Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e36342e302f32312d3234203d3e2031323531.roa
File:                     3230302e3134342e36342e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          Efik19cUquiCSsitLTarTa7Fcx7ex081WiWgPP8IHVk=
Subject key identifier:   D4:78:E3:42:3A:BD:A6:27:BE:69:E5:28:9B:7C:C8:75:66:8A:D4:F9
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       06A6156ABA0A22A5EF419E5EF3AF8068ABFECD35
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e36342e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:19 +0000
ROA not before:           Mon 14 Sep 2026 13:48:19 +0000
ROA not after:            Mon 13 Sep 2027 13:53:19 +0000
asID:                     1251
IP address blocks:        200.144.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a6:15:6a:ba:0a:22:a5:ef:41:9e:5e:f3:af:80:68:ab:fe:cd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:19 2026 GMT
            Not After : Sep 13 13:53:19 2027 GMT
        Subject: CN=D478E3423ABDA627BE69E5289B7CC875668AD4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:33:d6:45:99:85:94:4d:bd:f7:11:f1:28:
                    0a:43:29:eb:98:3e:b4:67:91:5b:7c:aa:42:56:23:
                    ec:43:88:36:9f:60:c7:1f:7a:a4:98:30:96:bc:46:
                    88:e8:55:b8:6a:0f:a1:ee:8e:16:44:1d:0e:f3:44:
                    eb:e1:70:e6:5d:2b:fd:11:93:ae:12:53:06:d9:6c:
                    01:ff:78:be:84:e1:53:b7:94:b8:19:21:c8:3d:d9:
                    88:e1:61:e3:be:b1:f8:47:f6:e6:73:9f:30:dc:e4:
                    4c:e2:41:f3:1d:03:d1:46:d3:ff:a2:99:85:d9:a2:
                    ff:de:f4:81:1f:46:e5:99:ab:07:c6:63:f1:8f:76:
                    92:b3:b3:d1:43:ed:e0:40:ea:d7:85:6d:30:2a:1f:
                    1c:df:dc:6e:65:66:3f:83:e1:83:fd:4b:5f:9c:80:
                    75:42:75:7d:22:95:2f:77:2e:28:90:ec:09:99:c0:
                    47:1d:f1:6e:16:5f:9c:fc:69:33:34:f8:f9:8d:22:
                    be:be:45:e3:38:c7:99:29:dc:06:b9:bc:44:bb:d8:
                    12:bd:59:9d:02:e7:f8:96:35:97:d8:69:8b:2d:87:
                    10:a4:31:d5:0c:05:9f:dc:53:ab:b1:08:ea:4f:eb:
                    a9:b9:a9:11:e5:14:ce:d0:de:54:fb:45:59:4c:36:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:78:E3:42:3A:BD:A6:27:BE:69:E5:28:9B:7C:C8:75:66:8A:D4:F9
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e36342e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:96:b6:48:b6:d6:24:31:c0:eb:55:d2:9d:1a:fd:ec:5b:
         06:02:e2:8b:49:f5:f1:65:a0:ae:01:77:61:4d:9e:f3:cc:66:
         ba:d8:aa:c4:2b:b5:fa:87:2e:67:92:8f:f8:f2:25:d1:2f:44:
         7a:b4:91:9b:ac:6e:e7:9a:90:ca:13:6c:52:63:22:12:67:52:
         32:00:fd:3f:cc:56:71:0c:99:7d:c4:e5:76:63:33:4f:51:51:
         f1:35:eb:ae:ad:6c:40:d2:10:c4:f7:ee:ce:ca:2d:0a:f4:29:
         e8:f6:3f:34:bc:cb:c0:ce:63:72:5e:d4:52:c8:3c:1e:bb:9e:
         3c:e4:a0:74:e6:bb:fd:e6:3b:28:70:60:fa:02:45:a9:c4:9b:
         2d:c2:77:a4:b6:d9:bd:ba:fa:fa:4b:58:d1:c8:5a:e6:93:5c:
         3b:08:44:04:54:d3:7f:cb:6e:a3:b6:7b:52:ae:d8:bc:81:e0:
         3c:92:e9:2d:77:05:7e:be:cf:e3:ab:a4:32:49:af:1f:4c:6b:
         7a:ae:7d:83:24:83:2b:28:b3:bd:31:87:34:95:ed:f9:bd:95:
         fd:77:8e:80:6c:2c:cc:84:5d:95:b0:ce:91:bd:8e:4f:b5:65:
         9e:5a:8d:21:cf:ec:2e:fb:27:9d:8d:91:3b:0b:e2:c5:ba:73:
         e2:df:f3:3f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBqYVaroKIqXvQZ5e86+AaKv+zTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MTlaFw0yNzA5MTMxMzUzMTlaMDMxMTAvBgNV
BAMTKEQ0NzhFMzQyM0FCREE2MjdCRTY5RTUyODlCN0NDODc1NjY4QUQ0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJDPWRZmFlE299xHxKApDKeuY
PrRnkVt8qkJWI+xDiDafYMcfeqSYMJa8RojoVbhqD6HujhZEHQ7zROvhcOZdK/0R
k64SUwbZbAH/eL6E4VO3lLgZIcg92YjhYeO+sfhH9uZznzDc5EziQfMdA9FG0/+i
mYXZov/e9IEfRuWZqwfGY/GPdpKzs9FD7eBA6teFbTAqHxzf3G5lZj+D4YP9S1+c
gHVCdX0ilS93LiiQ7AmZwEcd8W4WX5z8aTM0+PmNIr6+ReM4x5kp3Aa5vES72BK9
WZ0C5/iWNZfYaYsthxCkMdUMBZ/cU6uxCOpP66m5qRHlFM7Q3lT7RVlMNgyzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1HjjQjq9pie+aeUom3zIdWaK1PkwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTM0MzQyZTM2MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTMy
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA8iQQDANBgkqhkiG9w0BAQsFAAOCAQEALeGWtki21iQx
wOtV0p0a/exbBgLii0n18WWgrgF3YU2e88xmutiqxCu1+ocuZ5KP+PIl0S9EerSR
m6xu55qQyhNsUmMiEmdSMgD9P8xWcQyZfcTldmMzT1FR8TXrrq1sQNIQxPfuzsot
CvQp6PY/NLzLwM5jcl7UUsg8HruePOSgdOa7/eY7KHBg+gJFqcSbLcJ3pLbZvbr6
+ktY0cha5pNcOwhEBFTTf8tuo7Z7Uq7YvIHgPJLpLXcFfr7P46ukMkmvH0xreq59
gySDKyizvTGHNJXt+b2V/XeOgGwszIRdlbDOkb2OT7VlnlqNIc/sLvsnnY2ROwvi
xbpz4t/zPw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 12:03:14 2026 by rpki-client