Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138382e302f32342d3234203d3e2031393136.roa
File:                     3230302e3133362e3138382e302f32342d3234203d3e2031393136.roa (raw, json)
Hash identifier:          xO3CNgEbEkehcoBAsUAQ1NV9EJd7UP3EsCFsl1VIEn8=
Subject key identifier:   B5:23:61:CC:2E:E6:D8:4A:81:3D:04:21:38:30:68:F8:D1:38:1D:24
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       6C642DE99A48F69EC507C371EC3A87C8AE7BCC61
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138382e302f32342d3234203d3e2031393136.roa
Signing time:             Mon 13 Oct 2025 13:46:20 +0000
ROA not before:           Mon 13 Oct 2025 13:41:20 +0000
ROA not after:            Mon 12 Oct 2026 13:46:20 +0000
asID:                     1916
IP address blocks:        200.136.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:64:2d:e9:9a:48:f6:9e:c5:07:c3:71:ec:3a:87:c8:ae:7b:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:20 2025 GMT
            Not After : Oct 12 13:46:20 2026 GMT
        Subject: CN=B52361CC2EE6D84A813D0421383068F8D1381D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:d3:73:94:58:bb:c2:68:0f:9b:05:46:17:
                    e3:26:18:fb:af:ae:7b:72:b2:24:07:84:ff:24:ea:
                    db:fb:b7:20:11:05:b8:20:52:51:03:d6:a7:0b:62:
                    9f:bf:97:81:aa:2b:0e:c9:4d:3a:0c:9b:35:db:d3:
                    b0:a5:a5:57:67:09:e7:57:8b:7c:f9:8e:7d:66:9b:
                    fa:a2:22:02:6d:f1:f9:09:46:76:23:c9:38:1f:96:
                    18:94:b1:77:9d:3a:93:c5:46:54:54:99:e3:ca:b9:
                    b7:93:7b:cd:80:61:e6:31:8d:9e:8d:16:51:ce:f4:
                    86:33:99:b3:e6:77:b3:94:66:38:47:b3:58:cb:29:
                    3b:7f:a6:4d:ec:1e:8a:7e:ce:4b:5e:4b:9d:1e:39:
                    3e:20:da:c4:a8:66:6b:8c:99:c6:d8:39:f4:28:f6:
                    fe:6c:f4:e6:7d:23:d9:88:b5:e6:7d:a6:49:f5:55:
                    b4:e3:28:31:b4:61:1d:9f:e3:2e:fd:73:cf:dd:9b:
                    6a:cb:51:34:e2:7d:df:ec:d9:58:4e:73:b7:7a:8c:
                    d8:c0:97:b3:6d:ff:95:13:e7:3a:4f:41:2a:9f:a7:
                    e9:c8:92:66:71:39:32:90:de:9e:c4:de:4f:0d:72:
                    2b:27:16:9a:6d:00:b1:fd:73:20:b2:72:51:3d:96:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:23:61:CC:2E:E6:D8:4A:81:3D:04:21:38:30:68:F8:D1:38:1D:24
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3138382e302f32342d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:33:9c:7e:6a:3c:df:25:18:a0:48:72:eb:49:ff:16:65:18:
         b0:a1:05:60:4e:5e:9a:18:0e:51:4f:ce:09:e5:5f:80:20:1f:
         8f:e3:b7:fc:9c:51:4c:07:3e:87:44:6a:4d:92:1b:0f:9c:4f:
         a3:e8:d5:ab:11:b3:c2:a9:29:56:b2:d3:af:c5:72:9c:14:ee:
         47:b6:1c:cd:aa:30:36:fe:d0:3f:ed:d2:22:65:67:ed:57:cb:
         2f:de:ad:18:7e:b5:a7:c5:b3:25:7b:fe:3a:8d:1d:0f:7b:d8:
         54:3f:38:20:f7:2d:c3:e9:60:ea:ef:3f:aa:4f:c5:dd:ee:0e:
         da:b0:4c:22:ec:3e:74:d1:5d:78:53:d2:33:13:ec:36:07:46:
         7e:84:bf:9a:ba:e2:05:2b:65:13:dd:0e:9b:77:d0:7b:fc:81:
         5e:0e:11:a3:12:0f:d1:52:e7:2e:d8:65:8f:3a:dc:70:63:cc:
         1a:c5:5b:40:db:2a:08:cf:8f:bc:d7:33:34:88:84:d9:02:6b:
         be:89:66:cb:b7:ba:15:30:1e:e0:b2:68:4e:52:20:4c:09:7c:
         72:a4:dd:d8:3b:86:9b:70:39:eb:d7:b8:28:40:63:5a:c3:3f:
         9d:2b:1e:8e:05:fd:0e:fd:76:7d:6e:7d:30:a9:de:d0:9b:cc:
         39:53:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:07 2025 by rpki-client