Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa
File:                     3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          gIIYkiWQmAqLo7O9ElrILG3UVC2a8MOzEJ+hp6Xk6Qs=
Subject key identifier:   31:4E:B8:15:F5:AF:05:55:83:88:2F:7F:08:8A:7C:6A:67:D1:0F:12
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       4D7695DBB01F9C1AEEC9B8C07E0DDAC8B034D3F3
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:17 +0000
ROA not before:           Mon 14 Sep 2026 13:48:17 +0000
ROA not after:            Mon 13 Sep 2027 13:53:17 +0000
asID:                     1251
IP address blocks:        200.144.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:76:95:db:b0:1f:9c:1a:ee:c9:b8:c0:7e:0d:da:c8:b0:34:d3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:17 2026 GMT
            Not After : Sep 13 13:53:17 2027 GMT
        Subject: CN=314EB815F5AF055583882F7F088A7C6A67D10F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:af:74:f7:e9:52:23:f0:4c:54:43:9d:9b:
                    b6:c6:0b:d8:ad:c1:db:e4:e2:82:99:63:3a:95:a4:
                    85:6f:03:57:50:19:d9:af:c6:b5:a7:35:0d:15:c6:
                    04:eb:ec:71:43:1a:03:6f:48:81:85:f1:c2:00:c2:
                    95:40:2c:8d:0f:36:5b:92:e1:1e:0b:77:a3:52:ca:
                    0e:b7:68:0d:66:08:ef:26:aa:c4:1f:0c:37:fe:02:
                    87:a5:aa:f6:26:18:48:6e:5c:39:15:7f:09:52:bd:
                    45:ca:f2:d7:f8:45:d4:36:cd:d1:00:ea:28:b1:73:
                    48:24:f2:25:f0:40:3b:23:1b:21:26:05:cc:d5:e7:
                    82:4c:99:0b:89:9f:9b:d3:a8:2a:36:e6:3d:19:35:
                    b8:12:db:27:3f:f3:aa:b4:bb:0c:95:0b:3f:5e:1f:
                    24:2b:3b:28:19:b7:7b:3d:44:be:b2:08:10:08:3d:
                    72:da:4c:8a:c5:4c:07:01:1d:26:d0:4d:e8:42:63:
                    c6:54:dd:9f:f1:55:c9:ad:dc:8a:ac:26:87:ae:55:
                    24:50:43:69:b2:06:99:83:4a:ff:8e:eb:46:ec:cb:
                    93:7f:af:24:d3:67:f9:78:ef:ea:82:0c:1b:6a:e5:
                    90:49:49:01:9f:9a:32:98:5e:51:a0:39:2c:ce:d4:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:B8:15:F5:AF:05:55:83:88:2F:7F:08:8A:7C:6A:67:D1:0F:12
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132302e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:f7:42:33:ee:4b:ff:d1:72:e9:49:f3:7b:57:65:e9:58:6f:
         c0:6e:c5:84:95:78:0a:91:cc:be:e4:9d:77:4e:80:8c:f4:c5:
         99:14:5d:27:5b:12:df:a5:24:cd:71:71:80:a5:5f:58:94:5d:
         ef:15:87:42:3a:88:2d:71:79:c9:0d:13:cb:9b:77:9d:76:6a:
         ed:e9:78:db:05:52:78:61:a4:38:f4:96:de:bb:bb:ca:4e:c4:
         04:47:fe:8a:cf:30:b8:d4:98:f7:bb:1d:26:e4:68:a9:ea:c1:
         81:18:e0:98:83:58:fd:19:1b:7a:79:0c:8b:1e:6d:7c:da:96:
         77:24:91:10:6b:43:e0:8c:fb:b4:a8:5e:c2:28:db:c5:5f:26:
         5a:c9:96:83:72:1c:0f:3d:d3:4f:fd:92:20:2e:15:28:46:b3:
         7f:1c:37:e0:ff:0d:2e:be:13:0d:8b:2a:53:78:b9:4d:9a:e8:
         40:21:f0:09:8f:42:66:4e:f4:e1:e3:39:93:47:aa:94:d3:3a:
         17:8d:75:2e:d0:cb:19:e2:90:4f:09:6b:21:cb:eb:22:d4:7c:
         2e:09:23:83:8f:9b:87:3d:f8:59:b5:8a:1a:7f:fc:71:7b:71:
         1a:ff:41:a2:ff:dd:47:8b:de:5a:0e:19:af:de:ae:d7:ae:d5:
         ff:3e:c9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:10:06 2026 by rpki-client