Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39302e302f32342d3234203d3e2031323531.roa
File:                     3230302e3134342e39302e302f32342d3234203d3e2031323531.roa (raw, json)
Hash identifier:          F8xlokcoah/PND3mBh9f3KUN6Z2y4ON8YlvSMG0088Q=
Subject key identifier:   43:56:75:1E:EA:B9:28:70:10:3D:F2:2E:51:E3:08:3C:8D:15:94:D8
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       732D84F9FE88F1D4F45EB84FE82B0C0F7DFD3122
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39302e302f32342d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:27 +0000
ROA not before:           Mon 13 Oct 2025 13:41:27 +0000
ROA not after:            Mon 12 Oct 2026 13:46:27 +0000
asID:                     1251
IP address blocks:        200.144.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2d:84:f9:fe:88:f1:d4:f4:5e:b8:4f:e8:2b:0c:0f:7d:fd:31:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:27 2025 GMT
            Not After : Oct 12 13:46:27 2026 GMT
        Subject: CN=4356751EEAB92870103DF22E51E3083C8D1594D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:1d:0d:20:81:61:c1:f7:1f:ae:21:d7:2b:
                    89:ba:f1:e3:32:f0:e8:f2:aa:1b:41:a0:a5:9e:65:
                    f6:b8:06:9e:28:2f:22:77:f4:96:35:40:8d:5e:1f:
                    23:1d:36:aa:f7:69:76:0e:e4:4b:e7:e5:99:54:8e:
                    68:0c:d6:05:36:8f:40:8f:39:92:66:17:f1:5e:e1:
                    6a:a6:23:53:44:48:ac:b5:ff:93:75:f6:d5:02:d9:
                    41:a3:a9:19:ad:72:6f:65:5a:e9:95:ed:f0:24:39:
                    10:29:90:e6:87:39:09:e3:cc:ed:4d:e6:fc:88:48:
                    1e:4b:4c:a6:ad:27:d4:68:a3:77:0d:bb:78:73:6d:
                    74:2b:39:6c:9c:e0:63:0d:4b:6f:c9:a8:4e:e1:ac:
                    11:d8:4b:ec:36:50:5a:5a:71:1a:1a:03:d0:23:08:
                    ca:f8:4d:00:ff:b3:24:04:2d:c2:6d:e7:e8:57:a4:
                    bf:f9:65:7c:b4:9e:db:18:6a:c7:34:b1:6a:3a:9d:
                    c4:2c:5a:b0:2c:15:49:71:0b:b2:0d:70:7f:0e:1a:
                    2e:57:64:fe:5a:16:50:48:84:aa:c1:ef:98:a4:08:
                    12:3f:0a:2b:95:6c:f8:77:8d:c7:32:59:ba:bd:ee:
                    e5:52:62:4c:4d:cd:04:12:64:01:0a:83:ca:63:e1:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:75:1E:EA:B9:28:70:10:3D:F2:2E:51:E3:08:3C:8D:15:94:D8
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39302e302f32342d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:67:13:16:9a:15:29:bf:75:43:f6:5c:92:e6:21:4e:62:56:
         31:38:c5:99:c6:07:e0:7f:f6:0f:3e:f6:39:d0:ed:6b:cf:d5:
         13:6f:ab:53:1b:68:da:66:15:54:72:76:ac:98:1e:de:29:a9:
         ea:06:ce:45:31:c8:c3:e3:9f:3b:d4:d3:c9:ce:a0:71:8e:ee:
         e6:36:64:b3:04:95:5a:c5:c0:a9:d3:4f:f5:a5:73:ba:6c:f2:
         6b:18:51:8e:66:04:e9:16:62:b9:ff:64:24:4d:c6:ca:14:c1:
         2b:7d:9f:8d:d0:2b:28:93:81:31:d7:7f:04:87:aa:ed:d9:a1:
         8d:35:dd:00:a7:fd:e9:d2:2e:a2:84:3e:e7:2e:b3:73:86:0b:
         46:0f:15:a7:1a:ab:d7:25:31:b7:ce:78:9a:8b:dc:92:11:f3:
         60:82:9f:47:19:e3:ed:13:21:e3:50:28:77:82:c1:d8:6b:d0:
         c0:52:c5:06:24:e4:72:9a:bc:3c:95:19:75:ab:20:10:76:a0:
         7e:2e:cb:aa:ef:34:44:16:5f:dc:c2:cc:cc:86:00:49:05:3f:
         3c:c6:69:bf:84:38:c9:16:92:f0:7d:da:01:ca:c4:20:73:a2:
         d3:7d:52:97:7c:d0:ef:84:b2:b2:50:c7:94:2f:a9:69:7a:da:
         0a:af:46:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:29 2025 by rpki-client