Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35302e302f32332d3234203d3e2031323531.roa
File:                     3230302e3133362e35302e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          WTuDkZkYL/hQ6H1FFGzmra/oCXsSw/Po5UmtLfb+CYM=
Subject key identifier:   2A:84:36:19:23:B9:AD:17:1D:F6:A1:1F:B7:1D:A3:39:1D:56:59:E7
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       30DFA622BABA5991B1F9CEF8C078B9FAAFBB6487
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35302e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:27 +0000
ROA not before:           Mon 13 Oct 2025 13:41:27 +0000
ROA not after:            Mon 12 Oct 2026 13:46:27 +0000
asID:                     1251
IP address blocks:        200.136.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:df:a6:22:ba:ba:59:91:b1:f9:ce:f8:c0:78:b9:fa:af:bb:64:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:27 2025 GMT
            Not After : Oct 12 13:46:27 2026 GMT
        Subject: CN=2A84361923B9AD171DF6A11FB71DA3391D5659E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:26:a7:68:19:62:0a:76:0c:5c:d4:34:1b:
                    57:27:37:c3:57:aa:3e:fa:ce:dd:de:63:c7:65:0d:
                    f3:9b:68:19:55:b0:c7:4e:a4:56:79:97:06:b5:4d:
                    84:86:08:09:7f:26:b1:d0:67:a4:d0:3b:e6:19:56:
                    30:48:97:98:ad:e3:42:7a:e2:86:6a:71:4c:ed:dd:
                    31:37:fd:fa:dc:ea:9a:10:d6:f3:c9:b2:de:91:77:
                    ab:06:47:10:00:13:91:0b:db:1b:88:d3:ee:e2:ec:
                    07:31:89:16:b1:90:fd:ea:1e:9b:94:5a:f5:12:49:
                    fe:64:65:85:1d:41:8f:7d:0b:2e:6d:86:7f:48:6b:
                    98:ca:95:55:bf:16:43:7a:38:9e:06:0c:4b:d8:be:
                    8b:40:84:1f:45:05:4e:f1:91:bf:30:6c:96:6f:6d:
                    36:87:0d:f4:3f:50:68:c6:99:72:ee:a6:1c:1e:71:
                    1e:03:28:55:9d:d6:ec:b5:f1:bf:db:a7:2b:fb:38:
                    be:b6:0d:4e:2a:7f:32:3d:e4:1f:67:ff:12:87:64:
                    d5:0d:a2:59:79:48:60:f2:3d:4d:ba:76:65:89:86:
                    1e:13:38:ca:5f:99:4c:5d:df:0a:4a:01:d2:9c:94:
                    c1:72:83:65:d1:5e:8d:70:a2:ab:a8:b3:f6:bd:c0:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:36:19:23:B9:AD:17:1D:F6:A1:1F:B7:1D:A3:39:1D:56:59:E7
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35302e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:a6:c9:c0:69:b9:7b:85:b2:58:78:f8:9c:57:fa:55:d5:
         6d:87:f6:cb:03:20:fb:4c:9e:28:3e:71:75:52:e8:27:ed:32:
         e6:e3:8b:ef:b6:f8:cd:4f:8c:07:7f:6f:bc:ee:e5:8d:3b:fd:
         fb:a8:8d:b1:11:59:11:5b:c8:5b:15:17:00:05:c7:71:86:3b:
         d9:c7:81:0b:92:07:1c:7e:62:1f:09:e4:12:c0:a8:60:cd:ca:
         f8:90:4f:d6:08:f9:d8:42:02:39:2d:00:58:f3:c4:bf:de:f4:
         f4:cb:56:5b:4c:d8:df:a8:7a:3e:23:7f:a1:77:a5:b2:b2:34:
         7c:28:38:f5:08:30:76:86:f5:fd:d8:f0:7a:03:1d:d7:cd:a1:
         65:60:5c:75:07:bf:5a:9c:9c:9b:05:a3:5b:ad:42:bd:28:f1:
         6f:03:64:b1:b6:29:76:9b:4d:f3:b1:8b:95:ef:b4:d6:0f:28:
         73:01:89:78:e8:2d:5b:27:13:55:db:ca:6e:53:b5:1e:0e:3c:
         bc:b2:af:b5:a7:27:ba:c3:f9:b4:1f:ed:e4:b8:9c:87:86:26:
         18:5e:ab:9b:f7:cd:54:9e:ef:76:9c:4d:73:4d:2c:e7:55:b3:
         8c:aa:56:1f:7c:20:2f:b9:a3:15:a9:fe:f1:3c:60:86:e6:33:
         c3:cd:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:51 2025 by rpki-client