Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39342e302f32342d3234203d3e2031393136.roa
File:                     3230302e3134342e39342e302f32342d3234203d3e2031393136.roa (raw, json)
Hash identifier:          Z17ifll+uyfqTPbi2bAXoUbN5AN5xKAMqCewYe8EsHM=
Subject key identifier:   74:D1:18:8B:90:67:E7:4F:5A:DF:40:65:23:F9:0B:FD:8E:99:67:C5
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       58EB6BE1571D923034CC18646C5D085BF98D3F3D
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39342e302f32342d3234203d3e2031393136.roa
Signing time:             Mon 13 Oct 2025 13:46:23 +0000
ROA not before:           Mon 13 Oct 2025 13:41:23 +0000
ROA not after:            Mon 12 Oct 2026 13:46:23 +0000
asID:                     1916
IP address blocks:        200.144.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:eb:6b:e1:57:1d:92:30:34:cc:18:64:6c:5d:08:5b:f9:8d:3f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:23 2025 GMT
            Not After : Oct 12 13:46:23 2026 GMT
        Subject: CN=74D1188B9067E74F5ADF406523F90BFD8E9967C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:aa:55:45:23:13:66:9f:b7:3f:14:95:7f:
                    26:10:16:83:14:99:15:c9:81:b7:94:2f:a7:f1:d9:
                    71:7a:30:1a:d7:e9:67:1f:8b:12:91:34:78:da:36:
                    ef:79:81:54:75:50:1b:81:b7:40:11:c7:53:dd:4a:
                    6d:9c:7c:c6:2d:73:b3:0a:2f:d6:e4:85:a3:b6:db:
                    a5:66:2a:e8:61:b3:65:30:43:f5:80:fa:b2:3c:06:
                    c7:5b:7a:89:2d:7b:13:f7:06:61:38:dc:6e:90:3b:
                    3b:8f:71:13:c6:67:bf:a9:56:42:1e:bb:c7:8b:c6:
                    0a:91:25:c3:9b:ba:10:c9:91:b2:39:b1:7d:6f:80:
                    9c:c2:7a:ff:c3:db:3b:5f:cd:3d:5d:f4:08:fc:58:
                    29:f4:b2:ac:e2:f2:20:12:38:ca:02:24:ba:d1:37:
                    f2:8b:f9:75:da:46:88:f5:6a:01:6c:60:50:ac:a5:
                    7a:42:5f:13:f7:0f:b3:27:ff:ef:fd:da:53:52:5a:
                    39:20:e1:0b:e1:4a:86:cf:08:d2:22:c4:4c:c9:a4:
                    67:01:04:af:c1:73:dd:89:47:b0:ab:6e:c4:64:5e:
                    f1:2f:5f:ee:12:cf:6c:64:15:3b:9f:99:c9:6a:6d:
                    1f:2f:18:c6:b3:95:07:25:a8:c3:4a:8d:6d:34:2c:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:18:8B:90:67:E7:4F:5A:DF:40:65:23:F9:0B:FD:8E:99:67:C5
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39342e302f32342d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:36:75:25:0a:d6:04:e3:07:65:a0:3d:5a:3c:ec:9d:7a:9e:
         d2:10:2b:b0:25:d2:a0:58:c9:88:78:32:9d:37:ad:2d:a4:d0:
         ec:e8:d9:3d:1c:3d:d4:ad:f4:d6:4c:62:73:ac:16:69:50:c1:
         4c:df:d2:64:fa:f6:49:0e:c8:05:18:85:e7:f0:7b:f1:19:28:
         bb:0a:d1:5a:44:b6:26:14:5a:ea:9f:8a:b3:57:65:4f:75:de:
         50:ac:69:f4:94:fc:fa:a3:a6:2c:32:eb:d3:05:90:6c:fc:2d:
         14:b9:8e:48:24:9f:a8:e9:46:93:24:ca:82:67:84:62:07:9d:
         67:52:64:32:a0:6f:8c:1d:44:8a:0c:0b:cf:37:5c:9e:56:24:
         53:0d:7f:15:98:81:7d:7a:5b:e8:76:a6:3f:57:cc:eb:ae:6f:
         d1:69:86:04:5f:5b:b8:96:ed:87:b7:0a:49:64:6d:2b:1e:4e:
         14:9d:c4:d3:f2:ca:5a:e1:e6:c3:26:40:b9:af:05:92:41:32:
         fa:13:04:08:8c:11:04:c3:8d:44:bc:b3:21:c9:15:83:90:47:
         17:20:ea:0b:2f:06:e7:ab:d5:4f:3b:ef:78:8e:4a:0c:a1:f1:
         4f:aa:9a:78:70:d2:49:1c:b6:7e:39:c7:c9:c5:f0:65:f1:f9:
         76:3c:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:19 2025 by rpki-client