Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203134363138.roa
File:                     3230302e3133302e35362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          X8PoYlg9Gv2Et4G5joAtxaBlGUK9RJ1HIcbq37gd0Go=
Subject key identifier:   EF:B0:02:97:25:EA:6A:9C:23:A5:40:BC:0D:D7:4E:1B:F9:42:9B:1E
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       04FCDF1C28D277877D32C4E610FA984DCECB87DD
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 07 Oct 2025 14:39:59 +0000
ROA not before:           Tue 07 Oct 2025 14:34:59 +0000
ROA not after:            Tue 06 Oct 2026 14:39:59 +0000
asID:                     14618
IP address blocks:        200.130.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fc:df:1c:28:d2:77:87:7d:32:c4:e6:10:fa:98:4d:ce:cb:87:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Oct  7 14:34:59 2025 GMT
            Not After : Oct  6 14:39:59 2026 GMT
        Subject: CN=EFB0029725EA6A9C23A540BC0DD74E1BF9429B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ee:3d:45:89:39:8a:68:7f:0d:4d:05:37:f4:
                    53:49:59:45:c7:b0:2b:46:28:f3:23:68:b5:ad:6d:
                    02:99:f0:82:58:54:25:5c:61:4c:80:21:a1:00:7f:
                    91:c3:a0:38:9d:46:ad:29:a5:ed:ca:cc:7c:e3:26:
                    16:79:2f:54:ed:e2:b4:56:90:49:d2:01:b1:a8:38:
                    19:4b:73:21:30:74:6e:5c:61:8d:6c:2d:8c:94:ee:
                    92:15:c1:80:0a:bc:40:0b:99:3d:7c:c5:eb:86:30:
                    c5:ca:36:33:72:78:c0:3b:ab:50:4a:30:3f:1b:42:
                    59:f4:4a:eb:46:56:ea:d9:8f:b9:f6:02:aa:fb:2e:
                    2a:00:45:d2:79:c9:9c:3e:4d:9c:7b:0f:22:6d:d3:
                    b3:be:c1:9c:e6:91:bd:2b:7c:1f:ed:fc:11:f0:e6:
                    88:92:20:09:c0:96:01:28:71:0f:7c:7f:90:c6:ce:
                    0d:d7:d2:6e:e6:33:fc:07:5d:2c:e7:fc:a1:d4:e3:
                    fb:98:9d:6a:d6:d4:01:22:8f:56:24:a0:88:00:1c:
                    9d:40:be:8f:87:17:17:04:d5:0d:2c:8a:a9:ad:a7:
                    22:d9:03:bd:72:05:67:50:55:18:51:8b:c4:3a:5a:
                    df:e7:21:b1:34:d4:df:0e:f2:3e:e4:72:c2:c8:9a:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B0:02:97:25:EA:6A:9C:23:A5:40:BC:0D:D7:4E:1B:F9:42:9B:1E
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:6e:75:69:93:23:da:72:01:63:35:d0:ab:4f:65:e9:6c:
         72:06:f8:73:ca:d4:41:1a:a6:b4:a9:f8:d2:c6:6f:98:ac:96:
         fd:b0:3b:d5:da:5b:c6:af:69:8e:fe:24:71:9d:7a:36:9b:5f:
         d7:77:ef:9f:db:c9:84:86:53:c9:d0:3f:60:65:33:50:10:bc:
         77:80:76:44:d5:5c:a7:eb:46:bd:2e:54:76:bb:84:01:f0:84:
         bd:08:1a:be:1f:6d:ae:f8:ff:e0:53:10:e7:c3:70:54:af:94:
         ec:a8:ef:86:71:56:77:aa:78:00:46:f0:6f:6b:c9:34:e2:62:
         93:a5:50:ba:f5:ba:81:ee:f5:25:de:79:5d:8f:06:25:51:40:
         e9:d6:b7:81:d8:de:f7:0e:58:64:ab:ac:37:73:b4:8c:b2:8a:
         ff:d7:18:88:ca:5c:47:80:d6:22:ab:65:d8:97:5b:97:4f:8d:
         8b:4f:a4:70:7b:cb:05:8a:ef:b7:a4:36:8b:b7:39:53:81:16:
         9b:e1:41:6c:11:ef:02:19:61:3c:62:b7:d9:fb:b5:36:f7:f0:
         31:c3:69:48:25:9a:b3:02:4c:09:f8:a7:7e:3e:50:d7:ee:02:
         a9:50:66:d9:24:43:10:ee:9a:77:cd:e5:61:aa:f5:59:66:fe:
         30:af:d8:f1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBPzfHCjSd4d9MsTmEPqYTc7Lh90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFNDZFMzJDQjE0NjI0MTlDQ0NCODlCNUM0OTg0OTVF
OTE5QjVDRjAeFw0yNTEwMDcxNDM0NTlaFw0yNjEwMDYxNDM5NTlaMDMxMTAvBgNV
BAMTKEVGQjAwMjk3MjVFQTZBOUMyM0E1NDBCQzBERDc0RTFCRjk0MjlCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk7j1FiTmKaH8NTQU39FNJWUXH
sCtGKPMjaLWtbQKZ8IJYVCVcYUyAIaEAf5HDoDidRq0ppe3KzHzjJhZ5L1Tt4rRW
kEnSAbGoOBlLcyEwdG5cYY1sLYyU7pIVwYAKvEALmT18xeuGMMXKNjNyeMA7q1BK
MD8bQln0SutGVurZj7n2Aqr7LioARdJ5yZw+TZx7DyJt07O+wZzmkb0rfB/t/BHw
5oiSIAnAlgEocQ98f5DGzg3X0m7mM/wHXSzn/KHU4/uYnWrW1AEij1YkoIgAHJ1A
vo+HFxcE1Q0siqmtpyLZA71yBWdQVRhRi8Q6Wt/nIbE01N8O8j7kcsLImpadAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU77AClyXqapwjpUC8DddOG/lCmx4wHwYDVR0j
BBgwFoAUruRuMssUYkGczLibXEmElekZtc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC9BRUU0NkUzMkNCMTQ2MjQxOUNDQ0I4OUI1QzQ5ODQ5NUU5MTlCNUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTQ2RTMyQ0IxNDYyNDE5
Q0NDQjg5QjVDNDk4NDk1RTkxOUI1Q0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMzMzAyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0
MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyII4MA0GCSqGSIb3DQEBCwUAA4IBAQCSDW51aZMj
2nIBYzXQq09l6WxyBvhzytRBGqa0qfjSxm+YrJb9sDvV2lvGr2mO/iRxnXo2m1/X
d++f28mEhlPJ0D9gZTNQELx3gHZE1Vyn60a9LlR2u4QB8IS9CBq+H22u+P/gUxDn
w3BUr5TsqO+GcVZ3qngARvBva8k04mKTpVC69bqB7vUl3nldjwYlUUDp1reB2N73
Dlhkq6w3c7SMsor/1xiIylxHgNYiq2XYl1uXT42LT6Rwe8sFiu+3pDaLtzlTgRab
4UFsEe8CGWE8YrfZ+7U29/Axw2lIJZqzAkwJ+Kd+PlDX7gKpUGbZJEMQ7pp3zeVh
qvVZZv4wr9jx
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:06 2025 by rpki-client