Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203136353039.roa
File:                     3230302e3133302e35362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          oxAFXzKB1Mz1bxGYzaFnK4hnUyMM0sWD+MHVEP5hpFQ=
Subject key identifier:   77:35:E6:E6:9F:CA:FC:72:BA:06:23:DE:F9:62:02:1C:58:00:CE:BA
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       74B5303EDDACD735FE7FC746C77823F12412B983
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 07 Oct 2025 14:39:59 +0000
ROA not before:           Tue 07 Oct 2025 14:34:59 +0000
ROA not after:            Tue 06 Oct 2026 14:39:59 +0000
asID:                     16509
IP address blocks:        200.130.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b5:30:3e:dd:ac:d7:35:fe:7f:c7:46:c7:78:23:f1:24:12:b9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Oct  7 14:34:59 2025 GMT
            Not After : Oct  6 14:39:59 2026 GMT
        Subject: CN=7735E6E69FCAFC72BA0623DEF962021C5800CEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:b6:99:35:8c:11:2f:f8:c9:5b:d0:a0:ec:
                    b6:26:b6:95:a1:97:cd:9d:b1:47:2d:ce:13:37:b3:
                    dd:66:7c:78:68:55:1f:dc:12:6d:23:a1:bd:0f:98:
                    9d:c6:d1:d7:70:4c:b7:c1:2f:39:d4:b0:8e:15:33:
                    9f:2e:26:61:59:00:91:43:f9:2a:8a:5e:2a:6e:33:
                    c6:49:b8:74:d4:35:62:ac:45:b1:9c:9d:67:4a:ea:
                    88:88:4d:0d:82:22:7c:ee:39:fb:90:20:d4:e0:a6:
                    19:aa:01:f2:3c:74:a5:bc:df:7c:98:50:7c:35:92:
                    38:d0:95:c9:3c:83:a9:dd:f7:bb:51:2b:fd:33:dc:
                    14:da:e0:11:5a:16:6a:6e:fb:70:4f:55:3e:59:27:
                    d6:76:0b:8b:3d:30:3a:e6:73:b6:3f:d7:64:98:28:
                    e8:75:b7:b4:0d:94:d6:92:a5:1e:c5:f5:ac:45:58:
                    2d:cf:06:ac:c9:e1:50:75:84:fa:c5:03:81:06:71:
                    13:61:01:cb:96:2c:59:20:8a:ff:bc:f9:3e:4c:3e:
                    a0:18:da:f2:30:4e:5a:de:e8:70:9e:71:ba:c5:16:
                    6d:06:78:85:4e:0e:7a:e9:b0:6a:13:5a:61:48:03:
                    f3:c1:d5:6d:7f:e7:36:a3:b1:89:d4:53:83:e9:92:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:E6:E6:9F:CA:FC:72:BA:06:23:DE:F9:62:02:1C:58:00:CE:BA
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e35362e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:33:a9:a9:cf:fb:e1:61:ce:af:1b:0a:94:41:74:d2:bf:a7:
         c1:2c:9c:68:c6:ba:10:28:ca:8a:35:74:19:90:8f:83:5c:50:
         37:2a:9a:4e:e5:bd:ab:e7:54:9e:f2:24:05:d2:0d:a4:f3:46:
         8a:e7:29:03:67:df:b9:eb:1e:f4:cc:60:91:f9:85:52:96:99:
         54:a7:f5:97:cf:98:df:c7:73:30:3c:5a:2a:12:79:87:e1:63:
         93:37:d6:65:da:81:6f:d2:b7:4f:72:fa:94:44:10:f2:83:61:
         0b:ea:5c:72:98:17:31:b7:33:36:08:99:b8:7e:ad:b3:c1:b1:
         eb:95:d1:55:c8:ad:29:a5:1d:ca:ea:6e:13:1e:e8:47:c3:bf:
         3a:ab:b3:dd:71:2e:be:df:95:ca:98:96:c5:47:e3:09:a0:05:
         9b:21:6f:98:aa:4d:bf:1c:ac:da:70:03:e0:92:d4:41:23:a1:
         12:38:ae:9b:67:4f:96:3a:b4:bf:a6:b2:28:cd:d3:ba:c8:0c:
         5d:20:41:2b:7e:dd:35:2a:66:f1:dc:44:fb:30:c0:8d:64:45:
         65:10:58:1d:59:17:1a:28:da:c1:73:f5:a0:28:29:dd:e0:1f:
         42:60:93:20:7c:7e:b1:2f:81:83:26:91:d9:fc:a8:38:75:ac:
         f4:e6:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:35:23 2025 by rpki-client