Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132382e302f32302d3234203d3e2031323531.roa
File:                     3230302e3134342e3132382e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier:          f1E6lPbSmgGk7hHqNPNTe8THufB1HA4wwy1hoCTMCXE=
Subject key identifier:   83:FB:DE:58:07:A6:D1:98:98:0F:2C:97:53:07:77:5D:0D:66:BB:7A
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       5CA19183A3B6D03976019E7D0E42870AB4E53D78
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132382e302f32302d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:31 +0000
ROA not before:           Mon 13 Oct 2025 13:41:31 +0000
ROA not after:            Mon 12 Oct 2026 13:46:31 +0000
asID:                     1251
IP address blocks:        200.144.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a1:91:83:a3:b6:d0:39:76:01:9e:7d:0e:42:87:0a:b4:e5:3d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:31 2025 GMT
            Not After : Oct 12 13:46:31 2026 GMT
        Subject: CN=83FBDE5807A6D198980F2C975307775D0D66BB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:b8:77:28:7b:de:15:13:41:ba:33:be:1c:
                    14:2c:3c:b8:4a:2a:c3:1d:b3:68:3d:83:97:1c:46:
                    c7:2e:05:9b:b2:c2:f1:c5:ad:d2:69:1a:56:03:7b:
                    bf:ed:a7:bb:92:e6:e2:d9:39:3f:de:cc:0f:4f:18:
                    3a:8c:61:6c:45:41:c3:37:25:2a:f2:fd:31:13:34:
                    91:01:b9:e2:40:06:c7:23:76:fa:7a:87:03:a3:3d:
                    7e:87:4b:44:2b:2e:ea:d2:b3:f5:e7:ed:c6:fa:2c:
                    79:62:f2:d4:5c:48:5a:71:63:cb:b5:77:f6:ab:c1:
                    ee:9f:3d:f8:57:2a:58:58:bb:ef:d0:0d:12:2d:a4:
                    b5:91:8d:67:dd:e7:88:4e:c4:1b:81:83:a1:91:af:
                    c4:4f:c0:b1:30:31:cc:cd:bb:b7:ea:25:8f:24:ae:
                    62:3c:a9:79:63:06:c9:fa:ee:f4:ee:77:1f:c8:e2:
                    c9:c9:78:fe:b3:b6:57:16:d9:22:08:e6:10:36:19:
                    df:60:04:44:34:7a:be:0c:e6:92:7e:5a:b8:b5:c7:
                    bc:f3:7a:06:a3:b5:b6:ba:71:73:9f:bc:17:d5:b3:
                    2a:60:56:56:f7:a3:5f:1b:f5:e9:26:d2:c3:c0:23:
                    95:d8:56:98:fc:bd:8f:3e:75:59:6c:05:2c:c2:59:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:DE:58:07:A6:D1:98:98:0F:2C:97:53:07:77:5D:0D:66:BB:7A
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e3132382e302f32302d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:a8:72:aa:e5:cf:5e:da:62:b2:6d:7e:2b:09:75:b2:d0:cf:
         c6:85:b9:d6:15:c0:98:14:e9:be:46:0e:a1:37:a5:d1:b4:a4:
         34:3a:d2:4d:70:8b:26:93:a5:26:50:b0:2c:49:17:4a:ac:a1:
         3b:6b:08:50:a7:03:af:d1:34:19:ae:0b:6f:67:0d:c7:f0:55:
         04:dd:d3:b3:24:ee:b6:70:a6:b8:ce:18:90:7c:3d:1c:04:70:
         01:cd:6e:e1:11:0f:75:f0:f7:21:f3:5b:de:cf:1c:26:c1:20:
         d4:d2:0d:44:8f:89:41:0a:2c:17:f6:94:e9:d8:f5:bb:c0:e1:
         35:b8:ef:a7:01:72:a3:04:b9:68:2f:6c:fa:88:75:97:fe:ab:
         57:0d:5e:9f:f6:c4:84:38:c8:13:6b:b3:59:03:4a:42:dc:0e:
         a6:83:f1:bf:36:75:9b:98:e1:fc:c6:76:bf:8c:63:e7:4f:0c:
         26:4d:78:5c:d3:72:36:87:6c:e7:73:c9:bf:5e:36:c4:5a:c7:
         90:a1:55:58:4f:80:cc:a9:61:32:7c:2a:ca:24:9e:f4:4d:fd:
         86:3f:72:e2:6f:88:83:7d:7b:c9:b2:6d:7f:c4:55:b2:2c:0c:
         52:48:9a:20:75:b8:21:7d:da:b2:76:93:d6:4f:c7:b8:0c:b6:
         ad:88:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:36 2025 by rpki-client