Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e34382e302f32302d3234203d3e203238353731.roa
File:                     3230302e3134342e34382e302f32302d3234203d3e203238353731.roa (raw, json)
Hash identifier:          QmBcOp/2MWj+oHYMyLaKlQO/4ARKscdn1+wlSv1VFZc=
Subject key identifier:   8F:D8:7D:8A:56:83:61:92:F4:A2:B1:50:7E:18:98:04:8F:BE:5C:05
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       343BA34FB0950817844D379E3E0848AF4C9A323E
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e34382e302f32302d3234203d3e203238353731.roa
Signing time:             Mon 13 Oct 2025 13:46:24 +0000
ROA not before:           Mon 13 Oct 2025 13:41:24 +0000
ROA not after:            Mon 12 Oct 2026 13:46:24 +0000
asID:                     28571
IP address blocks:        200.144.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:a3:4f:b0:95:08:17:84:4d:37:9e:3e:08:48:af:4c:9a:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:24 2025 GMT
            Not After : Oct 12 13:46:24 2026 GMT
        Subject: CN=8FD87D8A56836192F4A2B1507E1898048FBE5C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:00:47:09:af:aa:71:84:b0:96:43:1e:47:
                    11:54:13:e1:59:1a:1c:2b:03:21:91:51:39:7a:1c:
                    09:15:46:6c:eb:ae:d3:de:d3:4e:f3:77:f7:64:be:
                    ff:a6:1f:e7:1b:2b:f1:f3:30:cf:2b:19:10:14:34:
                    f1:16:59:c9:7e:30:1c:99:d8:de:d6:95:22:63:3d:
                    1c:27:71:9a:94:44:90:1a:0d:78:11:40:c9:67:6e:
                    6d:c0:82:9c:c7:62:21:56:ba:8b:6e:4b:17:e7:83:
                    69:a9:8c:45:d8:36:16:95:ae:a5:13:d1:a2:3f:58:
                    fc:cb:d6:f7:5a:58:22:95:e6:15:0b:1b:7a:85:f4:
                    e7:f4:1c:d8:92:f2:4e:35:75:d7:3d:c4:6e:f6:24:
                    73:af:da:07:43:a8:26:21:60:4d:16:eb:d9:d4:0b:
                    86:d1:25:34:8c:e5:f6:41:11:65:14:48:c9:ad:73:
                    19:2d:38:a1:ce:d1:97:7b:6a:52:05:b5:e3:a3:33:
                    fb:97:3d:ee:e2:68:3a:8c:7a:96:5c:f5:25:9a:d4:
                    3e:74:cb:2e:91:7d:f8:ac:06:fd:9c:ab:8b:3c:9c:
                    6d:ae:99:1d:8e:ee:d5:73:04:80:58:22:dd:a0:37:
                    d3:ee:3a:ef:f7:56:28:9f:76:e2:27:6b:c4:b3:a8:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:7D:8A:56:83:61:92:F4:A2:B1:50:7E:18:98:04:8F:BE:5C:05
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e34382e302f32302d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:af:80:0a:42:65:a2:6d:9b:94:88:13:8c:2f:56:f1:fa:a4:
         ca:30:53:fd:26:4a:12:90:e1:96:a8:df:64:e1:01:07:b1:13:
         53:55:78:61:80:3c:00:e6:61:6c:c4:10:e8:0b:2c:46:37:60:
         5d:3f:13:cd:fb:d4:ed:6b:c9:45:7a:53:55:9e:39:79:ec:2c:
         b8:e0:55:65:48:04:0a:57:33:5a:ce:59:22:da:73:bc:46:7d:
         be:a9:c6:2c:0e:54:42:55:a0:ef:a1:97:ec:b2:62:c0:66:37:
         dc:6d:3a:38:35:21:f3:21:e4:81:d7:69:75:9c:b5:b3:7f:c1:
         8b:ac:e2:8c:b2:50:a7:9e:6d:9b:45:d6:db:dc:61:fc:23:43:
         0d:43:5d:99:fc:0c:eb:74:e1:9a:a1:8e:af:7c:b1:a8:ab:43:
         8b:76:d5:1d:04:55:9c:93:3a:fc:4e:30:fd:74:14:22:2f:4d:
         d9:60:3e:c6:6a:0d:d0:af:e9:9d:e5:a1:24:95:0d:62:67:2f:
         1d:74:ba:ae:f9:64:23:0c:17:1f:76:92:2f:36:04:67:7d:81:
         94:2c:73:5e:7d:57:ef:27:22:05:d4:0e:16:07:a7:53:43:71:
         96:2e:07:48:23:6f:e9:77:4e:79:6e:13:61:99:1d:bb:32:0c:
         9e:5f:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:04:01 2025 by rpki-client