Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e37322e302f32332d3234203d3e203238353731.roa
File:                     3230302e3134342e37322e302f32332d3234203d3e203238353731.roa (raw, json)
Hash identifier:          578li4fOkmoWQQLHG/XpdJ644Gz8OMqa/DHc8pNW+3A=
Subject key identifier:   94:05:AE:6E:B6:8B:84:F3:77:DA:F2:C9:70:DD:D6:92:A0:89:CB:97
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       2377280546CA57AC358E973A5D19BEF958127EA0
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e37322e302f32332d3234203d3e203238353731.roa
Signing time:             Mon 14 Sep 2026 13:53:09 +0000
ROA not before:           Mon 14 Sep 2026 13:48:09 +0000
ROA not after:            Mon 13 Sep 2027 13:53:09 +0000
asID:                     28571
IP address blocks:        200.144.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:77:28:05:46:ca:57:ac:35:8e:97:3a:5d:19:be:f9:58:12:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:09 2026 GMT
            Not After : Sep 13 13:53:09 2027 GMT
        Subject: CN=9405AE6EB68B84F377DAF2C970DDD692A089CB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:d3:ec:01:1e:68:01:a1:0e:36:86:95:d5:
                    6c:47:1b:7a:6d:24:b7:89:c0:bb:35:aa:b9:40:8d:
                    35:d8:32:28:b8:f1:95:fd:5c:58:f5:97:e8:f7:38:
                    1b:57:3b:b7:a1:c0:09:b4:8d:90:d8:9d:8b:bc:43:
                    09:b7:ed:a3:bc:aa:c9:d2:50:da:21:9c:e1:f9:70:
                    b9:a1:1d:f6:cc:f2:2b:c2:6d:65:03:d8:dd:19:b4:
                    4a:55:4e:8e:c3:30:62:32:42:5c:4b:66:d3:01:d9:
                    40:86:26:5a:b4:c2:32:76:6b:ea:3f:62:c8:5a:fb:
                    55:94:31:69:c8:e8:0f:12:78:1d:5b:9b:03:b7:d3:
                    46:cf:32:f0:1d:8c:23:e9:6b:d2:ba:77:3b:a3:6a:
                    5e:40:f0:36:32:a1:f0:79:3e:31:6c:f1:7c:68:ef:
                    cb:ed:ca:53:e3:53:a8:7d:8f:1d:d8:90:b3:44:07:
                    3c:d8:97:e1:6b:75:e2:66:83:44:3c:bd:95:34:17:
                    45:0e:cf:69:2c:3e:39:d3:82:e7:f9:61:2b:7b:4c:
                    8b:4c:07:da:86:03:bb:26:99:a5:bc:ca:c5:10:b6:
                    da:15:ee:4e:04:92:12:cc:72:5c:26:a0:72:ac:d3:
                    46:54:46:9f:07:2b:cc:d5:ce:f4:56:b9:ee:11:da:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:AE:6E:B6:8B:84:F3:77:DA:F2:C9:70:DD:D6:92:A0:89:CB:97
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e37322e302f32332d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:71:d7:11:1a:d7:5b:c4:e6:68:a9:b1:78:4b:f3:da:df:f5:
         63:b9:41:55:fb:38:17:ad:ec:c7:34:0a:f4:cc:de:5a:12:95:
         05:d2:86:f6:b1:ea:d6:d4:0a:35:13:bf:36:2e:d5:59:a9:6b:
         56:d2:71:2d:3e:c1:b0:c5:7c:87:4d:1c:3d:98:88:23:52:0f:
         e5:c9:f1:fe:2f:2a:98:32:c4:f3:4a:72:03:78:b8:ea:31:69:
         74:41:f1:cb:cf:b9:e7:90:c3:a2:9b:5f:fb:42:6d:48:95:bb:
         b2:2c:44:5c:d0:8f:11:63:66:25:4f:8b:25:10:f6:1d:52:46:
         ca:e1:ed:51:c5:d4:ca:2e:f8:e8:95:12:3f:ed:2b:7c:ce:3c:
         5a:03:10:1d:1f:a6:28:64:78:c5:8c:69:32:26:9d:2d:57:b5:
         29:86:91:7e:55:40:13:af:c6:53:27:32:e0:81:6f:07:2d:c6:
         f1:e2:8e:33:63:34:5b:c2:95:c3:56:5d:39:b6:61:41:ef:56:
         cf:50:4e:b9:6a:ef:1c:a0:db:65:8f:57:4f:41:f4:9e:4f:82:
         89:d0:f7:c5:7b:8a:b5:57:22:24:07:e5:f3:02:59:ad:2b:1e:
         dc:fb:4e:b4:b3:6a:d7:6c:49:c0:c5:d2:44:4e:da:e1:a7:4d:
         18:85:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:05:07 2026 by rpki-client