Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e37322e302f32332d3234203d3e203238353731.roa
File:                     3230302e3134342e37322e302f32332d3234203d3e203238353731.roa (raw, json)
Hash identifier:          JBv2hceSBxlkQAfNsKwiLqmoAdLYslZnNnzWFiqKAHE=
Subject key identifier:   24:6E:25:01:B4:23:56:64:02:8E:B9:F8:6B:DA:A0:64:0D:0A:CC:9E
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       1D423CBDF501F368D3FD5361A1E12BF74E396A42
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e37322e302f32332d3234203d3e203238353731.roa
Signing time:             Mon 13 Oct 2025 13:46:27 +0000
ROA not before:           Mon 13 Oct 2025 13:41:27 +0000
ROA not after:            Mon 12 Oct 2026 13:46:27 +0000
asID:                     28571
IP address blocks:        200.144.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:3c:bd:f5:01:f3:68:d3:fd:53:61:a1:e1:2b:f7:4e:39:6a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:27 2025 GMT
            Not After : Oct 12 13:46:27 2026 GMT
        Subject: CN=246E2501B4235664028EB9F86BDAA0640D0ACC9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:0c:40:cc:31:ae:61:df:f4:8b:06:3a:f7:
                    a8:15:1a:2c:a9:65:dd:cd:5c:8d:77:c5:04:90:13:
                    79:f5:60:6f:1d:e4:d5:90:f2:36:45:63:eb:1b:11:
                    12:c8:1c:aa:9f:9e:fd:20:93:23:12:ab:bf:82:ef:
                    3c:7c:75:73:c6:87:7f:2b:99:8d:36:5a:19:cc:47:
                    1b:77:71:6d:41:a8:38:97:b5:8b:2a:0a:78:c4:f0:
                    e8:7a:b4:27:01:e4:86:9a:12:c9:4d:68:80:ed:bc:
                    ac:24:6f:c0:48:a9:33:c2:37:03:d1:56:73:99:06:
                    71:4f:37:20:0d:fe:c9:7d:00:de:55:73:a2:93:93:
                    6a:c4:ac:4f:bc:09:42:56:82:d7:9a:45:a2:75:2f:
                    c9:29:9c:e1:33:77:6f:1f:c4:56:b6:6d:30:c0:13:
                    a9:80:50:3c:52:95:f9:d9:91:7f:6b:7b:0b:57:36:
                    c8:ec:03:35:b5:47:35:26:a9:80:9b:6d:ed:68:80:
                    f7:7d:6a:bd:f9:94:7e:6e:de:af:6c:c7:73:9c:f3:
                    18:e7:d6:58:5f:1e:ed:e6:96:16:cb:18:bc:f4:28:
                    31:d8:f0:a1:45:52:a3:ee:57:0a:af:3c:e5:1d:37:
                    6a:fb:30:8a:e5:62:84:fc:dc:e3:34:4d:08:4e:f5:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6E:25:01:B4:23:56:64:02:8E:B9:F8:6B:DA:A0:64:0D:0A:CC:9E
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e37322e302f32332d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:9d:45:35:41:e4:8e:58:52:3a:ab:ea:7b:2a:ba:f0:4d:
         57:e8:50:91:34:d3:b7:45:73:4b:7f:69:15:12:71:c1:b4:19:
         1f:b3:b1:a6:0d:d3:5d:aa:91:03:c8:c7:58:22:7f:ff:90:2d:
         ce:e4:d2:26:a9:2b:ae:a9:0d:62:ff:ff:14:0e:99:2b:f2:72:
         53:9b:a1:26:e4:cc:d9:c5:b6:f6:f9:f9:ab:71:6f:71:ee:75:
         08:a6:7b:6b:14:4f:f6:a1:67:7a:08:6e:56:e9:ce:27:4b:e5:
         b6:9d:2e:e0:b7:f5:f4:ff:91:67:05:f8:49:70:43:ca:b8:96:
         cb:ea:6f:0d:7b:08:5f:38:19:a7:c1:01:6d:d7:08:dd:cf:23:
         ec:ba:eb:49:bf:2b:9e:ed:69:ea:ef:2b:1b:0c:25:16:0d:48:
         6f:63:29:63:f9:e1:b0:88:cf:48:d0:64:93:a0:48:8b:c2:cb:
         36:01:9f:33:a0:d2:9d:6c:46:8d:7f:2a:8e:12:f9:31:6b:5d:
         9e:c0:4f:72:ed:01:9b:b7:6f:6c:4f:88:34:92:ce:3a:60:50:
         76:17:99:99:96:69:2c:5b:da:4b:e5:cf:c8:cd:b7:a8:7e:ec:
         ab:86:2d:33:54:7f:cf:91:79:98:bd:65:7d:73:38:b4:f0:7c:
         64:93:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:08 2025 by rpki-client