Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138302e302f32332d3234203d3e2031393136.roa
File:                     3230302e3133362e3138302e302f32332d3234203d3e2031393136.roa (raw, json)
Hash identifier:          XumlLS+oG4fn9p209GYpin1PDBN24o7R6kM2Vk3NCKY=
Subject key identifier:   87:2D:ED:14:A6:D1:B4:5A:9D:EF:F1:65:48:A9:CD:73:A3:EB:5A:BB
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       26548D7A27788AFF8BF6154E30010AF0B82974A3
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138302e302f32332d3234203d3e2031393136.roa
Signing time:             Mon 13 Oct 2025 13:46:31 +0000
ROA not before:           Mon 13 Oct 2025 13:41:31 +0000
ROA not after:            Mon 12 Oct 2026 13:46:31 +0000
asID:                     1916
IP address blocks:        200.136.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:54:8d:7a:27:78:8a:ff:8b:f6:15:4e:30:01:0a:f0:b8:29:74:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:31 2025 GMT
            Not After : Oct 12 13:46:31 2026 GMT
        Subject: CN=872DED14A6D1B45A9DEFF16548A9CD73A3EB5ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:db:dd:a0:63:47:35:b3:8b:69:9a:60:ed:
                    a1:d8:a3:c0:90:d3:97:08:9c:b3:be:08:8c:22:97:
                    eb:06:26:f0:08:1a:72:a7:46:35:26:16:7f:6c:5a:
                    8c:54:8c:c5:70:47:f1:8c:53:e0:1f:49:e1:bf:48:
                    61:9c:0e:cc:28:de:17:c5:5b:4f:a3:78:c8:48:a7:
                    52:10:46:56:a4:f2:bc:f6:73:74:ff:f3:3b:c1:53:
                    24:e8:fd:11:f1:5f:d4:51:1b:1b:e7:2e:f1:6c:6d:
                    75:66:31:30:28:94:f5:7a:5e:19:9f:f6:1e:cb:1e:
                    1c:43:61:81:31:11:9c:80:4f:8f:a4:80:57:da:2d:
                    fb:ed:cb:a7:93:07:31:ed:91:d4:76:aa:2b:c1:e3:
                    a9:b8:a9:bd:c7:63:7c:08:df:00:4a:2e:e2:c8:f6:
                    14:1e:33:84:5b:70:75:18:fa:96:1e:5a:15:e9:df:
                    a6:36:71:e7:e5:70:d2:31:fb:f3:7d:c2:63:dd:da:
                    a2:49:e3:11:90:1a:32:5b:e7:50:85:85:db:a0:34:
                    e5:68:d6:9b:f2:ef:db:74:95:76:cc:1b:ac:12:e5:
                    65:db:97:a0:46:33:85:ef:bd:1f:5f:e6:29:dd:48:
                    c6:11:de:91:07:a5:53:9f:c7:63:43:5b:a6:b8:8f:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2D:ED:14:A6:D1:B4:5A:9D:EF:F1:65:48:A9:CD:73:A3:EB:5A:BB
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138302e302f32332d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:b8:d1:28:e3:04:e7:12:bb:0c:4f:75:bb:22:d3:06:c9:
         ab:86:7e:02:05:4f:9f:3a:df:bd:c7:54:be:9c:6a:cb:90:4e:
         b5:a0:5a:3f:40:21:db:db:64:df:af:63:28:d7:d9:36:d8:51:
         69:e9:63:98:a5:ed:d7:9d:02:58:12:5b:fc:b2:d8:68:0c:fc:
         84:e0:f0:c6:ec:97:77:9b:78:47:61:bc:05:63:19:af:f4:29:
         ab:10:47:71:c2:75:ad:69:5c:18:7e:10:04:98:cf:5f:91:c8:
         d1:15:fa:dc:35:50:8d:f0:da:32:65:74:13:3d:24:98:18:fa:
         2f:b4:ed:a0:4b:74:31:9b:71:c2:04:97:ec:81:9b:7a:ec:6b:
         7a:03:7d:a7:69:3c:de:7e:41:84:21:2a:ea:1b:a3:05:65:0b:
         72:d3:0b:e9:24:55:ee:b5:e6:10:1b:c0:92:1a:a3:0f:7b:86:
         89:35:06:3b:06:1d:53:48:ea:b0:df:d2:4d:01:cc:70:b7:50:
         93:5d:d6:bf:89:25:17:01:28:2c:4c:e3:66:98:66:2d:4c:2d:
         86:cd:ae:4d:f6:7b:40:e0:c4:80:ad:4d:3c:44:0d:90:b9:7b:
         47:0d:9f:b5:c8:fe:94:a2:59:ed:2a:50:f6:82:9b:b0:ee:6a:
         c0:09:2b:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJlSNeid4iv+L9hVOMAEK8LgpdKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNTEwMTMxMzQxMzFaFw0yNjEwMTIxMzQ2MzFaMDMxMTAvBgNV
BAMTKDg3MkRFRDE0QTZEMUI0NUE5REVGRjE2NTQ4QTlDRDczQTNFQjVBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0NvdoGNHNbOLaZpg7aHYo8CQ
05cInLO+CIwil+sGJvAIGnKnRjUmFn9sWoxUjMVwR/GMU+AfSeG/SGGcDswo3hfF
W0+jeMhIp1IQRlak8rz2c3T/8zvBUyTo/RHxX9RRGxvnLvFsbXVmMTAolPV6Xhmf
9h7LHhxDYYExEZyAT4+kgFfaLfvty6eTBzHtkdR2qivB46m4qb3HY3wI3wBKLuLI
9hQeM4RbcHUY+pYeWhXp36Y2ceflcNIx+/N9wmPd2qJJ4xGQGjJb51CFhdugNOVo
1pvy79t0lXbMG6wS5WXbl6BGM4XvvR9f5indSMYR3pEHpVOfx2NDW6a4j479AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhy3tFKbRtFqd7/FlSKnNc6PrWrswHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTMzMzYyZTMxMzgzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByIi0MA0GCSqGSIb3DQEBCwUAA4IBAQAGi7jRKOME
5xK7DE91uyLTBsmrhn4CBU+fOt+9x1S+nGrLkE61oFo/QCHb22Tfr2Mo19k22FFp
6WOYpe3XnQJYElv8sthoDPyE4PDG7Jd3m3hHYbwFYxmv9CmrEEdxwnWtaVwYfhAE
mM9fkcjRFfrcNVCN8NoyZXQTPSSYGPovtO2gS3Qxm3HCBJfsgZt67Gt6A32naTze
fkGEISrqG6MFZQty0wvpJFXuteYQG8CSGqMPe4aJNQY7Bh1TSOqw39JNAcxwt1CT
Xda/iSUXASgsTONmmGYtTC2Gza5N9ntA4MSArU08RA2QuXtHDZ+1yP6UolntKlD2
gpuw7mrACSuH
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:07 2025 by rpki-client