Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130342e302f32322d3234203d3e2031323531.roa
File:                     3230302e3133362e3130342e302f32322d3234203d3e2031323531.roa (raw, json)
Hash identifier:          LZ80ViGtF7OrqKz4lBjGBqj7evPngP4i0DFDSt/ldHU=
Subject key identifier:   CD:30:08:BE:2B:85:9B:9D:08:05:D9:67:92:85:BE:88:79:9E:A5:2B
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       10474110F9ADA0E3E84B13797F00D23090EE4748
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130342e302f32322d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:28 +0000
ROA not before:           Mon 13 Oct 2025 13:41:28 +0000
ROA not after:            Mon 12 Oct 2026 13:46:28 +0000
asID:                     1251
IP address blocks:        200.136.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:47:41:10:f9:ad:a0:e3:e8:4b:13:79:7f:00:d2:30:90:ee:47:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:28 2025 GMT
            Not After : Oct 12 13:46:28 2026 GMT
        Subject: CN=CD3008BE2B859B9D0805D9679285BE88799EA52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:83:0e:0e:3c:4d:61:4a:a2:d2:87:81:b6:
                    a5:a0:68:ea:6f:2c:0d:9d:d1:34:6c:36:77:20:3d:
                    13:f1:ac:fb:a3:b5:ad:44:92:2a:f7:62:ae:96:95:
                    4b:70:f3:36:75:9d:02:28:88:dd:13:d9:a5:8f:34:
                    79:d2:b8:ed:cd:fc:db:ca:57:bf:c9:50:28:32:ca:
                    f9:28:1e:07:ea:90:ac:fc:98:52:e0:af:ab:0d:8c:
                    5a:43:f9:2e:7e:cd:86:fa:31:af:6f:ef:30:bf:3e:
                    c4:bc:f1:2d:5d:c9:ae:e9:52:44:ad:48:39:67:ac:
                    b9:24:b9:d0:32:d2:36:46:96:eb:38:fc:06:1e:cb:
                    5a:4a:27:48:20:cc:c9:59:94:33:ee:70:27:a0:27:
                    2d:18:2b:fd:a9:21:7d:08:dc:99:5d:0e:8e:bd:fc:
                    f7:b4:25:c7:20:25:84:b5:fd:d1:78:c7:32:80:86:
                    28:e1:4d:ef:11:f1:02:e2:95:32:61:b0:0d:49:86:
                    b6:ec:85:7d:b1:d4:05:9e:6a:3d:79:08:e9:8d:31:
                    f7:fc:d3:05:6b:19:2b:9a:3d:1b:47:82:c8:be:42:
                    99:c3:80:47:be:1f:3a:9d:ad:9c:e6:23:01:7d:e9:
                    83:f0:bf:ed:d9:fa:fd:f0:01:49:01:28:5c:06:de:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:08:BE:2B:85:9B:9D:08:05:D9:67:92:85:BE:88:79:9E:A5:2B
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130342e302f32322d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:be:25:35:08:33:7f:2f:f5:a7:77:d3:d0:76:e2:2c:4d:a5:
         f6:8d:fd:58:3d:8d:b7:da:d2:f7:1f:3e:37:d0:d5:ea:41:bb:
         40:43:d0:f5:9e:d2:cd:47:0f:db:ec:7e:0e:b4:61:50:41:52:
         c6:cb:9f:54:21:52:77:35:3f:bf:e6:89:6f:3d:9f:0f:ab:1b:
         24:4e:51:21:a0:f7:1a:e0:d4:aa:2a:60:29:0f:f7:22:5e:36:
         df:32:ed:ac:f4:f2:26:49:43:0b:af:e3:9f:88:15:8a:33:0a:
         94:c1:85:f6:12:86:5e:53:78:0d:74:8c:36:84:fb:03:76:9e:
         b9:c7:21:2b:d5:37:34:7b:b6:72:6c:30:af:0d:54:c9:88:08:
         28:76:5f:e4:8e:c2:a3:e1:74:ac:66:11:f0:c4:89:33:97:90:
         15:da:59:b6:c2:00:18:f3:e0:a8:fc:b5:ca:7c:5e:1b:ad:dd:
         31:c1:18:3b:55:92:92:79:09:b2:e2:34:0c:bd:3d:65:78:d8:
         31:b0:af:63:a4:d5:00:c9:5d:82:43:60:6a:c0:92:33:a0:c1:
         b6:b8:31:d1:ff:95:75:e2:ac:4f:aa:e8:d6:6a:3e:6c:ce:41:
         6c:d0:ee:28:a5:46:e9:4e:33:f2:6f:bc:39:b8:ad:66:e3:de:
         31:cc:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:04 2025 by rpki-client