Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131302e302f32342d3234203d3e2031323531.roa
File:                     3230302e3133362e3131302e302f32342d3234203d3e2031323531.roa (raw, json)
Hash identifier:          TRtA6R+jLNt6NZbyKiaGu6kZ4yOXc8qM3xJHLM7WMRc=
Subject key identifier:   81:FF:B1:E8:DC:E4:54:C8:ED:54:20:A3:D7:48:5C:B2:11:9F:57:54
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       043E2DD437D8A3B8059E1B31F66CCD1F453A74CA
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131302e302f32342d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:26 +0000
ROA not before:           Mon 13 Oct 2025 13:41:26 +0000
ROA not after:            Mon 12 Oct 2026 13:46:26 +0000
asID:                     1251
IP address blocks:        200.136.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3e:2d:d4:37:d8:a3:b8:05:9e:1b:31:f6:6c:cd:1f:45:3a:74:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:26 2025 GMT
            Not After : Oct 12 13:46:26 2026 GMT
        Subject: CN=81FFB1E8DCE454C8ED5420A3D7485CB2119F5754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:56:5d:70:bc:ca:fd:85:9b:9a:a9:ec:e0:
                    92:48:d4:50:23:96:61:d8:ec:6a:39:ae:99:5e:82:
                    f6:d4:32:12:ba:c0:3a:77:55:a6:21:83:68:52:cb:
                    af:cb:94:0b:da:9d:71:51:c7:dc:2e:55:88:83:8b:
                    6c:6e:22:22:de:00:85:c8:20:2c:04:44:4f:e0:15:
                    09:c5:67:5c:20:0e:c3:aa:dc:d8:d5:7a:25:72:92:
                    85:34:06:6b:0d:d9:e2:5b:4a:55:da:26:8e:2b:f9:
                    5b:79:2f:33:b8:51:03:3e:2f:93:56:a5:ed:ff:76:
                    10:48:35:48:56:92:22:a0:64:d8:3a:dc:97:9c:e6:
                    9f:2b:f5:60:82:55:57:8d:50:08:64:3d:40:0d:0e:
                    6a:96:5b:90:58:23:f9:7c:47:fe:18:8c:d8:c5:65:
                    3e:06:46:4b:39:57:76:36:e0:4a:58:cc:89:2e:51:
                    54:8a:9b:ea:8b:a7:1d:76:80:79:ca:a1:8d:92:41:
                    f5:02:f3:cd:1f:94:16:33:47:3a:dd:4c:57:d5:bb:
                    6b:52:94:18:48:72:6a:b8:0c:8d:4b:4b:fa:a5:76:
                    a9:06:81:21:83:2a:07:b6:37:e8:12:88:fd:10:ff:
                    58:f2:2a:c4:7c:9d:5a:c9:2e:78:92:55:86:aa:86:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FF:B1:E8:DC:E4:54:C8:ED:54:20:A3:D7:48:5C:B2:11:9F:57:54
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131302e302f32342d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:2c:de:c5:10:8b:c9:6a:1f:ba:50:f0:e2:a0:ff:9a:be:
         00:7a:26:a4:ba:7f:6b:a7:41:ed:03:13:35:37:fe:a7:2b:66:
         84:14:fb:12:f6:a6:e6:29:16:94:40:9e:26:8d:ca:c2:49:21:
         41:12:97:07:ff:58:d2:83:6d:36:44:99:c9:ab:f6:17:1e:e1:
         31:29:37:15:81:a0:61:d1:e8:66:3d:98:c5:b2:14:ef:f3:73:
         90:53:0b:78:2c:e9:ad:69:a9:cc:b6:ae:28:eb:54:ac:3d:e7:
         5a:f9:6e:16:0f:76:f1:52:98:ca:4e:d2:4b:cc:b9:da:89:69:
         99:68:ac:8f:66:cb:b3:ed:0d:35:f3:7b:df:46:43:bf:9f:a7:
         c2:0a:fc:f6:fa:c0:33:f0:28:1c:ad:35:22:e3:0c:8e:71:b8:
         08:4f:ab:b8:17:c2:b7:29:cd:48:10:46:4a:4e:0c:50:77:25:
         81:43:34:b6:00:22:29:5c:44:7d:8b:16:96:5c:6a:b8:43:da:
         58:69:7c:2a:08:c2:ff:52:92:b9:5d:61:91:86:f4:43:8e:f3:
         6f:61:8a:aa:15:f7:81:8f:ee:95:a8:1c:69:c6:da:d9:aa:98:
         30:cd:bb:fe:f2:6a:22:39:34:00:29:94:b8:c7:66:7f:fb:f4:
         96:4f:b3:1e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBD4t1DfYo7gFnhsx9mzNH0U6dMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNTEwMTMxMzQxMjZaFw0yNjEwMTIxMzQ2MjZaMDMxMTAvBgNV
BAMTKDgxRkZCMUU4RENFNDU0QzhFRDU0MjBBM0Q3NDg1Q0IyMTE5RjU3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDE1ZdcLzK/YWbmqns4JJI1FAj
lmHY7Go5rplegvbUMhK6wDp3VaYhg2hSy6/LlAvanXFRx9wuVYiDi2xuIiLeAIXI
ICwERE/gFQnFZ1wgDsOq3NjVeiVykoU0BmsN2eJbSlXaJo4r+Vt5LzO4UQM+L5NW
pe3/dhBINUhWkiKgZNg63Jec5p8r9WCCVVeNUAhkPUANDmqWW5BYI/l8R/4YjNjF
ZT4GRks5V3Y24EpYzIkuUVSKm+qLpx12gHnKoY2SQfUC880flBYzRzrdTFfVu2tS
lBhIcmq4DI1LS/qldqkGgSGDKge2N+gSiP0Q/1jyKsR8nVrJLniSVYaqhg09AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgf+x6NzkVMjtVCCj10hcshGfV1QwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTMzMzYyZTMxMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyIhuMA0GCSqGSIb3DQEBCwUAA4IBAQBeFCzexRCL
yWofulDw4qD/mr4Aeiakun9rp0HtAxM1N/6nK2aEFPsS9qbmKRaUQJ4mjcrCSSFB
EpcH/1jSg202RJnJq/YXHuExKTcVgaBh0ehmPZjFshTv83OQUwt4LOmtaanMtq4o
61SsPeda+W4WD3bxUpjKTtJLzLnaiWmZaKyPZsuz7Q0183vfRkO/n6fCCvz2+sAz
8CgcrTUi4wyOcbgIT6u4F8K3Kc1IEEZKTgxQdyWBQzS2ACIpXER9ixaWXGq4Q9pY
aXwqCML/UpK5XWGRhvRDjvNvYYqqFfeBj+6VqBxpxtrZqpgwzbv+8moiOTQAKZS4
x2Z/+/SWT7Me
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:14 2025 by rpki-client