Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e39362e302f32312d3234203d3e203532393932.roa
File:                     3230302e3133362e39362e302f32312d3234203d3e203532393932.roa (raw, json)
Hash identifier:          IqCCAVZLX/7phX6JlAmaOCuMyNKv04BsQzFdM+/q2Yc=
Subject key identifier:   44:1F:45:E1:05:A8:22:5E:69:D0:27:CC:7B:81:50:4D:17:DE:3C:AB
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       1E441D0478AA523993B36D876496C6B70406FEC0
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e39362e302f32312d3234203d3e203532393932.roa
Signing time:             Mon 14 Sep 2026 13:53:18 +0000
ROA not before:           Mon 14 Sep 2026 13:48:18 +0000
ROA not after:            Mon 13 Sep 2027 13:53:18 +0000
asID:                     52992
IP address blocks:        200.136.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:44:1d:04:78:aa:52:39:93:b3:6d:87:64:96:c6:b7:04:06:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:18 2026 GMT
            Not After : Sep 13 13:53:18 2027 GMT
        Subject: CN=441F45E105A8225E69D027CC7B81504D17DE3CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:a6:5d:be:16:ea:70:f9:be:5a:5f:67:fe:
                    36:34:a9:43:58:5b:2e:9f:2f:45:cc:d0:cd:37:85:
                    ea:22:cb:01:4c:13:86:04:07:2f:84:c4:6a:c0:22:
                    28:a0:ab:77:d0:4b:de:06:5f:8d:e5:18:39:dc:2b:
                    dd:0f:06:4d:58:b8:93:d9:0b:2c:3f:34:d3:ca:ef:
                    6d:55:e3:49:8f:80:cb:a0:1b:3b:90:09:f3:93:90:
                    41:47:11:c7:10:8f:5a:82:a1:43:d2:44:ee:4f:60:
                    94:7d:a3:23:22:cd:e6:83:be:f8:de:28:01:06:0a:
                    68:17:19:cf:e3:e2:1f:2c:0b:67:46:cd:6a:c6:76:
                    40:7a:25:17:e9:2e:f2:96:5c:f7:d2:43:1a:ff:ab:
                    ca:30:75:64:25:40:05:1d:84:d8:f9:46:12:cb:c5:
                    0f:bc:3d:6f:2d:24:ff:17:58:77:c9:a5:f4:b6:f4:
                    08:be:20:89:4d:11:00:07:39:5d:97:97:6c:20:ff:
                    b2:cd:e1:e3:3f:de:ea:2b:5a:5b:e8:31:51:b9:22:
                    33:94:75:24:69:98:df:fa:48:2e:bf:67:1a:9e:1e:
                    d3:9a:9f:70:c6:12:58:f2:79:84:90:0f:d1:d9:bc:
                    fb:82:58:7f:30:c9:79:a5:8e:ea:09:9b:8d:6f:ca:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:45:E1:05:A8:22:5E:69:D0:27:CC:7B:81:50:4D:17:DE:3C:AB
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e39362e302f32312d3234203d3e203532393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:bb:83:51:b2:21:e6:8d:71:f6:c2:c6:f7:3a:f5:61:94:
         3b:fa:e3:c5:ef:84:f7:72:0e:fc:42:f9:67:21:ac:5c:d8:da:
         8f:9b:60:b4:05:25:dd:5f:ca:fd:23:f3:56:13:52:cf:90:6c:
         1d:2b:8f:c8:c5:40:22:33:b1:5f:9d:e6:6f:0c:47:88:ce:ad:
         3d:8f:e3:38:9d:b2:4f:09:cc:e3:18:00:83:4d:ba:21:ee:8a:
         58:db:d5:d5:61:b5:bb:3e:07:fd:98:e9:46:ce:05:3b:bb:83:
         a5:cb:e1:70:4c:d1:31:fe:ea:e4:1c:a8:31:e5:d6:a3:f4:b1:
         bf:48:45:15:7b:b8:be:1d:5f:d5:18:91:23:0d:51:01:55:d6:
         b1:58:a4:b6:e7:44:fb:ca:40:c1:74:dc:cb:73:67:7c:2b:0f:
         74:bb:89:55:18:d7:17:82:27:48:79:01:b9:5a:8b:79:d3:2e:
         1f:4a:6e:7e:8c:06:39:22:5d:b4:62:d9:c2:61:4b:5f:89:b4:
         f4:9b:4d:d9:b3:39:f6:9d:e0:e1:3f:5a:a7:00:9d:f5:7f:2b:
         ff:e4:e3:15:7a:30:ba:80:81:e2:90:57:34:f6:13:22:ab:59:
         57:50:60:0a:8c:e5:a3:ca:05:c7:98:4f:8b:8b:b6:c7:e2:20:
         cf:8a:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:25 2026 by rpki-client