Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e33322e302f32302d3234203d3e2031323531.roa
File:                     3230302e3134342e33322e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier:          Wv5lvbFxgtFl+C2hvfceCVfJi4xLqsTxGaVnbs62mfg=
Subject key identifier:   8B:A5:1C:E6:76:5A:F2:80:6A:0D:5D:E0:20:20:D7:07:C2:87:4C:D7
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       13FC1C8AD3FAFCA17EBDF0C383C4A217966A3ED7
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e33322e302f32302d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:30 +0000
ROA not before:           Mon 13 Oct 2025 13:41:30 +0000
ROA not after:            Mon 12 Oct 2026 13:46:30 +0000
asID:                     1251
IP address blocks:        200.144.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fc:1c:8a:d3:fa:fc:a1:7e:bd:f0:c3:83:c4:a2:17:96:6a:3e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:30 2025 GMT
            Not After : Oct 12 13:46:30 2026 GMT
        Subject: CN=8BA51CE6765AF2806A0D5DE02020D707C2874CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:71:f2:07:9b:e3:63:15:ee:03:ff:0b:b7:
                    89:d5:56:34:38:0a:56:3d:71:b7:86:b5:8c:ac:4c:
                    2f:de:32:6e:1a:2c:09:db:bb:9b:ec:28:18:97:9c:
                    d5:95:86:32:18:c0:9d:00:d5:9c:7e:cc:1a:96:f7:
                    b2:7d:21:30:e6:c4:5d:34:4e:75:c1:c3:94:7f:6c:
                    2b:17:9f:1b:b5:7b:bf:6e:e7:99:47:99:dc:f3:50:
                    5b:f5:4a:c1:42:59:b0:05:a5:df:6c:e7:73:f0:8a:
                    0d:f5:b0:26:3e:c9:93:4d:ea:90:69:e1:be:c2:28:
                    1b:06:6b:2f:d1:aa:d9:f2:69:3b:c1:ad:21:a1:a8:
                    69:bf:ae:5e:fb:7b:58:09:db:b6:b6:dc:25:b6:43:
                    1e:e0:3a:d9:75:d4:02:bd:93:25:57:bb:02:bc:78:
                    f1:8b:26:bd:3a:f8:44:9c:b5:82:17:11:3b:fc:d8:
                    f0:4f:6c:fa:fd:6b:d3:cb:93:c7:46:b2:8a:51:4e:
                    a5:ed:d6:ab:8c:8c:a0:1b:f3:f6:4b:34:f4:af:d2:
                    c6:26:25:cb:68:fd:da:ab:8f:2d:ea:41:1e:72:c5:
                    a7:4c:01:70:5c:e0:af:b4:d3:9c:3e:19:b5:77:16:
                    03:81:e5:95:90:04:fb:39:eb:e7:69:da:f9:b2:43:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:1C:E6:76:5A:F2:80:6A:0D:5D:E0:20:20:D7:07:C2:87:4C:D7
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e33322e302f32302d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:aa:72:f9:18:8c:89:bc:a5:2b:88:56:f0:ce:11:e8:da:
         36:0e:fe:8d:4b:47:59:de:56:27:a3:6e:f6:8d:14:08:d6:8a:
         c4:1c:95:8f:73:0d:e9:3c:f3:3e:8b:23:dc:78:02:91:b4:6d:
         cb:52:e3:1e:de:35:e9:3b:30:c8:2b:bc:30:3b:0f:ec:c7:9d:
         66:3c:76:07:d2:05:e1:ad:f3:0b:76:57:ad:21:ec:32:6b:50:
         04:ab:89:5a:fb:83:a6:69:b4:f8:1e:a4:26:11:1c:5b:0c:a6:
         41:98:d7:dc:6a:95:6b:52:32:11:88:25:ab:7f:c2:6d:a3:99:
         e2:dc:2c:40:67:cb:9c:ed:1b:21:3f:e8:b9:3c:6b:55:a8:4e:
         61:f7:0d:2a:d8:25:a3:25:c0:54:98:3f:c7:c4:b7:07:36:60:
         fd:4a:d3:f4:38:0d:a0:0f:57:b8:76:1e:dc:04:d9:b2:66:61:
         ee:30:24:3a:d0:f8:b3:bc:05:00:e7:37:30:73:62:c2:6b:e6:
         52:0f:4d:38:ed:d8:8c:ff:8e:09:fa:a5:17:a9:f5:92:9f:1d:
         7f:f2:23:3c:e1:8e:44:bd:72:40:17:ec:b9:53:8f:38:0a:7d:
         78:57:06:af:56:54:9d:56:dc:a2:72:d2:4f:98:86:ff:86:8f:
         00:fe:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:28 2025 by rpki-client