Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3134332e3130382e302e302f31362d3234203d3e2031323531.roa
File:                     3134332e3130382e302e302f31362d3234203d3e2031323531.roa (raw, json)
Hash identifier:          6vF0okcobQrClnsXtLkk6bh6FEyLRAVRD3w0r7LuK+E=
Subject key identifier:   2E:C3:FA:4F:11:34:BB:C0:E8:52:4C:92:A6:91:B4:29:79:A1:DF:BB
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       415AEFBAA466E619AAAA22CE80502EE1001FB899
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3134332e3130382e302e302f31362d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:25 +0000
ROA not before:           Mon 13 Oct 2025 13:41:25 +0000
ROA not after:            Mon 12 Oct 2026 13:46:25 +0000
asID:                     1251
IP address blocks:        143.108.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5a:ef:ba:a4:66:e6:19:aa:aa:22:ce:80:50:2e:e1:00:1f:b8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:25 2025 GMT
            Not After : Oct 12 13:46:25 2026 GMT
        Subject: CN=2EC3FA4F1134BBC0E8524C92A691B42979A1DFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:4d:b4:65:6d:cb:e6:5e:43:60:55:79:ea:
                    66:e3:3c:9c:d2:87:37:7a:2e:0f:8e:de:5c:6a:a1:
                    83:46:62:87:59:89:7c:1c:43:72:39:ea:e3:5a:fc:
                    9e:33:17:54:1e:56:bc:d9:a3:83:1b:7f:ff:ab:be:
                    1f:4f:4e:3b:e2:c4:4a:da:48:39:1a:50:89:c2:c3:
                    0b:8b:04:d9:5b:78:9c:57:82:2b:c2:b8:79:92:c6:
                    50:54:3e:e0:42:c5:9f:d5:0e:6d:70:10:f3:14:ca:
                    d7:15:67:fc:19:e5:5c:1c:6a:23:92:10:24:14:24:
                    83:4d:c0:0f:bd:0d:3e:d5:48:76:73:91:8c:c3:ac:
                    8b:f6:95:ce:bf:96:d3:f5:e2:93:ac:18:89:79:3c:
                    99:19:49:76:57:14:8b:5d:d2:65:89:85:a9:24:22:
                    00:ea:89:b1:1f:5c:b5:67:6b:4d:a4:4f:a1:03:dc:
                    39:48:0d:b2:48:09:4d:5e:62:15:2a:17:d6:14:d3:
                    23:65:45:6a:24:3e:c6:c7:45:28:65:c4:96:b8:e2:
                    16:f2:9f:b1:2c:64:62:d0:b5:4b:3d:72:e8:ac:ff:
                    b9:92:38:ee:82:a7:34:8d:60:68:bf:f8:5f:71:fe:
                    f3:5f:ac:92:c9:ba:1b:6f:df:cf:6b:70:bf:54:70:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C3:FA:4F:11:34:BB:C0:E8:52:4C:92:A6:91:B4:29:79:A1:DF:BB
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3134332e3130382e302e302f31362d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:35:c7:f9:a3:a1:d0:1f:57:41:f6:97:fb:93:d2:40:e2:
         d6:60:68:ea:c9:c1:fb:83:ef:fd:ac:39:20:66:2e:ff:24:08:
         7a:22:3f:62:5a:4e:f9:e8:f0:32:f8:24:c7:3f:8a:7b:33:71:
         79:b1:a3:18:bb:33:b9:75:4d:bf:d8:3b:3a:4d:db:80:b0:47:
         de:55:f8:e2:20:98:ef:cf:ec:bf:e1:be:0d:ea:5b:fe:c3:af:
         10:52:09:c1:48:ec:b0:59:da:47:51:7b:17:ce:f7:10:73:c6:
         7e:8d:67:81:87:0b:17:7f:bf:52:7d:62:90:a5:08:fb:d2:56:
         0e:7e:fd:aa:99:30:03:7c:f3:ac:90:33:f3:77:97:fb:48:23:
         ce:c0:a6:5b:a1:be:be:41:d4:d2:fc:01:ae:49:64:1d:3f:be:
         e5:c5:8b:22:32:fa:a9:06:3f:7f:31:5b:f1:df:38:e7:c7:d0:
         00:4a:92:a9:87:1a:f3:71:ba:8b:fd:fd:75:d1:b6:e3:5d:1f:
         6a:fa:76:ce:1a:fb:b6:80:01:84:9e:c8:eb:1d:e1:27:9d:93:
         9d:14:2b:db:27:5d:fd:87:10:b4:46:ea:98:38:6b:d2:d5:8b:
         95:d7:e0:49:67:0b:56:d8:34:20:9b:6f:bb:f5:dc:85:c3:93:
         e0:50:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:04:07 2025 by rpki-client