEjQ8Kl13F2C7Ul1obESqq/szubz4bKmuo2W
hlnGTos=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:23 2025 by rpki-client