Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa
File:                     3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa (raw, json)
Hash identifier:          edH/WYpkCnXGpDsnhC8koOaTtywde8140iAlxGEVMPE=
Subject key identifier:   D0:E4:D7:FA:1C:AF:52:E7:03:3F:1C:28:5E:92:1F:83:FD:20:B2:90
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       33E27416D7D0C28E4846461962D1225611F71982
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa
Signing time:             Mon 13 Oct 2025 13:46:18 +0000
ROA not before:           Mon 13 Oct 2025 13:41:18 +0000
ROA not after:            Mon 12 Oct 2026 13:46:18 +0000
asID:                     52992
IP address blocks:        200.136.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e2:74:16:d7:d0:c2:8e:48:46:46:19:62:d1:22:56:11:f7:19:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:18 2025 GMT
            Not After : Oct 12 13:46:18 2026 GMT
        Subject: CN=D0E4D7FA1CAF52E7033F1C285E921F83FD20B290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:a8:a8:5f:80:3b:ee:ab:d0:0d:41:ef:41:
                    06:49:76:9f:42:00:8e:8c:10:5d:38:e1:d9:f5:d7:
                    73:79:ae:0e:1e:46:6e:ff:30:61:bb:b5:4f:2c:97:
                    c9:26:24:e8:d7:0f:5b:8f:1d:8c:3d:89:d2:58:79:
                    25:f2:b4:fe:75:47:fb:e7:78:2d:00:3b:06:35:18:
                    c4:dd:f3:40:cc:03:cb:c8:17:43:9a:08:bd:aa:8c:
                    7f:a9:62:a5:02:bd:99:dd:12:74:98:d6:05:66:92:
                    5e:39:be:4b:7b:b7:67:12:86:84:75:07:07:77:cb:
                    30:0e:d5:93:d2:4b:c0:13:e7:42:2f:71:a1:7d:01:
                    32:33:c7:1e:d1:fa:3d:73:6a:05:07:56:34:28:3a:
                    0a:c5:68:ef:3d:ee:13:de:c1:13:7c:6f:77:3f:46:
                    ff:72:e7:47:78:88:e8:64:fb:85:66:95:6c:d1:a6:
                    52:1b:68:87:9e:53:e4:7b:b3:9a:b3:e1:35:46:3c:
                    05:bf:b4:34:49:7c:8a:0b:de:7c:8c:5e:20:c6:72:
                    a3:d2:5c:e1:ca:ab:44:3d:a6:4f:d1:a8:a5:9b:54:
                    16:60:4d:de:d5:c4:cb:fc:17:7d:e9:14:37:d2:3a:
                    b1:a6:6d:d9:20:01:4b:a2:67:0d:95:b4:f2:52:d1:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E4:D7:FA:1C:AF:52:E7:03:3F:1C:28:5E:92:1F:83:FD:20:B2:90
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3132382e302f31392d3234203d3e203532393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:cf:26:04:57:4d:dc:75:80:98:e9:0b:67:06:4d:b6:39:
         33:61:04:eb:aa:0c:38:b1:af:c6:19:43:5c:a1:37:f3:76:28:
         69:30:7c:5d:8a:37:a1:d0:60:c3:ea:30:4b:49:98:84:6b:e6:
         73:df:2d:6f:71:61:71:be:49:69:f0:18:e7:91:64:2b:c5:92:
         03:1a:5e:d3:4b:ba:42:a1:68:52:67:51:e4:62:2f:26:99:9b:
         89:31:9b:9e:95:f4:b3:b0:e3:42:fa:e4:9f:99:8c:98:8b:2f:
         01:b9:51:70:aa:f2:c5:79:3c:dc:d5:62:ea:e4:b0:68:22:16:
         f8:72:82:af:c9:cb:c8:b2:1a:a2:d7:b4:35:f7:b8:8c:f8:65:
         50:09:07:a8:58:62:a3:e3:86:b7:83:75:79:8c:63:20:e0:ea:
         f9:45:a9:64:66:b3:d5:bf:f9:15:9b:32:47:4b:9a:47:9b:6d:
         f3:77:44:93:6b:2e:4a:cb:aa:72:cb:f9:ea:f2:1f:47:17:ea:
         f0:2b:a1:4e:68:ab:9a:cb:1b:c1:b0:27:2d:e3:3d:27:6f:ec:
         99:cc:12:4a:5c:83:6d:a5:0b:2a:c8:67:82:84:11:06:fb:52:
         25:be:6e:45:15:80:bb:c0:28:9d:b0:4d:47:59:d5:96:6c:da:
         f6:4e:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:34 2025 by rpki-client