Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130362e302f32332d3234203d3e203238353731.roa
File:                     3230302e31382e3130362e302f32332d3234203d3e203238353731.roa (raw, json)
Hash identifier:          A/qGq8Kv2voZPPemp7rFpue+J7rKboxDiTf61a9b8Yo=
Subject key identifier:   AE:19:7B:9F:38:75:75:7E:E3:DE:74:99:41:02:A0:A1:21:8D:1D:F1
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       37882B1005E8DC2B4CFFF172FAD67F83C0C2EC8B
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130362e302f32332d3234203d3e203238353731.roa
Signing time:             Mon 14 Sep 2026 13:53:12 +0000
ROA not before:           Mon 14 Sep 2026 13:48:12 +0000
ROA not after:            Mon 13 Sep 2027 13:53:12 +0000
asID:                     28571
IP address blocks:        200.18.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 18:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:88:2b:10:05:e8:dc:2b:4c:ff:f1:72:fa:d6:7f:83:c0:c2:ec:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:12 2026 GMT
            Not After : Sep 13 13:53:12 2027 GMT
        Subject: CN=AE197B9F3875757EE3DE74994102A0A1218D1DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:9b:1e:80:66:4f:d0:56:66:b5:95:3b:19:
                    25:ca:41:28:a9:23:b6:c5:17:92:dc:55:30:16:97:
                    24:1d:b5:f8:6d:07:77:0d:b0:df:18:73:fb:83:85:
                    c2:9c:f8:ff:cb:74:f8:b5:8a:7d:20:de:08:e3:86:
                    ff:c6:29:85:f5:a1:ba:dd:63:06:15:bc:f0:00:8c:
                    ad:90:32:3b:b6:0b:7a:f7:70:31:a6:b2:6a:44:5f:
                    1a:93:5a:eb:20:71:72:b1:17:fa:fb:8f:95:58:b8:
                    a4:88:bd:f8:96:33:dd:a5:1f:5c:04:b4:e1:84:c1:
                    9a:be:b3:be:d5:4b:02:1e:85:c3:7d:e5:b9:5d:2e:
                    5d:5c:e9:3d:87:c6:5b:79:6a:22:7d:33:a1:00:71:
                    34:48:04:aa:c0:3d:96:71:49:04:2e:5e:37:e3:b0:
                    a9:ba:9a:b1:df:a0:f1:6c:d3:ea:55:73:1f:a4:18:
                    16:12:17:99:77:40:8b:6b:48:51:c7:a2:f2:d0:55:
                    60:ce:73:3e:0c:ed:76:22:1b:23:34:fc:96:17:d0:
                    00:02:67:af:c1:1f:e1:76:af:c4:61:a2:12:a1:72:
                    d7:87:e7:e0:9c:24:2a:52:d3:d1:ed:d0:a0:82:39:
                    14:ad:ab:a7:bf:b4:ee:d7:82:86:48:64:ed:9a:b6:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:7B:9F:38:75:75:7E:E3:DE:74:99:41:02:A0:A1:21:8D:1D:F1
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3130362e302f32332d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:99:28:c0:53:02:85:9a:7a:3a:3b:a3:4b:9d:c5:90:cc:
         1e:b6:36:b9:22:59:1d:be:14:84:eb:29:4d:9b:19:e0:01:fa:
         06:1a:ee:1e:3a:94:74:bd:d0:b7:c5:0c:f5:f6:3c:02:0a:2b:
         b9:cc:4c:73:cb:b9:57:23:60:e4:76:10:f8:dc:8a:9b:2b:7f:
         5f:72:f5:8a:66:33:61:ee:c7:cd:47:43:2a:0f:91:da:e9:4e:
         4c:fb:b0:df:eb:0f:73:26:67:7d:10:48:c7:e7:47:50:a7:97:
         7f:d7:a3:87:bd:14:e0:e1:f6:88:3f:09:65:52:39:f5:6d:d1:
         bd:a5:c1:7b:02:98:bb:c1:e7:c8:cb:e6:94:50:06:5f:28:d2:
         71:8a:2a:7d:74:e2:5c:25:37:b7:b3:08:a8:cb:04:56:a5:76:
         34:d7:fd:cc:1a:c5:97:f8:95:19:5b:02:a4:2c:00:fa:a8:e4:
         30:d3:06:01:65:b3:38:a3:70:38:9a:ca:fa:d5:35:d6:87:ce:
         5f:49:8a:21:72:76:2f:27:dc:36:78:7c:18:18:42:b9:92:b2:
         0d:44:ee:1c:bf:95:c6:7f:dc:27:eb:03:05:5e:47:c9:81:a6:
         c5:51:5a:68:d9:05:b9:96:bb:00:38:8d:7d:1e:34:0e:07:82:
         b9:30:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:17:31 2026 by rpki-client