Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa
File:                     3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          V28LuDyK9CX0+PckBV3TlJgyZmMMjqxzbIAq8jv2CLI=
Subject key identifier:   45:9C:79:7B:90:18:84:52:35:E1:8E:32:FD:F4:23:B4:73:36:43:E3
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       1E640203CD0CC57416C94C7A72ECB156FF72CB1F
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:28 +0000
ROA not before:           Mon 13 Oct 2025 13:41:28 +0000
ROA not after:            Mon 12 Oct 2026 13:46:28 +0000
asID:                     1251
IP address blocks:        200.136.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:64:02:03:cd:0c:c5:74:16:c9:4c:7a:72:ec:b1:56:ff:72:cb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:28 2025 GMT
            Not After : Oct 12 13:46:28 2026 GMT
        Subject: CN=459C797B9018845235E18E32FDF423B4733643E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:73:ab:40:43:ef:da:20:4d:52:47:41:85:
                    ab:f0:af:66:c6:89:12:b9:ba:04:33:6b:0b:87:06:
                    70:87:9c:a3:8e:9b:e7:a9:1d:58:e6:3a:b8:6e:dd:
                    4b:35:04:35:0d:ee:2b:99:56:52:09:56:3b:d7:de:
                    1e:ec:eb:d9:72:1c:fd:6b:b2:3c:f2:0b:59:30:cf:
                    6e:82:bd:9e:7a:cf:39:99:9c:08:2a:2b:4b:a2:b6:
                    8e:5c:52:b4:1c:81:dd:89:e0:d5:a1:3c:a6:2f:a8:
                    9a:3b:25:72:4a:cf:e0:52:d4:dc:7a:d3:12:fb:7f:
                    05:8e:4f:59:55:4f:b5:97:9f:83:a3:b4:e6:ac:b0:
                    fe:bd:14:d1:ae:09:1d:a2:ca:26:b1:22:07:7b:58:
                    21:4e:5c:40:78:ea:75:78:6b:76:89:95:f5:d3:e7:
                    d2:2c:28:fd:ee:d2:ed:e2:c0:c6:42:d3:72:ad:55:
                    9e:2f:59:f8:c2:13:0a:9d:e7:df:15:85:d2:0c:b2:
                    2d:7b:dc:85:4b:b3:b0:76:f3:43:d6:e8:a8:73:fc:
                    39:b1:58:39:33:b4:74:21:a6:8c:5f:d3:1a:69:6e:
                    a3:59:75:44:20:ac:9e:d7:38:c6:01:b6:a8:fd:b3:
                    98:47:06:22:6c:4a:08:f2:03:b8:3c:a6:4b:42:49:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:79:7B:90:18:84:52:35:E1:8E:32:FD:F4:23:B4:73:36:43:E3
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138322e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:ab:91:ca:77:aa:4b:a4:2f:ed:83:94:cb:c6:c5:b0:22:
         1e:96:61:bc:a2:b6:12:bf:d3:9f:86:2c:26:77:37:2e:b1:89:
         87:8f:6c:be:c0:a1:89:30:67:ea:fd:b6:e6:f4:c3:25:8d:8e:
         82:76:55:49:d1:86:1a:1f:88:d7:99:de:b4:44:ba:cf:19:16:
         2d:ff:90:56:27:96:48:5b:c6:1a:8a:48:2a:ed:22:17:ef:79:
         48:46:ee:f3:36:07:7a:a9:4d:46:2d:eb:4e:65:88:72:98:7f:
         9a:91:2d:f9:34:9a:1c:d6:5e:6f:9b:c9:49:df:73:01:26:3f:
         ad:f1:25:b2:56:24:7a:0b:92:03:95:6b:99:a0:d6:10:da:82:
         5c:d5:ba:67:c2:45:8f:c0:bf:cc:98:19:22:fc:2a:87:ff:a4:
         19:98:af:a5:fc:fb:12:9e:fc:d2:f6:9e:ec:3a:91:ff:94:42:
         31:d6:4d:38:48:f4:03:06:92:8d:b2:3c:f9:4e:a9:13:f9:3c:
         1f:b1:df:41:cb:e1:2a:0a:fe:2a:70:d1:9e:58:bc:df:82:9b:
         3d:b7:9e:c5:3d:a4:66:3f:52:47:55:d3:ad:c8:99:fd:ee:7e:
         2d:fc:19:6b:a6:ca:c0:f5:b0:a7:d7:04:b8:6c:40:0a:2b:47:
         2f:d1:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:16 2025 by rpki-client