Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137362e302f32342d3234203d3e2031323531.roa
File:                     3230302e3133362e3137362e302f32342d3234203d3e2031323531.roa (raw, json)
Hash identifier:          802P+GSEHaQKA7+B2dIKBE4M87/i/tJHx3B8TxVzYtg=
Subject key identifier:   11:0F:FF:46:F0:B4:63:B4:5F:70:21:5F:F2:54:E9:2E:59:51:C5:C0
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       418C44941E7DDA944B228FE8639045143993E1D4
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137362e302f32342d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:13 +0000
ROA not before:           Mon 14 Sep 2026 13:48:13 +0000
ROA not after:            Mon 13 Sep 2027 13:53:13 +0000
asID:                     1251
IP address blocks:        200.136.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:44:94:1e:7d:da:94:4b:22:8f:e8:63:90:45:14:39:93:e1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:13 2026 GMT
            Not After : Sep 13 13:53:13 2027 GMT
        Subject: CN=110FFF46F0B463B45F70215FF254E92E5951C5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:6b:2c:bf:89:77:78:8c:fd:78:36:9b:cd:
                    c0:cd:aa:39:1a:fc:58:16:81:29:fa:06:16:60:cf:
                    ba:1d:0d:be:19:cf:84:d2:e1:2b:f8:00:03:7f:69:
                    67:d3:5d:f0:fc:23:60:9e:95:e1:5b:6e:80:a5:0d:
                    b2:c9:5a:fc:bf:aa:f7:32:c0:4f:c2:6c:e4:a4:b6:
                    7f:93:0e:84:9d:04:00:68:c5:b9:5e:42:36:6a:01:
                    c9:f9:28:de:7d:53:2f:da:3d:34:b2:f4:cd:15:07:
                    2b:5e:ca:29:a7:b0:be:51:de:61:aa:cb:70:d0:99:
                    2b:b2:8f:ed:d3:36:4d:f2:67:00:c9:20:89:2f:97:
                    1e:df:87:06:21:4f:4c:33:76:89:25:6d:1b:04:43:
                    2d:0b:f2:2a:1d:e5:cc:9d:a5:87:af:c1:51:05:dc:
                    96:ea:1a:78:d6:d2:af:55:a6:2d:61:4b:1d:e3:a7:
                    f4:9b:a1:6f:63:6b:a6:2c:80:e5:48:e1:0c:5a:2b:
                    69:36:35:e3:2f:88:15:b9:d8:92:ce:ec:4d:fa:e8:
                    6b:59:cb:8b:e8:d0:68:7c:6c:87:4e:94:08:95:ae:
                    56:e5:58:ae:b5:c7:67:19:5e:d1:75:40:67:de:1f:
                    eb:d3:f2:73:d8:80:c4:a4:1d:4c:3f:5c:fc:40:e9:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:FF:46:F0:B4:63:B4:5F:70:21:5F:F2:54:E9:2E:59:51:C5:C0
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137362e302f32342d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:db:61:93:f9:45:df:9a:83:32:cf:97:e0:09:01:cd:6b:72:
         a4:62:c4:fd:ec:75:a5:d3:84:07:97:0f:e7:d9:b1:db:7b:cc:
         fb:28:60:51:c2:c9:7e:06:7c:5a:77:5a:cc:70:b3:6b:db:15:
         e1:12:10:0c:96:aa:65:ee:2c:11:e0:c7:1a:53:cf:35:18:11:
         15:ba:ba:ff:5a:78:6b:7a:92:08:3b:2b:43:97:2c:c7:bf:58:
         e2:8c:7f:67:6d:f3:aa:7d:bb:c1:61:6c:1a:0d:d8:58:49:34:
         1f:3a:c5:75:d9:c9:ee:f0:c0:35:92:2d:13:7e:10:2e:b6:15:
         de:71:45:7c:50:2e:98:35:82:fe:52:f7:1c:8d:d8:59:53:48:
         33:76:af:f2:f4:3b:73:1b:c3:c6:72:7c:78:42:d6:1c:0d:a7:
         ec:6c:1c:1a:12:04:5d:5f:ac:a5:5b:8c:fd:55:18:d7:aa:24:
         ed:3c:7e:f2:42:d4:01:4c:f5:9e:3c:98:60:9e:f2:6a:a2:93:
         91:3d:f4:32:70:b4:f2:02:c8:ce:0c:b9:f2:5b:2a:55:ed:27:
         77:38:ea:f6:b0:6a:88:61:ce:13:2d:17:dc:be:22:a4:de:68:
         5d:5f:52:56:d5:e1:da:41:b9:38:47:a8:56:28:83:a9:50:68:
         e9:27:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:37:09 2026 by rpki-client