Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35342e302f32342d3234203d3e203136353039.roa
File:                     3230302e3133302e35342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          dxel42i8EiVFb0spnlgFf4XymNfGxkKI4nxDEysFDW8=
Subject key identifier:   98:DD:48:0B:DE:5D:26:93:B6:9A:3A:C0:7C:3E:09:D4:31:9A:1D:2C
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       4E12F093096CB2C06FEB08816DBB1DB3D53668CB
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35342e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 07 Oct 2025 11:39:59 +0000
ROA not before:           Tue 07 Oct 2025 11:34:59 +0000
ROA not after:            Tue 06 Oct 2026 11:39:59 +0000
asID:                     16509
IP address blocks:        200.130.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:12:f0:93:09:6c:b2:c0:6f:eb:08:81:6d:bb:1d:b3:d5:36:68:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Oct  7 11:34:59 2025 GMT
            Not After : Oct  6 11:39:59 2026 GMT
        Subject: CN=98DD480BDE5D2693B69A3AC07C3E09D4319A1D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:15:f8:df:65:b0:cb:a8:4a:ee:d6:12:ea:
                    91:f1:e8:1c:7c:3b:4c:c7:ca:94:0f:23:e5:42:24:
                    fc:e1:de:8a:02:36:f0:ed:31:7a:e6:d1:d7:bb:b4:
                    42:b6:f7:d4:23:21:35:cc:8c:6a:9b:38:4b:3e:79:
                    4f:5a:e8:8f:32:3c:d8:4d:de:af:75:c9:17:59:b2:
                    e2:a2:74:b4:ce:e8:86:a0:90:71:78:bf:fe:68:73:
                    61:65:8f:f9:5c:4e:3c:29:2a:1a:74:21:e1:0f:48:
                    7b:24:84:7e:fd:e0:7d:96:65:0f:5f:e0:f0:1c:2b:
                    d9:38:c6:f6:a7:25:1d:6c:ec:e3:a9:21:ea:cb:31:
                    64:31:fc:d9:21:d0:5a:25:20:00:4a:44:85:e9:8f:
                    6a:f7:2f:87:4f:0c:b6:1b:20:0f:11:78:55:f3:78:
                    b2:9e:1d:ce:4f:71:ec:63:77:2a:f9:19:72:ac:2a:
                    df:08:87:2a:50:d0:36:b9:12:25:fa:e1:ff:9e:70:
                    77:39:4f:43:3d:28:3b:28:ff:81:59:e0:f3:97:95:
                    e7:37:31:af:f0:7c:07:0d:7e:85:87:8f:d3:c6:4e:
                    08:8f:f7:e5:84:12:47:fa:e6:ee:84:78:71:e5:86:
                    b0:6a:c1:e1:21:df:a6:58:99:b7:6e:25:1f:ac:02:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DD:48:0B:DE:5D:26:93:B6:9A:3A:C0:7C:3E:09:D4:31:9A:1D:2C
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:2a:1c:6c:e5:73:0c:fd:1a:72:a5:09:c4:34:95:a0:a7:
         80:28:34:06:62:51:5d:9b:4d:b9:14:b2:ac:16:bb:b6:2a:6c:
         bb:7f:e8:8d:79:5e:30:9b:86:92:1c:46:af:aa:27:b1:b8:ea:
         29:d5:77:36:43:44:2a:ac:bf:e4:5e:55:a7:4a:1e:55:fd:6a:
         c6:16:64:b0:ca:00:75:40:92:d0:9d:91:85:b7:9a:df:d6:d2:
         11:de:b5:21:1a:7a:dd:f1:d4:27:ec:11:58:52:13:f5:9a:fe:
         76:ee:c1:90:e3:e1:5a:aa:ce:58:3a:c1:39:53:cd:8e:9f:28:
         80:8c:d0:06:0c:db:ce:b3:e8:eb:88:ae:92:43:aa:0d:86:cd:
         55:d1:a0:71:c3:db:7f:68:0f:9d:2f:b1:f1:e4:08:ed:c0:1f:
         61:71:31:1b:b3:28:b1:d0:b4:02:0c:44:70:d1:2a:31:ad:8b:
         ea:1d:fa:3f:52:88:9a:78:d5:82:fa:41:dc:fa:f8:bd:a5:44:
         3f:0d:aa:de:e6:b2:82:0d:1b:2d:bb:7b:45:73:d8:c3:f4:6e:
         e3:0b:eb:99:5a:2b:25:c6:81:35:e3:a9:67:1e:bf:07:e6:2f:
         59:99:55:f5:ed:c2:d3:a0:ff:3f:41:27:93:39:26:37:55:b3:
         aa:f7:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:17:35 2025 by rpki-client