Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e36342e302f32312d3234203d3e2031323531.roa
File:                     3230302e3134342e36342e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          tMbz8SbsIutz9uy5ImgB82h1GjnB1n9AnSo/SBAXvug=
Subject key identifier:   C8:09:B4:6A:F2:F7:BB:5C:EA:6E:55:FD:0D:20:E4:D7:B2:13:DE:5A
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       751778B367E07EA8C02E513228466A93F1FABCE3
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e36342e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:29 +0000
ROA not before:           Mon 13 Oct 2025 13:41:29 +0000
ROA not after:            Mon 12 Oct 2026 13:46:29 +0000
asID:                     1251
IP address blocks:        200.144.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:17:78:b3:67:e0:7e:a8:c0:2e:51:32:28:46:6a:93:f1:fa:bc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:29 2025 GMT
            Not After : Oct 12 13:46:29 2026 GMT
        Subject: CN=C809B46AF2F7BB5CEA6E55FD0D20E4D7B213DE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:cc:9d:ee:4e:77:03:ae:14:56:41:52:03:
                    4f:12:eb:29:82:2f:25:d5:9d:79:77:77:da:3a:ef:
                    e3:47:23:12:80:52:27:75:06:94:73:77:79:4f:1e:
                    51:ac:15:1b:0e:e2:17:97:5b:dd:00:0a:2a:53:6b:
                    76:db:98:30:7d:42:a5:fb:fa:cf:62:6a:8c:e9:8d:
                    37:f1:0a:4d:cd:23:17:a3:02:aa:71:66:7b:e5:3e:
                    fc:e4:a0:8e:29:3e:d3:3a:36:60:f6:b4:f5:20:c0:
                    b1:4b:f1:6a:3a:dd:1b:8f:9a:3e:e1:8c:99:b3:3b:
                    e6:6b:5f:08:4d:b3:43:cc:60:37:55:5f:ae:0f:32:
                    5c:58:18:6a:92:ac:3f:95:31:08:8b:fe:fa:af:c6:
                    d7:16:f2:27:b9:dd:a7:bc:17:7d:f9:cf:94:e0:1b:
                    95:9f:48:6c:44:86:44:7f:a0:4d:af:a6:35:cd:0f:
                    38:de:20:78:20:aa:7d:3f:07:25:bd:46:45:1b:25:
                    0e:3b:f3:ce:77:7f:09:df:bb:3f:1d:9a:81:52:4e:
                    8b:0b:6b:72:98:16:ed:c9:6a:3d:cb:84:fd:a1:0c:
                    cc:30:ff:6a:b5:73:cd:37:78:39:96:ee:df:c7:7c:
                    8e:f0:96:54:3a:71:b9:5f:93:06:5d:00:3e:57:20:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:B4:6A:F2:F7:BB:5C:EA:6E:55:FD:0D:20:E4:D7:B2:13:DE:5A
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e36342e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:24:44:38:08:15:46:7b:93:84:c9:52:a9:b1:48:c1:9b:
         21:09:b5:29:d7:d4:a8:97:45:ac:0e:50:e4:2f:6f:2b:32:d0:
         10:c0:c5:a7:5d:b4:f2:07:40:b6:36:49:98:de:40:b9:7e:e5:
         a0:89:6b:69:d8:c6:3f:04:02:f0:ba:93:ea:e4:2d:8f:dc:aa:
         6d:0f:23:88:d1:34:0e:3a:e0:b1:d1:8c:47:b9:9c:7d:f1:64:
         81:66:82:f4:6a:84:fe:02:5d:d6:06:9f:39:0d:24:06:09:83:
         f6:ba:8e:ac:a2:a0:f7:16:2a:d8:28:7e:53:70:26:12:2c:7d:
         e0:05:90:f9:29:15:ce:3c:31:37:45:16:b2:0e:34:65:a3:67:
         dd:da:09:e6:e4:68:13:10:70:a3:93:b4:79:08:b4:60:56:47:
         ce:e8:a5:09:04:5c:7c:5d:aa:72:99:61:5b:24:b5:c6:ef:b7:
         ca:26:1c:07:f0:29:30:1d:63:e5:73:a9:c1:74:ac:1d:62:ac:
         43:8e:b1:5f:08:9f:40:79:10:72:8d:72:9b:7a:a0:c0:bd:ad:
         f4:66:46:34:42:d9:82:0e:41:cd:a8:ef:57:0e:c3:c5:29:11:
         ef:a1:16:7d:46:3d:30:77:b6:3d:65:15:08:c3:2a:74:b0:38:
         c7:8a:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:31:49 2025 by rpki-client