Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa
File:                     3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa (raw, json)
Hash identifier:          vpxztQgy4wS7ImAiYHzzQ/6e3Vhb9UkeYgP7rvfqZLY=
Subject key identifier:   44:5D:D5:9A:AE:A2:C7:85:9F:01:1E:6C:AB:8C:2D:86:E7:14:DE:BF
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       3EEA82739C251F9E5692E9F752EB0C95E134446B
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa
Signing time:             Mon 14 Sep 2026 13:53:14 +0000
ROA not before:           Mon 14 Sep 2026 13:48:14 +0000
ROA not after:            Mon 13 Sep 2027 13:53:14 +0000
asID:                     52992
IP address blocks:        200.136.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ea:82:73:9c:25:1f:9e:56:92:e9:f7:52:eb:0c:95:e1:34:44:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:14 2026 GMT
            Not After : Sep 13 13:53:14 2027 GMT
        Subject: CN=445DD59AAEA2C7859F011E6CAB8C2D86E714DEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:9d:20:59:18:cb:8f:50:bc:38:8c:ff:d1:
                    b1:70:c1:fc:56:bb:b7:b4:79:7c:90:fa:a7:5b:bf:
                    3d:67:e4:d4:5c:3d:5c:2a:31:28:7b:b5:d1:6a:bf:
                    9f:b7:7e:d7:f7:5e:3e:08:77:4d:9e:19:97:dc:8a:
                    18:d3:84:79:68:6b:5c:57:8d:22:f8:c4:2c:26:9c:
                    b5:a4:1e:ac:05:da:7f:70:ef:98:ea:5b:61:02:94:
                    7e:d8:56:91:5c:a1:54:7f:8b:d6:aa:4e:0c:25:6b:
                    ce:26:f1:f2:99:11:24:ca:7d:9b:80:0b:5d:2f:41:
                    16:9b:9a:a1:4f:52:26:bd:4e:e0:3f:99:a6:41:ad:
                    c2:d8:8c:db:58:0d:38:72:f7:30:b3:c2:5d:b1:e4:
                    ca:13:7e:6d:e8:d8:dd:42:97:b6:2b:be:2c:d4:0f:
                    99:e3:b7:d4:1b:0a:d5:c8:f9:48:89:6d:a5:64:89:
                    6c:31:69:4b:a3:53:1e:db:c8:cb:c9:f4:11:a2:06:
                    a5:12:e2:01:20:11:3a:a5:00:d2:af:05:86:7f:6b:
                    6d:5d:ee:a0:ba:90:2e:12:c5:e4:6e:2a:60:bd:dd:
                    ef:09:8f:27:7a:a1:b6:87:b3:86:2d:a1:27:6b:88:
                    c6:b3:9f:c2:09:5b:4f:e5:3e:ad:1c:97:84:43:49:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:D5:9A:AE:A2:C7:85:9F:01:1E:6C:AB:8C:2D:86:E7:14:DE:BF
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:2d:d4:1f:c7:32:d7:60:97:d0:d4:24:8b:23:98:bb:1d:
         35:a0:af:f0:a9:80:89:9c:1d:25:12:e2:18:00:b3:d6:4b:91:
         3d:00:4c:e2:e9:f2:9e:bf:cb:d6:b9:5a:9d:eb:c1:24:65:1f:
         fe:27:1e:06:cd:ca:e6:a8:31:03:8d:22:87:5a:7e:30:4b:fc:
         1f:84:2c:21:0a:7a:9e:fc:8d:19:4b:1d:dc:2f:c0:56:04:fc:
         45:89:1a:29:18:e9:76:1f:66:c2:88:bf:cb:a7:c4:4b:9e:69:
         01:77:58:1a:ba:46:f1:dd:9e:aa:69:7d:2f:f9:7a:ed:21:14:
         be:fd:5a:55:a8:1d:88:cb:f8:9d:e7:a7:d3:69:0b:52:ae:d3:
         59:52:5e:40:64:08:2f:e0:74:ef:66:d9:a6:d4:71:d1:ee:52:
         f2:32:cf:1a:9b:65:c6:96:88:c9:7a:e0:2e:54:c6:4f:4c:1c:
         e7:63:d5:7d:44:22:70:1a:7c:30:2b:58:b1:36:c0:b1:23:6e:
         e0:67:70:3f:20:2c:0a:8d:49:91:0f:66:e4:ce:0d:c5:77:87:
         6d:2c:d3:db:e4:fa:08:e6:ca:3b:28:99:4f:9b:ad:af:ce:15:
         ef:4e:d5:bb:67:00:40:82:87:61:e7:1a:7a:8c:b9:50:79:75:
         c4:59:fd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 14:32:09 2026 by rpki-client