Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130342e302f32332d3234203d3e203532383838.roa
File:                     3230302e31382e3130342e302f32332d3234203d3e203532383838.roa (raw, json)
Hash identifier:          zz0NJsMiE9mFEIUDbE8jdFdi+5/3h7fQZ1XASCkyyuY=
Subject key identifier:   21:A9:72:76:C6:00:20:B9:90:A8:70:7F:FE:D4:1D:3D:66:19:DB:3E
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       61153C1970D0B98C9165CDE174C432CFE5EF8743
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130342e302f32332d3234203d3e203532383838.roa
Signing time:             Mon 13 Oct 2025 13:46:29 +0000
ROA not before:           Mon 13 Oct 2025 13:41:29 +0000
ROA not after:            Mon 12 Oct 2026 13:46:29 +0000
asID:                     52888
IP address blocks:        200.18.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:3c:19:70:d0:b9:8c:91:65:cd:e1:74:c4:32:cf:e5:ef:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:29 2025 GMT
            Not After : Oct 12 13:46:29 2026 GMT
        Subject: CN=21A97276C60020B990A8707FFED41D3D6619DB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:f1:ce:9f:28:f6:1f:53:b0:71:c0:97:91:
                    79:fb:99:42:67:48:4e:47:e4:41:fe:ca:8d:82:9c:
                    ab:41:b8:68:32:54:5b:b0:1f:04:52:6f:02:00:b1:
                    b8:58:29:27:03:de:97:45:9a:a4:61:79:f9:92:33:
                    a9:2b:05:27:a6:ee:dd:06:d3:0d:d2:42:80:b3:41:
                    32:36:f8:60:19:95:32:d7:a7:cb:9b:f6:50:f1:7a:
                    12:60:b2:6b:7b:28:da:97:04:de:2e:06:94:18:ab:
                    b4:cd:fe:9e:e1:b3:f5:86:33:41:05:b5:d8:da:7a:
                    c5:21:87:e2:06:c9:01:04:71:73:9c:8a:96:6d:9a:
                    44:6c:c1:2b:a4:de:c9:d6:4c:56:95:b7:61:e9:71:
                    0b:00:81:6b:ed:34:58:dc:3c:e7:1e:24:67:d2:4d:
                    69:38:af:39:7d:b1:73:fd:2b:e7:d5:ac:8c:6c:8b:
                    3d:2f:c5:71:1e:d7:00:6b:6b:04:46:16:fc:23:64:
                    1b:4f:7d:8c:2f:4d:46:d5:0e:00:57:29:5d:67:ee:
                    bd:90:56:82:35:12:37:fd:5a:6f:fa:ac:2f:20:83:
                    53:20:9f:56:1a:28:c0:0d:60:af:27:03:1c:8a:f6:
                    2e:b8:3f:94:d2:38:cf:59:09:d5:e8:2a:39:a2:1d:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:72:76:C6:00:20:B9:90:A8:70:7F:FE:D4:1D:3D:66:19:DB:3E
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130342e302f32332d3234203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:8e:a0:49:ae:0a:59:6f:f4:45:d3:3c:9e:a8:9d:81:e9:
         05:28:49:5a:3c:36:ed:01:a1:20:ff:fc:9e:5d:b7:5f:9c:55:
         9b:4a:18:10:3e:fe:bf:f0:63:b9:79:a9:46:7f:7f:b9:2c:cc:
         c6:77:90:be:fd:40:4c:37:88:38:83:66:3f:24:e9:34:b3:0d:
         64:db:ea:f1:52:f5:44:9f:ca:3b:78:25:92:cf:46:9c:f7:af:
         37:6d:52:cf:d4:ce:ab:97:f1:c4:23:7a:ac:4d:29:4f:ea:dd:
         1e:38:94:b0:43:27:1c:bd:e4:9f:50:98:a6:58:55:24:da:bd:
         e5:b4:e7:9d:b7:f0:60:32:ef:43:bd:8d:73:90:12:c9:3b:9e:
         a2:ef:80:8b:35:77:11:ae:63:e5:de:7f:00:c2:37:05:90:60:
         b8:d8:8d:ea:ef:b2:32:dc:c1:59:5d:b1:26:ad:88:83:9f:a9:
         be:57:17:25:29:28:ff:56:dc:2c:79:30:e5:fa:e8:70:ce:20:
         40:94:37:61:b8:e9:93:18:e3:23:4e:c5:59:da:63:60:83:95:
         b7:e0:7a:9d:fe:23:3e:4a:fd:e5:05:d0:a0:3d:bc:dd:7a:a8:
         9b:95:dd:44:fc:60:1c:bb:63:d6:aa:8c:13:dc:2b:f5:e9:d2:
         80:c3:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:21 2025 by rpki-client