Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39312e302f32342d3234203d3e2031393136.roa
File:                     3230302e3134342e39312e302f32342d3234203d3e2031393136.roa (raw, json)
Hash identifier:          XGX3R4CzJNxdQz5oxOC/4BDJLr8O/2STxFd7qSj2GdE=
Subject key identifier:   0A:83:4C:40:6E:03:15:66:3C:73:10:C5:5B:F6:E5:6A:4A:A6:CA:3B
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       3EF981B508D04AD0D27693BA4741E38A64108A87
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39312e302f32342d3234203d3e2031393136.roa
Signing time:             Mon 13 Oct 2025 13:46:29 +0000
ROA not before:           Mon 13 Oct 2025 13:41:29 +0000
ROA not after:            Mon 12 Oct 2026 13:46:29 +0000
asID:                     1916
IP address blocks:        200.144.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:81:b5:08:d0:4a:d0:d2:76:93:ba:47:41:e3:8a:64:10:8a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:29 2025 GMT
            Not After : Oct 12 13:46:29 2026 GMT
        Subject: CN=0A834C406E0315663C7310C55BF6E56A4AA6CA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:49:10:84:45:30:bb:ee:a5:65:61:4c:ed:
                    f4:88:ee:f1:5e:9e:01:06:fb:d1:2b:9c:82:5f:ff:
                    07:25:5f:0c:a7:86:66:a2:3a:8a:91:7c:31:4d:dd:
                    40:95:73:76:e7:3d:e0:91:1a:e6:1c:d3:bd:c8:8e:
                    4e:58:83:41:64:91:93:ad:a0:59:81:c6:c0:0a:0e:
                    92:30:a3:06:fc:e2:2e:74:c7:38:c2:8c:95:60:22:
                    b6:53:69:49:e3:ec:6f:19:e3:f6:fe:23:4c:a4:4e:
                    c0:76:87:10:1d:d6:3c:af:c8:4b:29:bf:a8:df:2a:
                    f3:b2:a7:8f:c6:b7:cd:32:be:b9:2b:14:b6:9c:fa:
                    63:28:c6:ce:fd:0d:db:e0:b9:c8:3b:1a:6c:82:25:
                    1a:52:21:e3:86:df:41:25:ff:43:33:80:a5:fa:3c:
                    c7:3d:52:96:c0:76:88:96:12:e4:b6:89:f0:ac:7a:
                    17:e2:0d:af:a8:5c:61:ea:0f:fc:af:eb:59:07:bd:
                    58:e5:5e:ec:eb:ab:bb:c9:e9:b7:f3:c9:f0:99:22:
                    c9:dd:c6:9e:5d:8d:16:b4:f1:1f:fa:b7:33:b8:0f:
                    b7:64:7e:cb:e9:8f:22:b2:a9:de:7a:c3:89:fa:a7:
                    61:0e:5a:25:60:f9:a3:a1:18:01:21:ec:24:09:99:
                    8b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:83:4C:40:6E:03:15:66:3C:73:10:C5:5B:F6:E5:6A:4A:A6:CA:3B
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39312e302f32342d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:07:93:88:a8:1a:8b:3c:9f:89:c3:0d:35:2b:36:5b:26:85:
         d4:97:66:77:0b:01:1a:3a:75:15:9d:73:0a:9e:9e:ad:9f:1b:
         87:64:ca:2c:2f:2b:b0:1c:16:31:10:e7:d1:d2:3a:b1:2d:4d:
         c7:c9:77:08:f5:08:d8:f0:5a:0c:aa:69:bc:64:36:f9:17:42:
         1c:a6:7f:97:bd:e9:af:30:5c:30:15:65:59:ca:2d:6c:cb:ae:
         74:d7:d9:da:56:d5:17:b8:8b:80:15:15:d3:15:8e:0b:f4:1c:
         fc:17:96:ca:73:dd:ca:80:d5:55:09:ec:ef:7e:c9:00:31:16:
         fd:ac:fb:f9:2e:9a:c4:e5:8e:12:1c:41:73:26:4b:8d:0a:e4:
         cc:f0:5b:6e:a1:9a:59:15:eb:f3:c4:ca:ff:a7:7c:33:af:03:
         cf:03:2d:8c:10:00:f8:5e:04:a2:25:7f:c3:d1:f2:cf:18:d1:
         73:10:46:79:47:bb:86:5f:83:bd:95:0f:a1:cd:2c:c1:36:4e:
         c8:16:a0:d2:d5:08:69:1a:18:82:18:df:ad:94:28:c7:dd:24:
         3c:ba:f0:a5:2a:0e:63:50:3e:57:f0:69:fa:5e:f5:ee:df:b3:
         c5:32:fe:94:c0:07:3d:ae:3a:25:16:4e:e0:a6:3c:25:40:8a:
         29:95:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:15 2025 by rpki-client