Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa
File:                     3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          6yw5HLR2c94PmgyzC6Tt0oZKySXSfFC2YR5bvYgYiQo=
Subject key identifier:   E5:67:4E:59:6F:7E:AA:F0:55:8B:DA:5E:50:38:FE:2E:1F:23:7D:3A
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       51C8DDF35497DCA674D334DC875533E445991B3F
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:23 +0000
ROA not before:           Mon 14 Sep 2026 13:48:23 +0000
ROA not after:            Mon 13 Sep 2027 13:53:23 +0000
asID:                     1251
IP address blocks:        200.136.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c8:dd:f3:54:97:dc:a6:74:d3:34:dc:87:55:33:e4:45:99:1b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:23 2026 GMT
            Not After : Sep 13 13:53:23 2027 GMT
        Subject: CN=E5674E596F7EAAF0558BDA5E5038FE2E1F237D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:63:d7:4d:7d:4b:9d:d9:05:59:25:3d:3d:
                    86:06:3a:14:19:e2:6f:31:0d:e8:09:54:42:76:84:
                    ab:71:bc:5c:fd:6c:a6:dd:7a:7c:6b:28:be:44:c2:
                    1a:8c:26:df:45:3c:44:0d:db:e5:4f:15:1e:6b:e6:
                    5c:0e:18:85:dd:bb:07:88:66:6a:c5:5e:2b:62:31:
                    6b:4e:d5:27:03:80:ed:f2:e5:2b:e8:e1:77:d4:bd:
                    02:27:e2:ee:f3:b7:d4:3b:b3:86:e3:49:00:de:1f:
                    8d:5a:6e:0c:b6:4c:7f:61:d5:75:e3:1c:8a:b2:3a:
                    5e:63:b5:a1:5e:07:ba:ab:bd:ea:04:17:ee:a1:5f:
                    b8:12:e7:e5:f1:98:20:51:94:28:21:38:2d:57:20:
                    f2:5b:d3:a8:d8:14:03:a6:7b:20:90:13:48:04:09:
                    45:ce:f4:b8:14:f8:eb:66:92:9a:ca:97:71:b7:bd:
                    d9:13:1f:6a:9a:c8:a4:34:12:02:d6:cf:5b:e9:9c:
                    54:17:26:3c:23:7c:c6:b0:4d:4a:1a:89:6a:0a:31:
                    5a:f7:b3:d2:d5:21:39:06:04:67:aa:c8:fb:34:74:
                    d4:11:dd:34:22:a9:0f:07:4f:ce:83:2e:c5:85:0a:
                    c5:8e:a8:35:fa:6b:96:64:c6:06:97:83:22:75:c5:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:67:4E:59:6F:7E:AA:F0:55:8B:DA:5E:50:38:FE:2E:1F:23:7D:3A
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3130382e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:ae:0b:9f:85:7d:84:e6:89:1c:27:e2:5b:c2:cd:90:07:
         e5:57:6f:fa:51:da:38:66:cb:b1:00:7c:ad:1b:93:5c:39:c2:
         ba:73:33:2f:57:b2:05:cd:09:e8:07:dd:9d:3d:c3:d2:76:49:
         0a:91:d1:2f:f8:0b:db:e9:63:46:e6:2e:a4:38:62:e1:b7:1d:
         0c:94:61:3d:92:a2:16:a5:e4:56:10:2a:69:91:fb:e9:ae:81:
         42:31:42:48:d7:47:91:17:a4:e4:4c:09:de:85:11:42:3e:8e:
         63:df:19:1a:de:64:09:dd:b8:aa:e7:b9:cf:5e:91:58:2c:1a:
         da:0c:97:87:5c:d2:e2:2f:5a:5a:ba:a7:5f:8e:b7:b8:21:cb:
         3f:bb:d7:35:6e:f3:6e:f0:55:88:ae:21:31:80:4e:59:31:c9:
         23:36:f6:2e:e3:34:ac:34:3a:09:ed:5f:6f:a0:d0:7e:97:6d:
         c6:d8:7f:93:01:9a:19:e1:11:4e:e2:18:40:49:51:9a:9b:a6:
         53:36:4e:64:71:42:84:90:46:76:2c:86:b5:d7:37:44:00:26:
         c4:a1:09:cf:5f:ed:92:13:43:54:b6:09:84:c5:b3:3e:b7:19:
         73:f6:ce:5d:5d:9b:13:89:a8:5b:e8:84:5a:51:eb:74:67:83:
         ad:c1:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:10:21 2026 by rpki-client