Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138342e302f32322d3234203d3e2031323531.roa
File:                     3230302e3133362e3138342e302f32322d3234203d3e2031323531.roa (raw, json)
Hash identifier:          9r8zKyNEYUObyFDk9pVCx8/LaQ4l3Vz2SPR/zsKTuSg=
Subject key identifier:   8B:36:5F:36:45:7C:B8:2D:D3:33:9F:0F:53:69:6D:D7:30:F1:BD:C2
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       3A30FE41EDF288AE050D3A816166F61DA0840818
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138342e302f32322d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:14 +0000
ROA not before:           Mon 14 Sep 2026 13:48:14 +0000
ROA not after:            Mon 13 Sep 2027 13:53:14 +0000
asID:                     1251
IP address blocks:        200.136.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:30:fe:41:ed:f2:88:ae:05:0d:3a:81:61:66:f6:1d:a0:84:08:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:14 2026 GMT
            Not After : Sep 13 13:53:14 2027 GMT
        Subject: CN=8B365F36457CB82DD3339F0F53696DD730F1BDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:c3:8b:ca:4b:97:d0:6d:1f:73:51:cc:22:
                    af:ff:28:93:e3:24:e1:3b:8a:8e:dc:13:82:a6:eb:
                    8e:03:62:6c:e9:db:dc:e0:67:f6:30:ed:aa:88:80:
                    0b:25:ee:c4:25:9a:bc:cc:ad:2a:76:de:cc:2f:a2:
                    e8:02:a3:3c:c2:52:ea:3e:4f:8b:d5:4e:2e:33:6f:
                    1f:d5:78:d0:65:84:61:e7:dc:e1:5d:3d:cc:f0:e3:
                    ec:ac:c1:23:97:1f:78:f1:52:d2:68:5d:2c:4c:5a:
                    7d:d8:e8:15:75:70:78:33:a8:a1:57:10:8a:47:6a:
                    df:56:a7:05:70:30:c0:df:b7:f5:ae:4e:8c:53:31:
                    31:5c:b7:2b:a0:ba:2c:f5:0f:a2:f7:dc:bd:25:b1:
                    49:86:10:a3:76:27:4c:79:cd:fd:d7:73:dc:9d:9a:
                    b9:5d:77:80:11:0c:59:cc:d7:96:9a:1f:c7:3e:f0:
                    49:fd:b7:96:35:84:43:54:07:a5:1d:8f:6d:f9:bd:
                    1c:14:8a:30:e8:59:88:9f:d8:52:61:6c:eb:21:91:
                    e3:5b:03:9f:4b:b1:91:c7:36:95:63:c0:cf:4e:8f:
                    0f:3f:a7:af:53:8f:54:e9:c9:d9:87:fc:9f:a9:9f:
                    a6:55:55:cf:b0:06:78:28:41:95:9d:cd:2f:65:04:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:36:5F:36:45:7C:B8:2D:D3:33:9F:0F:53:69:6D:D7:30:F1:BD:C2
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138342e302f32322d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:da:3d:7d:85:25:24:41:e1:56:94:ca:94:a6:ab:08:59:cd:
         55:da:83:ff:07:5e:d5:92:78:e2:32:26:2d:ec:37:43:a0:43:
         42:a6:0b:ff:0f:76:52:bf:0d:51:d3:89:ee:0a:2a:51:60:39:
         b6:8b:0f:6d:22:fd:16:89:57:67:b6:55:8a:5b:09:95:35:3f:
         73:0c:ad:73:60:5d:14:03:7e:a5:bb:7e:3d:e0:47:65:f9:fa:
         c6:db:a0:f9:11:73:a0:b6:8e:ae:db:d6:a3:d4:53:d9:70:99:
         3a:e5:b0:87:0e:d8:c7:97:46:93:14:22:a6:85:ba:3c:06:a5:
         a2:a7:b1:14:2f:0f:9d:c9:8d:55:65:9c:d7:f9:8d:e4:69:cc:
         5e:97:74:3b:60:80:f7:70:eb:a8:b8:da:00:40:55:11:66:04:
         77:88:4a:8e:ff:77:e6:bd:cf:6d:ea:76:e1:85:d6:e4:75:90:
         82:e1:7c:60:c9:33:d3:33:3f:89:2e:a1:ca:27:b5:95:ec:75:
         51:57:b8:30:db:a3:f5:2f:77:fc:ac:7f:28:f9:fd:39:49:84:
         a5:d6:76:e2:d3:a6:29:a2:12:3f:3d:26:c5:6d:82:bd:da:0b:
         14:84:48:bf:f4:76:d8:ee:26:53:da:77:45:25:e6:f5:c7:06:
         07:6e:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:28:05 2026 by rpki-client