Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa
File:                     3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa (raw, json)
Hash identifier:          JPCXqGZ/MiySjPD0kVEVkhPxToKBmW/P91Iz6gzngkE=
Subject key identifier:   C0:9E:6A:AE:D8:EE:B8:F4:5C:E3:42:C4:2B:E3:BB:78:7D:D8:E5:E1
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       0334812FDAB763AAFE934E09BCD2E973143A1E80
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa
Signing time:             Mon 13 Oct 2025 13:46:28 +0000
ROA not before:           Mon 13 Oct 2025 13:41:28 +0000
ROA not after:            Mon 12 Oct 2026 13:46:28 +0000
asID:                     1916
IP address blocks:        200.136.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:34:81:2f:da:b7:63:aa:fe:93:4e:09:bc:d2:e9:73:14:3a:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:28 2025 GMT
            Not After : Oct 12 13:46:28 2026 GMT
        Subject: CN=C09E6AAED8EEB8F45CE342C42BE3BB787DD8E5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:f4:cd:46:0f:cd:77:87:d5:5d:80:5f:2d:
                    c3:bc:74:66:f6:d8:04:12:d6:46:dc:c2:25:ee:c3:
                    c5:9d:d3:39:8f:c8:2c:dd:07:40:f1:90:95:cc:6d:
                    2f:fc:c0:03:6e:5f:4b:84:67:24:a5:dd:5c:73:4b:
                    24:da:f5:47:99:d1:0e:39:31:11:72:dc:0f:ca:f8:
                    d7:99:5d:23:88:40:d2:79:dc:49:69:f3:fe:ec:d5:
                    3e:48:a7:b1:4f:16:98:39:c3:65:27:d9:97:c6:48:
                    7c:86:2f:30:65:36:b8:1f:c0:2a:f2:00:98:8e:a1:
                    1a:3f:f4:e0:76:66:04:9c:ef:d2:7f:d9:70:c2:4a:
                    a0:51:ee:fa:d3:fb:b8:25:a9:d1:b6:0e:d0:e4:c1:
                    84:c7:00:c2:70:57:69:bb:2a:28:60:7f:41:25:87:
                    cd:18:4d:0f:63:94:77:6e:92:75:fe:38:c3:4c:4a:
                    43:2f:b7:64:69:86:f5:a0:99:44:4f:fd:73:a6:62:
                    1c:bc:b9:70:2e:99:8b:7c:1e:15:7d:9b:6a:d1:14:
                    40:43:8a:45:e2:d0:b2:fe:49:de:9b:03:e4:d1:c3:
                    8a:40:21:a6:ac:12:6a:b3:d0:0f:d2:b6:04:f5:07:
                    67:a8:ef:93:d2:58:0c:4e:d9:e0:7d:22:68:31:16:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:6A:AE:D8:EE:B8:F4:5C:E3:42:C4:2B:E3:BB:78:7D:D8:E5:E1
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:c7:f2:ec:c2:f5:c5:64:3a:ea:bc:a1:ef:19:85:c8:0d:
         3f:c5:11:2e:6a:a0:14:04:c0:a5:84:f3:5e:4f:76:45:44:84:
         60:92:a2:56:f0:9f:00:c9:c9:55:1b:e7:ba:66:b6:56:eb:cf:
         31:ef:53:03:ac:ef:64:4c:79:ac:14:18:c9:25:46:bf:c6:42:
         54:f2:d4:84:3e:76:c1:3a:50:2c:c4:07:35:1c:f0:3e:8c:24:
         3d:07:38:be:01:e6:14:6e:48:73:78:8a:da:e6:f1:da:64:82:
         e5:79:17:aa:9a:61:00:a6:11:b0:4d:e0:77:6a:57:dd:53:0c:
         c0:be:64:ae:a2:34:2d:ec:68:78:20:cb:17:e8:0b:22:e2:d3:
         c3:ed:6b:9a:71:40:f8:2a:65:3d:51:d3:c7:4d:e2:e0:92:a7:
         6f:5c:d2:26:39:21:49:a9:69:f0:66:4b:de:f1:1e:7e:4a:aa:
         a6:c2:01:5e:63:74:fc:31:2d:82:88:cb:18:04:3c:9e:4a:85:
         38:a2:e3:69:98:59:22:6b:10:4a:71:14:6e:4a:f0:e3:1c:f8:
         50:c3:b3:2d:c8:f2:09:71:42:a8:6f:69:1d:51:3d:77:cb:16:
         ee:43:a6:58:54:e2:ff:c7:e7:d5:1b:2d:37:b0:df:05:fd:56:
         68:7f:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:04:09 2025 by rpki-client