Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/323030313a313266303a3a2f33322d3536203d3e2031393136.roa
File:                     323030313a313266303a3a2f33322d3536203d3e2031393136.roa (raw, json)
Hash identifier:          MxTZJ5eC0pffQ1a9V9t8O+ZT3KRQLXpAwKqYxP9qsmM=
Subject key identifier:   01:92:EA:18:79:D3:35:6E:8E:AD:0D:6C:68:FC:81:67:8B:DF:2B:4E
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       07988BB1C8FFE52E372A0B75C4F3FDF890412167
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/323030313a313266303a3a2f33322d3536203d3e2031393136.roa
Signing time:             Thu 07 Aug 2025 12:24:28 +0000
ROA not before:           Thu 07 Aug 2025 12:19:28 +0000
ROA not after:            Thu 06 Aug 2026 12:24:28 +0000
asID:                     1916
IP address blocks:        2001:12f0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:98:8b:b1:c8:ff:e5:2e:37:2a:0b:75:c4:f3:fd:f8:90:41:21:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug  7 12:19:28 2025 GMT
            Not After : Aug  6 12:24:28 2026 GMT
        Subject: CN=0192EA1879D3356E8EAD0D6C68FC81678BDF2B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:42:a4:fb:54:a3:39:80:30:df:fd:12:9f:
                    1d:da:c7:b4:ba:8a:a2:1b:00:76:9a:0f:78:27:7e:
                    a3:75:f9:1e:9c:05:0e:0a:e3:c6:39:71:40:f6:49:
                    98:40:4c:d1:ac:28:66:20:a6:31:af:35:10:7e:51:
                    c7:8e:79:88:82:83:35:f7:c4:1e:10:59:33:66:dc:
                    93:40:6c:f4:75:1f:7a:77:0c:3a:8d:a3:de:07:7e:
                    3f:f2:16:d0:ab:2c:76:66:c2:4a:f8:83:bf:06:e8:
                    10:95:c3:87:2b:78:90:37:b6:f9:09:32:77:de:a0:
                    30:37:53:02:34:57:0c:d1:89:0e:78:c3:5e:21:2b:
                    5e:b9:d4:34:2d:cb:57:e6:2c:86:60:6a:b2:54:78:
                    cb:ea:d6:b3:04:3c:e3:9d:fe:65:72:5b:58:e8:e8:
                    88:98:16:b9:a6:af:48:8d:8a:df:f1:4e:da:43:b2:
                    8c:ef:dc:d2:d6:f7:9c:62:98:ca:8f:3c:81:13:1a:
                    d7:2a:fc:fc:84:7d:dc:41:c3:c9:54:16:76:6e:ba:
                    80:05:67:78:44:26:af:ae:94:f0:15:0e:97:cd:90:
                    97:8e:46:6d:15:89:50:aa:ae:34:a6:fa:e5:51:11:
                    dc:71:33:25:3f:24:50:4c:e3:87:0e:d8:e6:3c:21:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:EA:18:79:D3:35:6E:8E:AD:0D:6C:68:FC:81:67:8B:DF:2B:4E
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/323030313a313266303a3a2f33322d3536203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:7b:02:22:79:a9:b7:8f:17:4d:8e:47:22:a6:65:c4:cd:
         c0:e3:60:40:80:5b:12:fb:7f:f4:a6:c8:0d:78:61:8b:d6:42:
         90:9e:bb:e7:0d:1a:3f:eb:80:15:d2:c0:79:51:3b:e1:5d:43:
         07:ae:03:65:dd:0e:be:88:24:2a:0d:5f:01:18:e8:81:d6:04:
         d8:bc:f0:b3:5a:a4:a9:a7:67:94:71:ae:f2:53:8a:73:a1:1d:
         15:db:67:08:3a:6f:52:38:b8:a1:85:b9:1e:5d:0c:bf:ec:aa:
         79:43:b1:03:45:73:c5:82:66:67:f6:37:6e:94:4a:ea:9e:0b:
         dc:6e:4a:a5:6e:0b:7e:70:0c:fe:ba:8f:a7:7a:6d:4c:8a:69:
         68:8b:67:69:80:94:1b:8f:39:21:43:a8:37:77:1d:59:f1:d2:
         24:d2:2d:fc:69:29:6a:6a:4c:10:45:57:2d:02:a5:79:ff:07:
         20:df:6b:0f:a8:40:49:d6:d0:b4:1f:4b:77:11:08:b7:64:2e:
         e7:24:cf:a3:b9:22:32:fb:4e:63:fe:75:a4:bc:6d:22:0a:40:
         4f:07:51:cd:1b:52:6f:b7:fc:3b:b0:37:a3:eb:6d:3e:1b:f9:
         3e:c0:47:06:ba:2c:81:55:7f:15:34:ae:6c:7a:63:b2:aa:4c:
         68:10:cf:23
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUB5iLscj/5S43Kgt1xPP9+JBBIWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTA4MDcxMjE5MjhaFw0yNjA4MDYxMjI0MjhaMDMxMTAvBgNV
BAMTKDAxOTJFQTE4NzlEMzM1NkU4RUFEMEQ2QzY4RkM4MTY3OEJERjJCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NEKk+1SjOYAw3/0Snx3ax7S6
iqIbAHaaD3gnfqN1+R6cBQ4K48Y5cUD2SZhATNGsKGYgpjGvNRB+UceOeYiCgzX3
xB4QWTNm3JNAbPR1H3p3DDqNo94Hfj/yFtCrLHZmwkr4g78G6BCVw4creJA3tvkJ
MnfeoDA3UwI0VwzRiQ54w14hK1651DQty1fmLIZgarJUeMvq1rMEPOOd/mVyW1jo
6IiYFrmmr0iNit/xTtpDsozv3NLW95ximMqPPIETGtcq/PyEfdxBw8lUFnZuuoAF
Z3hEJq+ulPAVDpfNkJeORm0ViVCqrjSm+uVREdxxMyU/JFBM44cO2OY8Ic+VAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUAZLqGHnTNW6OrQ1saPyBZ4vfK04wHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMzEzYTMxMzI2NjMwM2EzYTJmMzMzMjJkMzUzNjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAgARLwMA0GCSqGSIb3DQEBCwUAA4IBAQAWjXsCInmpt48X
TY5HIqZlxM3A42BAgFsS+3/0psgNeGGL1kKQnrvnDRo/64AV0sB5UTvhXUMHrgNl
3Q6+iCQqDV8BGOiB1gTYvPCzWqSpp2eUca7yU4pzoR0V22cIOm9SOLihhbkeXQy/
7Kp5Q7EDRXPFgmZn9jdulErqngvcbkqlbgt+cAz+uo+nem1Mimloi2dpgJQbjzkh
Q6g3dx1Z8dIk0i38aSlqakwQRVctAqV5/wcg32sPqEBJ1tC0H0t3EQi3ZC7nJM+j
uSIy+05j/nWkvG0iCkBPB1HNG1Jvt/w7sDej620+G/k+wEcGuiyBVX8VNK5semOy
qkxoEM8j
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:48:21 2025 by rpki-client