Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35362e302f32312d3234203d3e2031323531.roa
File:                     3230302e3133362e35362e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          /3Qgh3nRpeBm2+pR7J9TbBhdCiXcEx7eZhe5wQlAGGY=
Subject key identifier:   92:C0:18:CF:C8:52:6F:D1:6E:30:B9:84:B4:14:32:2C:9C:AA:9C:ED
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       75279E106ED122515D0D591E00D53606B8888B6C
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35362e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:15 +0000
ROA not before:           Mon 14 Sep 2026 13:48:15 +0000
ROA not after:            Mon 13 Sep 2027 13:53:15 +0000
asID:                     1251
IP address blocks:        200.136.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:27:9e:10:6e:d1:22:51:5d:0d:59:1e:00:d5:36:06:b8:88:8b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:15 2026 GMT
            Not After : Sep 13 13:53:15 2027 GMT
        Subject: CN=92C018CFC8526FD16E30B984B414322C9CAA9CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:ef:9c:4a:7f:9e:3b:32:61:2e:5f:15:f2:
                    8c:ab:44:ef:74:bc:f8:93:5d:3e:b0:a8:1b:aa:84:
                    57:3e:69:d8:ca:19:97:99:a2:d7:fe:1b:f0:b6:f1:
                    84:7f:16:ed:91:f2:b1:43:e7:9e:96:05:e5:f3:0f:
                    08:27:2a:51:1d:dc:1f:4c:21:c5:0e:be:5b:7e:47:
                    6a:d3:02:41:d8:b7:3e:bc:00:a4:10:82:3a:86:49:
                    31:bf:28:bd:03:28:5b:ad:0d:21:c7:da:63:7c:47:
                    01:44:a1:9b:d0:10:ff:e8:9d:35:2a:93:4a:a0:06:
                    66:cd:9a:ef:c1:34:d8:1f:67:26:42:11:a8:f6:fa:
                    54:60:26:67:99:56:dc:28:06:f3:3f:d3:b9:d3:c6:
                    73:20:a3:ba:fc:7b:53:6d:e2:5b:93:69:66:fd:98:
                    4a:8c:1f:c7:af:27:43:e3:4b:a7:ee:31:44:f4:c3:
                    a2:5b:db:56:79:11:92:61:54:c8:3f:a7:31:f7:04:
                    14:e7:1a:5a:44:8e:ba:c2:59:45:fe:f7:23:6e:9e:
                    31:83:40:bd:c6:c2:3e:77:38:91:36:4c:d9:48:80:
                    11:52:2e:69:3d:a2:45:d5:50:3a:09:26:2f:33:85:
                    67:de:11:3a:df:9f:c3:0a:b1:eb:bb:8d:4a:d2:53:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:18:CF:C8:52:6F:D1:6E:30:B9:84:B4:14:32:2C:9C:AA:9C:ED
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e35362e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:96:0c:55:54:76:b8:b1:28:5f:10:46:e3:ab:2b:b9:ce:
         dc:12:6a:2c:45:00:1b:45:99:1e:2d:31:23:cb:2f:e0:64:19:
         26:73:01:96:b3:fb:26:f5:c6:ed:17:55:ff:41:ea:42:77:5d:
         21:c1:fa:5d:3e:80:8b:79:0c:ff:73:25:7d:28:c4:f6:f1:df:
         2d:32:a1:8a:b5:90:29:32:2f:96:11:12:cb:f4:f2:51:7d:61:
         38:e8:51:61:4e:03:d7:70:9f:be:c5:84:9c:4b:83:03:7a:d2:
         41:2a:37:bd:f2:72:81:19:3d:cd:a5:65:9f:1c:3a:51:59:99:
         ad:2f:2e:cd:45:bf:a0:9d:a3:ea:17:7f:7b:bf:78:fb:60:14:
         75:4c:52:3f:e4:b6:5e:84:9b:66:b1:e6:75:66:b0:8f:13:4b:
         67:d3:62:7a:a4:b5:4f:4f:6c:a1:0a:0d:37:57:fd:03:8b:e2:
         0c:61:78:2e:2a:ba:33:2e:b8:dc:28:44:3e:3c:1c:15:03:25:
         d0:16:7a:b3:37:48:63:2f:22:00:72:17:50:3f:ad:25:9d:32:
         35:b9:55:ae:f3:33:cf:41:f9:ae:5d:99:b9:d7:91:4d:dd:e8:
         1e:c4:51:2c:0f:6b:a9:b8:ee:1f:8a:4b:f5:a9:b8:ff:99:80:
         03:17:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:03:23 2026 by rpki-client