Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e38302e302f32342d3234203d3e203532373033.roa
File:                     3230302e3134342e38302e302f32342d3234203d3e203532373033.roa (raw, json)
Hash identifier:          lqcPJ8Zm/TcsEZDUC484RVrOmiBRSuELmSe1VPV+WYg=
Subject key identifier:   11:76:F4:A4:6C:29:A6:49:13:8F:6F:51:A4:76:DD:B1:88:25:5F:FF
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       03EED1E58E3530A04CBEABD1F932E10D937DEE4D
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e38302e302f32342d3234203d3e203532373033.roa
Signing time:             Mon 14 Sep 2026 13:53:11 +0000
ROA not before:           Mon 14 Sep 2026 13:48:11 +0000
ROA not after:            Mon 13 Sep 2027 13:53:11 +0000
asID:                     52703
IP address blocks:        200.144.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ee:d1:e5:8e:35:30:a0:4c:be:ab:d1:f9:32:e1:0d:93:7d:ee:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:11 2026 GMT
            Not After : Sep 13 13:53:11 2027 GMT
        Subject: CN=1176F4A46C29A649138F6F51A476DDB188255FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:ab:b6:80:a2:b2:92:c7:3c:46:29:87:f9:
                    72:2f:87:c1:8a:1b:d5:e7:84:90:2f:bf:37:ca:f3:
                    8c:80:53:93:72:18:7d:de:11:fa:0c:af:51:49:55:
                    a0:9c:e7:65:cb:91:a5:1e:a6:13:16:54:26:c8:1a:
                    23:95:87:52:da:79:33:5c:23:25:27:1c:f9:d6:b6:
                    61:a0:5d:a7:53:31:bb:46:ee:fd:24:95:32:5c:06:
                    dd:14:86:20:e3:bd:8a:f4:aa:9a:74:4f:47:a3:b4:
                    c5:61:cd:d0:93:45:90:12:7e:f1:19:90:a2:f4:f4:
                    43:73:ea:77:f7:7e:4a:63:52:57:71:39:67:03:44:
                    75:cf:4a:f7:76:92:f4:ca:66:24:16:d3:fc:46:04:
                    e7:85:1f:36:9c:09:fe:51:20:1d:f1:fb:95:1a:8f:
                    dc:b6:80:25:fd:4f:f1:77:b8:d7:b8:df:f3:43:83:
                    dc:8b:6b:ac:aa:f7:97:4c:c9:91:ef:47:46:5a:54:
                    36:ed:f0:ab:d6:e2:2b:26:45:89:12:ec:e5:98:67:
                    44:c5:5c:8b:28:9a:6c:85:76:a2:eb:37:3f:0f:ac:
                    a0:4b:ee:2a:b5:36:9f:fc:76:3b:9a:21:9d:6c:33:
                    7c:21:db:cf:00:54:68:2a:08:70:0f:87:bd:1c:96:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:76:F4:A4:6C:29:A6:49:13:8F:6F:51:A4:76:DD:B1:88:25:5F:FF
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e38302e302f32342d3234203d3e203532373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:4a:ca:be:2e:ef:46:c2:50:23:b3:2f:c0:4f:10:99:b2:
         72:fb:6d:ab:43:39:ef:ab:c3:fe:79:d1:3c:32:4e:5e:9a:7d:
         b6:19:57:46:c8:e7:b0:9a:9e:b7:33:1d:13:32:0b:b8:01:4e:
         ad:a5:b8:15:b5:12:bc:fd:ff:74:ca:46:e6:7d:0f:f2:6a:1f:
         18:43:ec:ba:13:e4:50:5b:73:db:23:01:8c:13:0a:0e:89:26:
         7c:d7:1b:64:d6:0f:b1:b9:06:f2:31:7e:a6:9d:00:3d:21:9e:
         23:b0:38:1b:87:96:ab:52:8c:9a:a8:d6:19:e5:ff:5b:36:18:
         a8:05:27:18:23:61:ea:54:80:70:9f:17:31:77:e7:32:15:11:
         08:a6:3d:d8:e7:c7:bf:cd:32:79:27:e9:25:1c:e6:b0:90:55:
         f4:d8:cb:59:4d:93:03:d8:ef:0f:71:73:ee:b4:87:26:c9:92:
         6d:28:a3:84:12:45:18:30:e5:89:cc:a7:9f:5e:a3:f2:fe:69:
         0f:8f:a4:1e:a6:4b:3f:43:be:1a:90:71:27:83:dc:92:a3:3b:
         c1:d0:e5:7b:fa:4d:6c:fb:43:97:3c:73:85:77:93:74:2d:bb:
         3d:05:5f:a3:ef:e9:fc:0a:a6:99:bb:c6:03:19:4c:a8:88:c4:
         d7:ea:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:11:41 2026 by rpki-client