Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131322e302f32302d3234203d3e203532393932.roa
File:                     3230302e3133362e3131322e302f32302d3234203d3e203532393932.roa (raw, json)
Hash identifier:          6v0mLJZw7NQ1WEcNTyAoxIfwkTQ4Pxx573+tRpfVwko=
Subject key identifier:   62:37:03:B0:0A:5F:85:DD:67:BD:BA:5D:4D:BD:5E:39:E7:7E:C6:E2
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       084220F0EF41A66B02AF428E176D15594D5BAF01
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131322e302f32302d3234203d3e203532393932.roa
Signing time:             Mon 14 Sep 2026 13:53:09 +0000
ROA not before:           Mon 14 Sep 2026 13:48:09 +0000
ROA not after:            Mon 13 Sep 2027 13:53:09 +0000
asID:                     52992
IP address blocks:        200.136.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:20:f0:ef:41:a6:6b:02:af:42:8e:17:6d:15:59:4d:5b:af:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:09 2026 GMT
            Not After : Sep 13 13:53:09 2027 GMT
        Subject: CN=623703B00A5F85DD67BDBA5D4DBD5E39E77EC6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:66:9f:90:d8:03:f4:c5:58:9d:5e:e5:06:4e:
                    0d:b8:d6:6b:14:0b:92:44:27:da:ba:c1:80:52:40:
                    b1:a2:7a:ee:87:89:39:e2:56:85:b4:15:08:1e:c9:
                    dc:82:df:65:d1:ce:ec:8a:f4:8e:c4:eb:2f:8b:64:
                    36:60:3e:6f:17:3e:97:a0:f7:89:2f:85:3d:80:5b:
                    7d:91:b0:e1:df:96:28:c9:bb:1d:27:90:ea:d9:e3:
                    bf:be:78:d4:27:e9:7e:c0:5b:12:65:5a:99:a8:72:
                    30:dd:d2:e5:08:25:85:da:51:9a:c2:10:5e:04:ad:
                    fe:fb:3a:11:36:8c:7e:79:d5:09:50:3d:1d:9e:14:
                    b1:ad:fe:37:06:e3:50:9b:18:58:c4:54:a8:6a:fd:
                    11:ca:a7:89:e7:c6:6c:51:1c:16:23:a8:c7:a4:e8:
                    00:78:c3:2b:1c:b3:bd:d9:c0:55:d6:39:7a:bf:bd:
                    85:c6:73:49:01:f8:89:cb:83:e7:cf:4c:45:5f:54:
                    f0:a6:9d:f8:c1:96:8f:58:fa:45:91:80:a0:11:6d:
                    7b:ce:6c:8c:16:49:90:9d:4e:c5:19:a4:5a:7e:10:
                    5d:e7:5a:1a:1d:14:f6:59:22:9c:5b:49:f6:0e:3e:
                    b4:8d:7c:fe:fe:82:4a:98:33:c7:7d:9f:44:91:f1:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:03:B0:0A:5F:85:DD:67:BD:BA:5D:4D:BD:5E:39:E7:7E:C6:E2
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3131322e302f32302d3234203d3e203532393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:05:91:90:1b:ee:29:3e:6b:c4:bb:fa:5c:ed:f4:c3:6e:6f:
         32:74:45:f7:8b:0a:da:fd:f4:bb:90:44:d1:83:c9:e6:37:16:
         28:18:8b:c9:a2:dc:e1:25:5c:3c:f4:ae:a1:aa:de:48:0c:e3:
         93:08:e6:35:a2:04:ff:7c:54:74:51:ab:31:40:d3:bc:15:e8:
         68:47:45:ef:80:b4:d4:5a:ad:31:6b:58:6e:10:cb:1f:16:ba:
         d9:10:b8:3d:fb:b1:c2:fb:a9:55:1f:ee:4f:e4:f2:6c:e3:77:
         8b:c9:77:11:58:81:59:15:7d:5d:92:20:51:43:db:55:91:a6:
         73:bc:96:87:f8:9c:dc:f1:7a:43:8d:82:84:49:92:e7:10:07:
         af:6b:a9:c6:77:34:13:c5:cf:dc:eb:ab:a1:93:f3:14:5f:d1:
         81:bd:95:ab:1c:fb:52:d3:b3:0c:98:e5:59:14:62:18:85:b8:
         81:30:91:fd:b0:86:46:ca:5b:58:a1:d7:8a:b8:53:09:3f:2e:
         7c:67:40:7b:a6:23:73:b2:97:a4:53:93:43:1d:89:f4:59:d6:
         43:97:69:42:2a:46:21:cc:e7:15:f2:d9:5a:ba:46:97:6d:11:
         22:9b:be:ea:8f:ef:d9:0e:71:81:1a:8a:5b:71:90:b7:1b:ae:
         66:44:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:24 2026 by rpki-client