Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa
File:                     3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          7sB44oFhD34eFEQ/Ug3ZTLEg1JO8K3P5/H2GiOsPoUQ=
Subject key identifier:   64:72:76:78:D4:D8:24:DA:71:CD:F0:25:45:DC:D7:16:BD:F6:9F:49
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       3CE61CD15435D50CDCC1FDB702EA5FE668B279DD
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:12 +0000
ROA not before:           Mon 14 Sep 2026 13:48:12 +0000
ROA not after:            Mon 13 Sep 2027 13:53:12 +0000
asID:                     1251
IP address blocks:        200.136.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e6:1c:d1:54:35:d5:0c:dc:c1:fd:b7:02:ea:5f:e6:68:b2:79:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:12 2026 GMT
            Not After : Sep 13 13:53:12 2027 GMT
        Subject: CN=64727678D4D824DA71CDF02545DCD716BDF69F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:24:5c:d0:5a:88:79:ed:d6:d1:11:d9:dc:
                    c6:4e:b9:49:ff:42:52:0c:1d:4c:11:a8:a2:d8:fb:
                    1a:ab:b1:20:7a:0a:7e:74:d5:ac:bb:c2:5b:b0:c9:
                    62:8b:04:43:e6:1e:44:f6:d8:f8:4b:ae:0e:80:95:
                    62:ab:c6:f2:ce:99:43:29:f2:ab:5d:e1:fb:7f:08:
                    11:30:55:db:15:60:2d:ef:e6:a7:9e:3a:d4:14:7f:
                    6c:ea:e6:42:c8:d0:45:4d:be:ce:88:7e:f4:9c:02:
                    d8:83:62:cf:94:86:3a:a4:00:25:0c:11:fd:44:d7:
                    35:c9:6b:40:e2:39:1c:25:a8:3b:d5:77:55:5f:20:
                    55:04:b2:2e:87:fc:97:85:70:eb:9d:64:3a:6a:28:
                    f5:af:8c:4c:ee:04:d3:4f:17:0a:af:05:41:e2:f9:
                    f2:2a:fc:cf:81:d7:6b:3a:8f:dd:93:5a:39:dc:b7:
                    7b:ca:d2:64:41:bd:72:c4:81:bd:f4:06:6f:1b:02:
                    5b:50:a4:1d:9b:3f:ad:ea:6a:4a:ec:fb:05:24:fc:
                    37:b7:53:50:68:18:01:de:99:2f:26:06:92:df:d7:
                    73:64:27:92:5f:e0:02:4e:19:2c:9b:b9:c2:6e:81:
                    78:61:37:43:f1:04:ab:6c:ea:49:83:9e:02:21:ce:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:76:78:D4:D8:24:DA:71:CD:F0:25:45:DC:D7:16:BD:F6:9F:49
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:85:72:92:2f:2b:aa:80:d7:ed:d5:38:35:0d:ca:54:1f:
         89:01:2c:d9:cb:61:09:0b:55:ef:93:8f:96:52:f6:5e:80:d1:
         0c:e8:74:73:90:88:c9:2f:c0:64:7b:26:12:d2:13:b2:be:6a:
         75:8b:41:dd:b6:23:e0:92:2e:15:35:85:fe:4c:c8:f8:f2:f3:
         5e:d9:87:e4:9c:d8:04:c1:44:1e:f6:9c:6c:9d:f4:c2:bf:3d:
         8b:b4:b5:29:b6:13:8e:38:3f:ec:33:90:fc:03:b2:cb:de:43:
         a0:77:d6:c2:97:3a:36:fc:1c:90:fa:73:12:c5:4f:85:97:6b:
         e8:5c:07:97:19:3b:7e:20:35:73:d1:8e:c8:12:bb:66:d5:a4:
         70:98:86:d9:e2:08:0e:57:6f:33:5e:e1:5e:f0:05:aa:14:d7:
         d2:91:ba:f6:27:1d:e3:15:3b:4c:fe:16:9a:83:6b:a5:c8:07:
         b7:75:3f:e1:06:bb:7d:7f:93:22:c6:8c:c6:5a:d4:68:12:a8:
         59:5f:73:a6:85:67:e7:6e:44:aa:c7:58:4e:40:dc:78:68:bc:
         1d:1e:76:b4:ab:cd:78:5f:5f:d8:03:43:7e:b7:c1:f1:4e:49:
         c9:04:d3:2d:c7:bf:99:09:c3:ff:44:ba:6f:07:3d:a2:e0:cf:
         cf:48:ef:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPOYc0VQ11Qzcwf23Aupf5miyed0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MTJaFw0yNzA5MTMxMzUzMTJaMDMxMTAvBgNV
BAMTKDY0NzI3Njc4RDREODI0REE3MUNERjAyNTQ1RENENzE2QkRGNjlGNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveSRc0FqIee3W0RHZ3MZOuUn/
QlIMHUwRqKLY+xqrsSB6Cn501ay7wluwyWKLBEPmHkT22PhLrg6AlWKrxvLOmUMp
8qtd4ft/CBEwVdsVYC3v5qeeOtQUf2zq5kLI0EVNvs6IfvScAtiDYs+UhjqkACUM
Ef1E1zXJa0DiORwlqDvVd1VfIFUEsi6H/JeFcOudZDpqKPWvjEzuBNNPFwqvBUHi
+fIq/M+B12s6j92TWjnct3vK0mRBvXLEgb30Bm8bAltQpB2bP63qakrs+wUk/De3
U1BoGAHemS8mBpLf13NkJ5Jf4AJOGSybucJugXhhN0PxBKts6kmDngIhzildAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZHJ2eNTYJNpxzfAlRdzXFr32n0kwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTMzMzYyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMx
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByIi2MA0GCSqGSIb3DQEBCwUAA4IBAQBs0YVyki8r
qoDX7dU4NQ3KVB+JASzZy2EJC1Xvk4+WUvZegNEM6HRzkIjJL8BkeyYS0hOyvmp1
i0HdtiPgki4VNYX+TMj48vNe2YfknNgEwUQe9pxsnfTCvz2LtLUpthOOOD/sM5D8
A7LL3kOgd9bClzo2/ByQ+nMSxU+Fl2voXAeXGTt+IDVz0Y7IErtm1aRwmIbZ4ggO
V28zXuFe8AWqFNfSkbr2Jx3jFTtM/haag2ulyAe3dT/hBrt9f5MixozGWtRoEqhZ
X3OmhWfnbkSqx1hOQNx4aLwdHna0q814X1/YA0N+t8HxTknJBNMtx7+ZCcP/RLpv
Bz2i4M/PSO/5
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:37:43 2026 by rpki-client