Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e38302e302f32302d3234203d3e2031323531.roa
File:                     3230302e3133362e38302e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier:          o7jmz5il/h6qTW8u90cszZL6VY8qN2rz01HlAyMadtg=
Subject key identifier:   31:F1:1E:8A:1C:55:ED:A9:3F:B2:B3:FF:54:EA:3F:4E:E0:3D:8B:79
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       53794296CD6E819664877EEE3175818230D319AE
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e38302e302f32302d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:23 +0000
ROA not before:           Mon 13 Oct 2025 13:41:23 +0000
ROA not after:            Mon 12 Oct 2026 13:46:23 +0000
asID:                     1251
IP address blocks:        200.136.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:79:42:96:cd:6e:81:96:64:87:7e:ee:31:75:81:82:30:d3:19:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:23 2025 GMT
            Not After : Oct 12 13:46:23 2026 GMT
        Subject: CN=31F11E8A1C55EDA93FB2B3FF54EA3F4EE03D8B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:2e:36:5c:8a:21:48:80:f8:85:45:fe:b6:
                    58:b0:9e:3a:4e:15:9c:00:d0:e5:d8:60:8f:06:f8:
                    c2:85:13:a5:2a:60:51:93:c8:90:d0:dd:fa:3f:95:
                    7a:8c:fb:af:db:58:a5:19:88:32:9d:9f:2e:4b:29:
                    f6:8a:c6:80:f4:53:83:89:e7:7d:c6:42:f2:0d:73:
                    cb:95:85:a3:6c:f0:a8:60:1c:bb:7d:16:a7:38:82:
                    51:e4:ff:7b:06:02:b2:66:b2:f7:29:18:2e:b6:60:
                    23:45:3d:21:0a:f7:9c:d8:6c:95:d0:c9:4d:4d:59:
                    78:4a:06:0b:da:83:2f:25:22:e7:4d:70:a7:ec:d1:
                    cb:aa:33:a5:d4:32:a2:84:fc:39:4b:df:da:df:30:
                    db:1b:40:6d:85:ac:7a:eb:a7:04:7c:eb:0e:77:37:
                    6d:62:1f:34:04:eb:3a:b2:08:ba:6b:dc:b4:6a:89:
                    d0:a6:6d:06:45:94:ed:48:94:cd:e1:ee:76:1f:72:
                    f7:cb:70:24:5d:21:86:34:00:cd:7c:8b:29:fc:22:
                    29:27:26:dd:13:d4:5f:62:c8:f8:de:65:03:74:c1:
                    f3:5b:62:b8:42:84:90:4b:8d:da:69:29:6c:d8:ae:
                    e9:b2:61:d1:fc:be:e1:8c:2d:8f:4b:51:01:b8:ef:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:1E:8A:1C:55:ED:A9:3F:B2:B3:FF:54:EA:3F:4E:E0:3D:8B:79
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e38302e302f32302d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:c6:19:8a:84:aa:c5:6d:52:2a:05:75:03:cc:14:4c:4f:
         13:f4:28:85:5b:8b:b1:07:95:e3:ca:d7:2e:b4:68:fa:96:98:
         ea:3c:0c:7a:a2:0a:9b:e9:69:de:29:c1:db:80:e8:f5:1a:19:
         d1:10:ff:64:47:6f:84:86:eb:aa:8e:c3:51:32:3a:05:79:91:
         17:33:ca:17:cb:7b:a4:9a:ed:1d:c3:82:f6:e6:16:58:31:6a:
         a3:64:ec:bb:f7:0c:a3:57:30:01:c1:84:62:61:57:f7:4f:a2:
         72:68:59:39:e4:48:e1:cb:48:44:8e:89:96:35:a9:25:15:53:
         7a:d8:d0:55:a1:e0:5e:e5:c1:e6:d8:fa:35:d7:cb:e8:e2:dd:
         31:6b:b6:ea:e7:a7:28:71:e5:cf:a7:c4:be:5c:67:d9:34:ef:
         96:b2:45:06:50:91:46:3f:29:f9:6c:d4:76:d5:eb:92:10:36:
         63:c4:26:fe:2d:fd:43:80:95:e3:e0:fa:bd:0d:c1:06:a0:c1:
         47:8c:41:94:0d:22:44:0b:6b:ee:92:c4:dc:6a:55:48:91:49:
         e6:30:73:7b:fc:bf:27:b4:1d:40:2d:6e:77:7e:b6:57:bb:a8:
         96:a1:77:b2:27:e2:a4:c6:12:af:71:a2:4e:20:b0:79:6f:f3:
         91:82:eb:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUU3lCls1ugZZkh37uMXWBgjDTGa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNTEwMTMxMzQxMjNaFw0yNjEwMTIxMzQ2MjNaMDMxMTAvBgNV
BAMTKDMxRjExRThBMUM1NUVEQTkzRkIyQjNGRjU0RUEzRjRFRTAzRDhCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeri42XIohSID4hUX+tliwnjpO
FZwA0OXYYI8G+MKFE6UqYFGTyJDQ3fo/lXqM+6/bWKUZiDKdny5LKfaKxoD0U4OJ
533GQvINc8uVhaNs8KhgHLt9Fqc4glHk/3sGArJmsvcpGC62YCNFPSEK95zYbJXQ
yU1NWXhKBgvagy8lIudNcKfs0cuqM6XUMqKE/DlL39rfMNsbQG2FrHrrpwR86w53
N21iHzQE6zqyCLpr3LRqidCmbQZFlO1IlM3h7nYfcvfLcCRdIYY0AM18iyn8Iikn
Jt0T1F9iyPjeZQN0wfNbYrhChJBLjdppKWzYrumyYdH8vuGMLY9LUQG475oDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMfEeihxV7ak/srP/VOo/TuA9i3kwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTMzMzYyZTM4MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTMy
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMiIUDANBgkqhkiG9w0BAQsFAAOCAQEAfo7GGYqEqsVt
UioFdQPMFExPE/QohVuLsQeV48rXLrRo+paY6jwMeqIKm+lp3inB24Do9RoZ0RD/
ZEdvhIbrqo7DUTI6BXmRFzPKF8t7pJrtHcOC9uYWWDFqo2Tsu/cMo1cwAcGEYmFX
90+icmhZOeRI4ctIRI6JljWpJRVTetjQVaHgXuXB5tj6NdfL6OLdMWu26uenKHHl
z6fEvlxn2TTvlrJFBlCRRj8p+WzUdtXrkhA2Y8Qm/i39Q4CV4+D6vQ3BBqDBR4xB
lA0iRAtr7pLE3GpVSJFJ5jBze/y/J7QdQC1ud362V7uolqF3sifipMYSr3GiTiCw
eW/zkYLr2w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:04:06 2025 by rpki-client