Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e34382e302f32342d3234203d3e2031323531.roa
File:                     3230302e3133362e34382e302f32342d3234203d3e2031323531.roa (raw, json)
Hash identifier:          gMO9WfYX7j15gKZvuhT5CMx7rIQ44Rl+LdpwI8z3eA4=
Subject key identifier:   6D:BE:E9:F0:D6:76:DA:EE:FE:6C:F7:06:7E:99:6D:06:4C:63:6A:DA
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       7067300D37A87BE4EF9B78F3EA516F4C162D6338
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e34382e302f32342d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:21 +0000
ROA not before:           Mon 13 Oct 2025 13:41:21 +0000
ROA not after:            Mon 12 Oct 2026 13:46:21 +0000
asID:                     1251
IP address blocks:        200.136.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:30:0d:37:a8:7b:e4:ef:9b:78:f3:ea:51:6f:4c:16:2d:63:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:21 2025 GMT
            Not After : Oct 12 13:46:21 2026 GMT
        Subject: CN=6DBEE9F0D676DAEEFE6CF7067E996D064C636ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:1d:26:c6:75:6b:e9:65:af:7e:19:8a:2b:
                    20:78:5e:86:1d:6c:c5:6b:ac:88:01:6b:ca:85:f2:
                    dd:b2:64:88:81:d2:08:96:d4:7f:09:01:21:3c:6e:
                    95:95:73:0c:52:fd:28:f7:e8:e3:a7:0d:e0:ef:c7:
                    99:c4:21:24:b4:f8:ca:ab:20:8b:ec:50:63:ef:b2:
                    40:29:f6:4b:d8:5e:53:7f:1d:e4:07:02:21:e8:46:
                    fe:4e:d5:57:1d:84:75:97:b6:48:ca:b8:07:cc:f2:
                    44:ba:6c:8c:b2:7a:90:c1:08:9a:4b:b3:cf:60:af:
                    27:c4:c6:ad:56:49:68:ba:11:30:70:fe:2e:ea:1e:
                    39:4b:b2:38:18:9d:fd:b5:2b:8c:32:a4:88:b8:49:
                    74:38:60:76:2c:7c:29:99:38:ba:97:eb:4b:71:e8:
                    43:6e:e1:7d:9f:f1:81:30:40:d2:1a:56:da:ea:a6:
                    ae:4a:d0:bc:2b:59:49:af:73:cd:79:38:2f:5d:68:
                    83:59:50:2d:d3:9f:e8:66:6c:de:45:7f:6e:c9:e7:
                    53:e9:e9:3a:d4:21:29:6b:0e:5c:41:69:b7:75:e0:
                    1e:23:95:8d:12:3e:1b:db:a7:4d:dc:d1:fe:35:b7:
                    c9:d7:ad:30:97:90:b1:b1:61:69:cd:6e:ae:91:04:
                    24:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BE:E9:F0:D6:76:DA:EE:FE:6C:F7:06:7E:99:6D:06:4C:63:6A:DA
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e34382e302f32342d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:39:f6:fa:7a:38:9a:74:60:ea:3e:d9:fa:e6:9f:ed:d5:
         7f:9b:d0:e4:fd:d7:56:ac:d0:8b:60:e0:f9:cb:6e:76:d1:6a:
         3d:6f:2f:ac:25:48:a9:12:db:e1:fb:90:68:ca:bc:33:87:86:
         b9:76:5c:0c:bb:ca:90:9b:3a:09:0e:7a:7c:6d:09:b0:ba:63:
         06:4b:8c:4a:70:47:f1:bc:be:5d:d6:6b:79:51:ed:29:95:43:
         58:d9:e5:c0:a6:ba:19:12:f9:0c:92:a1:08:60:f9:b7:eb:aa:
         f5:41:ec:c5:86:77:9b:03:ef:ad:92:c1:55:a7:cb:6a:aa:5b:
         19:f8:df:8d:4b:e6:ab:3a:4f:91:4f:fe:6d:62:cd:88:0c:c0:
         3f:aa:33:f2:32:68:b8:57:c7:c1:31:d6:5b:e7:95:f2:55:9d:
         4f:68:26:d8:8a:8f:67:8e:ef:9c:39:d5:42:14:06:4c:e9:d7:
         21:8c:e2:b5:69:c0:6c:80:63:e0:6d:f0:63:1b:e7:b2:7f:74:
         d5:45:24:5b:b8:ca:6f:5d:fe:c2:a9:66:ce:be:69:a1:fc:eb:
         1a:d8:e6:05:5f:8c:16:08:de:cb:58:9b:d2:8a:2b:8a:53:d4:
         5f:48:7b:dd:ef:59:36:70:8e:be:10:08:ba:1b:ae:97:2c:ed:
         87:3d:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:14 2025 by rpki-client