Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35322e302f32332d3234203d3e203238353731.roa
File:                     3230302e3133362e35322e302f32332d3234203d3e203238353731.roa (raw, json)
Hash identifier:          XehP8gqguchTbwh2WmNFseYrcTXVjdeBHR+JqhxDFRc=
Subject key identifier:   44:8D:F4:E7:EA:CF:A2:AB:A1:15:E7:44:E3:F1:E3:83:95:9C:96:14
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       664E8356AB0CD84BEFFB42B5ADB6475180BDEA53
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35322e302f32332d3234203d3e203238353731.roa
Signing time:             Mon 13 Oct 2025 13:46:30 +0000
ROA not before:           Mon 13 Oct 2025 13:41:30 +0000
ROA not after:            Mon 12 Oct 2026 13:46:30 +0000
asID:                     28571
IP address blocks:        200.136.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4e:83:56:ab:0c:d8:4b:ef:fb:42:b5:ad:b6:47:51:80:bd:ea:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:30 2025 GMT
            Not After : Oct 12 13:46:30 2026 GMT
        Subject: CN=448DF4E7EACFA2ABA115E744E3F1E383959C9614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:93:15:ac:97:c6:0e:97:19:22:93:07:92:
                    16:80:54:03:8c:50:24:65:61:8a:33:ef:6e:08:65:
                    38:f6:83:89:f9:7b:f7:2f:b8:29:b8:8f:4a:31:29:
                    ab:7e:d5:d9:36:7e:5b:76:65:c5:cc:12:97:0a:2c:
                    9c:9f:e6:5a:22:cc:66:0c:bc:9a:58:be:9f:6c:a1:
                    f9:5d:b7:5b:eb:96:ed:34:66:21:c6:95:43:34:ed:
                    f3:96:84:68:4d:4f:13:8d:93:5d:16:18:9b:4b:11:
                    04:93:7f:f6:7f:05:e6:6b:3f:4c:11:54:35:e1:9d:
                    55:76:ca:c9:d4:10:af:03:1f:25:99:29:3c:9c:57:
                    b5:3a:20:5f:cb:4b:72:75:8e:1d:2b:4d:4f:a5:54:
                    e7:15:b6:72:e2:16:23:e7:f8:2c:3c:42:1c:88:64:
                    20:70:4d:e1:61:74:ac:2a:3e:80:68:72:f5:b3:5f:
                    4b:3b:66:76:b1:9b:23:bd:ed:25:ba:1d:95:6f:59:
                    1a:97:bb:4d:d9:63:fa:ff:b9:2a:fe:0e:a7:49:5a:
                    ad:41:f1:e6:93:cf:1d:1a:56:11:82:08:a2:4a:f5:
                    7d:20:4b:2e:35:5b:41:fa:85:37:3c:17:d0:43:8a:
                    82:3f:53:89:3f:d4:b9:3d:e8:32:98:29:3d:3e:70:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:F4:E7:EA:CF:A2:AB:A1:15:E7:44:E3:F1:E3:83:95:9C:96:14
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35322e302f32332d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:64:4d:5c:ab:00:ba:99:4a:22:35:4c:c7:19:c6:27:2a:62:
         16:2d:ae:a3:97:1a:fd:39:5f:04:26:b1:ea:d9:5e:2b:31:b4:
         08:3c:c4:5a:3e:db:bf:ac:a8:6a:73:b7:a7:93:2c:15:42:cd:
         0b:ec:3b:94:08:2a:71:3a:a9:da:98:d8:37:51:96:fa:54:63:
         c7:32:ca:eb:96:0d:09:ce:a5:5b:ca:0f:a5:c0:11:1f:af:56:
         51:99:40:49:2a:12:50:58:bf:1a:40:99:5e:7e:97:4a:6a:92:
         1c:85:ff:4d:02:5f:ff:74:dc:82:8a:07:97:8f:db:6d:8e:32:
         13:89:9e:d3:07:2e:25:30:21:71:10:63:c5:4e:84:9d:4b:41:
         81:78:2c:e8:64:80:d8:04:c4:85:70:0f:48:ef:0b:87:d0:4f:
         b4:c9:b7:b7:a4:6c:01:5c:dc:f5:77:67:98:5c:93:73:3e:c2:
         72:5f:24:67:be:25:26:64:2f:82:cb:f3:f3:d8:a4:2d:97:5a:
         a2:53:de:6e:f9:c8:a9:08:b4:28:ff:79:ed:45:31:ca:73:d9:
         28:6d:5f:98:80:d9:77:dc:11:fa:2b:4e:38:11:63:58:61:ad:
         ed:63:de:bd:7c:c3:f2:95:68:ca:0b:c5:3b:28:05:3f:fd:6b:
         19:66:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:57 2025 by rpki-client