Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e33322e302f32302d3234203d3e2031323531.roa
File:                     3230302e3133362e33322e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier:          1XhWp+nNaYs0PJVNsoYwZhHEjgVwjvD0YNlCOo8/rGc=
Subject key identifier:   F4:F3:86:5C:52:F2:97:74:0E:03:8A:AF:4F:AF:63:04:4F:29:86:6A
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       440ED52B4943207E658DE01980E3B76FF74092E5
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e33322e302f32302d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:07 +0000
ROA not before:           Mon 14 Sep 2026 13:48:07 +0000
ROA not after:            Mon 13 Sep 2027 13:53:07 +0000
asID:                     1251
IP address blocks:        200.136.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0e:d5:2b:49:43:20:7e:65:8d:e0:19:80:e3:b7:6f:f7:40:92:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:07 2026 GMT
            Not After : Sep 13 13:53:07 2027 GMT
        Subject: CN=F4F3865C52F297740E038AAF4FAF63044F29866A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:0b:60:68:07:98:9e:19:57:5a:de:c8:18:
                    fd:c0:ba:06:2a:6c:1a:e5:59:92:62:90:46:a8:fb:
                    e1:36:d1:f2:92:6d:4b:70:1c:d2:25:a5:91:0f:24:
                    22:81:e0:1b:01:98:e3:c4:24:22:93:99:4e:02:fe:
                    86:cd:6f:05:05:8e:80:e0:25:42:7d:3c:ca:e8:5d:
                    2a:1b:5d:45:c0:0f:c5:ac:25:12:40:ea:ee:67:94:
                    f2:61:e4:69:ad:e9:08:42:8c:51:49:3b:6a:ed:42:
                    54:de:00:86:0a:8f:6c:fa:00:2c:c1:00:6f:20:c8:
                    3f:db:d2:ab:44:3d:6c:84:a0:88:47:26:bd:96:32:
                    60:5a:45:57:10:46:78:ab:2c:69:32:68:57:b4:b8:
                    27:86:70:a4:d9:5f:58:14:23:ce:5b:ae:6f:c1:6b:
                    ec:1d:f5:15:93:1d:be:5c:12:86:99:d9:a4:d3:23:
                    fd:20:b5:9a:49:78:d8:07:ad:bb:89:11:95:d6:1c:
                    16:78:9a:0d:6e:fa:e8:37:d3:a1:0d:d9:df:d8:c5:
                    d6:1e:5b:25:07:eb:76:5c:f4:22:63:0d:bf:f3:8d:
                    b5:8e:e3:14:b3:a0:3a:a2:8c:be:7f:2d:0e:6a:a0:
                    bd:bf:bb:0e:9f:04:59:43:1d:ea:55:7e:eb:69:2d:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:86:5C:52:F2:97:74:0E:03:8A:AF:4F:AF:63:04:4F:29:86:6A
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e33322e302f32302d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:1f:2c:2f:49:dc:f8:9d:6e:35:ae:82:1d:c7:e7:13:9f:
         ee:9c:c1:a2:63:63:d1:57:33:7d:f1:82:1c:05:52:66:52:ef:
         65:60:49:9f:0d:89:7e:15:dc:7b:c1:b1:94:6f:12:0e:ab:8b:
         7c:f1:4c:22:76:f8:dc:66:c9:0d:b6:f9:35:34:59:32:e0:71:
         43:02:10:2c:e0:27:95:80:c2:7d:e2:f5:45:9e:42:e9:87:ca:
         00:1f:13:c4:80:a2:06:fa:b8:76:6d:df:9e:88:8a:b4:4e:47:
         78:fa:b2:63:1c:e8:3d:fc:de:26:0a:d8:91:5b:aa:95:ac:44:
         14:c1:5b:23:4f:93:bc:84:21:a3:37:a1:6f:d2:74:d3:99:d6:
         e3:64:28:39:39:b9:dc:37:30:10:e9:66:a8:a3:69:37:59:d5:
         c2:96:fe:f5:19:1f:a7:c9:81:c1:81:ca:0e:b0:5e:2a:0e:30:
         4a:2a:20:7c:59:e3:34:87:4e:aa:85:6a:0d:b9:0d:de:b0:43:
         f2:85:4b:15:05:c9:00:6b:34:b2:ad:47:e4:f3:80:38:52:ff:
         1a:82:49:47:6a:9e:84:66:2e:72:ff:b7:c5:e8:01:20:71:b4:
         0b:a0:cc:9c:1a:c5:ca:a8:25:d6:32:2c:4c:4c:49:1c:11:6b:
         3a:5f:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:01:00 2026 by rpki-client