Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233392e3132382e302f31382d3237203d3e2031393136.roa
File:                     3230302e3233392e3132382e302f31382d3237203d3e2031393136.roa (raw, json)
Hash identifier:          sX0EE4/as9uMOCSB7kZe7xvh6NWjtPAORsDFMfif2vc=
Subject key identifier:   E8:02:53:E3:BE:E3:29:51:61:B2:62:83:68:51:A8:11:CA:3A:D3:6E
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       7BF166FD448F61280C2EEFAA071821598EC78B18
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233392e3132382e302f31382d3237203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:26 +0000
ROA not before:           Thu 07 Aug 2025 12:19:26 +0000
ROA not after:            Thu 06 Aug 2026 12:24:26 +0000
asID:                     1916
IP address blocks:        200.239.128.0/18 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f1:66:fd:44:8f:61:28:0c:2e:ef:aa:07:18:21:59:8e:c7:8b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:26 2025 GMT
            Not After : Aug  6 12:24:26 2026 GMT
        Subject: CN=E80253E3BEE3295161B262836851A811CA3AD36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:af:ca:22:fa:c3:46:be:4b:c0:98:45:2c:
                    f0:23:f9:5b:df:10:09:0c:16:74:d8:57:6c:f8:c0:
                    c1:ca:80:ef:6e:f0:e3:0a:c4:c3:25:a8:8c:44:64:
                    8f:2d:92:76:97:8b:3f:aa:62:fd:6a:6c:5c:53:ab:
                    09:04:9f:8e:a4:13:90:1d:9b:a6:c7:c7:c3:7c:03:
                    f9:87:cc:07:29:60:40:ce:7e:f7:0e:ea:49:3a:63:
                    8e:b4:fb:7a:64:f0:a5:a7:b2:ab:be:39:97:c6:6a:
                    53:8d:40:48:08:10:fe:7c:dc:a8:ee:93:7f:44:2d:
                    35:fb:83:6a:3d:d9:d6:73:c4:c8:f2:f6:a2:97:4e:
                    4e:09:a9:a4:f9:bb:d4:c3:39:2c:66:b2:c2:73:c8:
                    69:cc:d6:d5:84:6a:7e:7f:44:f0:59:18:b7:6c:b1:
                    54:f3:de:f8:c5:7a:3a:39:04:a9:68:f5:5e:60:ce:
                    8c:aa:9c:ca:ad:89:b0:f1:84:9a:9a:79:af:5f:c1:
                    bf:59:1f:65:d8:29:d8:73:78:36:4c:31:e7:91:35:
                    00:0c:7a:6d:a2:53:ff:cd:f7:22:9a:e5:b3:9d:ae:
                    f0:6e:cd:5a:c0:08:ac:83:c8:ec:58:05:e1:bc:25:
                    4a:94:74:8c:bd:cf:07:09:83:13:81:66:dd:c0:2a:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:02:53:E3:BE:E3:29:51:61:B2:62:83:68:51:A8:11:CA:3A:D3:6E
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233392e3132382e302f31382d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:ec:5b:d4:ff:48:a0:f7:d1:ec:2a:5f:57:e8:9e:e0:ff:bf:
         10:20:29:44:57:be:98:1b:9f:c0:23:c1:d9:60:34:b0:85:62:
         72:76:8b:86:93:51:73:bc:00:40:a9:2f:ca:82:08:04:d2:e4:
         a7:83:85:19:00:ea:c2:e4:dc:fb:c7:71:e0:61:5f:11:a6:9c:
         c1:38:47:26:3e:67:c0:89:3b:7b:40:58:f0:a2:76:45:61:10:
         eb:d1:10:f7:81:47:9a:5e:87:8f:33:08:3c:c5:cf:c8:e6:44:
         ea:33:47:d9:dc:0f:25:80:72:56:e5:d6:e7:92:3f:8f:4a:5c:
         ea:fd:6d:6e:4d:db:30:b0:c1:08:e8:36:7b:9d:fa:7a:36:ac:
         81:5c:50:a4:d3:c7:50:eb:1a:29:cb:a5:4e:f5:f6:d9:db:eb:
         d3:02:25:cd:7d:f2:0b:85:60:08:ee:05:f9:90:63:34:4a:ba:
         cd:11:b0:df:0c:bf:2c:5b:bf:2d:a9:36:27:d3:01:bd:2f:f8:
         70:ac:e6:50:ef:a3:52:6b:4a:ab:2d:48:36:1a:e2:bd:b6:72:
         0f:d1:23:74:06:10:b1:0d:cc:88:30:80:46:b8:70:77:4e:50:
         51:bf:40:88:5f:73:78:1c:c2:f0:e9:b3:84:31:48:f7:f4:cf:
         12:f7:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:16 2025 by rpki-client