Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
File:                     3230302e31382e3234302e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier:          fu4Yj7lhlWiyVOF0NSp8JziFucmPgAL9kY7qGGUbGzE=
Subject key identifier:   70:C5:D6:CA:7B:28:74:D1:5B:85:10:92:1E:39:EE:E0:7A:31:F8:65
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       581F684DB483AFADFF5C2EF1BEF817EE5DD20C8E
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:22 +0000
ROA not before:           Mon 13 Oct 2025 13:41:22 +0000
ROA not after:            Mon 12 Oct 2026 13:46:22 +0000
asID:                     1251
IP address blocks:        200.18.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1f:68:4d:b4:83:af:ad:ff:5c:2e:f1:be:f8:17:ee:5d:d2:0c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:22 2025 GMT
            Not After : Oct 12 13:46:22 2026 GMT
        Subject: CN=70C5D6CA7B2874D15B8510921E39EEE07A31F865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:a8:61:58:2b:76:39:db:dc:6f:a3:33:51:
                    6e:e2:00:a2:85:cb:69:d5:58:24:7e:ef:4b:bb:63:
                    35:a6:be:3b:20:db:59:b1:86:58:4d:91:c8:67:82:
                    83:f2:bc:43:d4:96:0d:14:7b:66:c9:b7:10:a9:84:
                    e9:a5:bb:d9:7f:aa:e0:1c:4b:4c:23:45:5a:43:0f:
                    e0:4d:c7:78:14:1d:7b:d6:0a:04:05:fe:60:6d:5f:
                    68:59:d0:1e:c8:b2:47:e8:e2:1b:21:1d:d5:36:dc:
                    23:23:dd:a9:37:26:17:5a:d2:b7:e7:ac:9f:a9:9a:
                    36:2f:17:9b:24:38:30:69:24:b5:fe:f0:3b:cd:38:
                    92:55:c8:5a:19:b1:13:cd:01:7c:b3:6c:fc:92:1d:
                    55:2b:47:76:b5:85:1d:b5:54:c5:a7:7e:47:dc:53:
                    94:fc:f8:d1:77:34:f6:ef:02:c8:2c:84:3a:64:dd:
                    b2:a0:f9:0b:81:6f:e8:64:e6:13:0f:17:4c:61:a1:
                    89:10:5d:97:79:41:34:ee:45:9c:68:24:6e:39:d6:
                    78:8f:3b:8b:94:ae:51:48:bb:97:7e:2f:b7:bd:9a:
                    2d:c7:df:d5:70:38:fc:c7:e5:05:b8:a0:c1:be:c0:
                    cd:3d:bb:1e:60:ef:f3:5c:f6:1e:9d:b4:80:14:00:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:D6:CA:7B:28:74:D1:5B:85:10:92:1E:39:EE:E0:7A:31:F8:65
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:5a:0b:5a:f1:97:dd:a8:08:f3:6f:13:d1:af:ea:27:65:
         13:95:e1:12:63:20:8d:7f:af:e0:3a:96:66:47:29:67:6c:07:
         96:cc:ce:57:d0:17:f8:b1:08:70:f2:d5:67:30:ee:7b:4a:25:
         04:e5:f0:ae:e4:a4:8d:4a:60:60:71:cb:31:0a:ab:24:47:47:
         4f:44:2b:87:8e:5a:20:4c:0b:03:84:20:6c:79:1d:35:03:76:
         80:fa:5a:28:f2:72:03:93:10:04:80:a5:58:d9:5d:48:25:b5:
         a5:a5:f2:e1:f4:0e:ff:34:3e:35:39:63:06:94:40:c1:05:b2:
         47:45:64:60:41:20:c1:19:c5:54:10:84:dc:95:6a:4b:e7:6d:
         81:78:89:31:e0:09:cf:8f:d5:6a:77:15:6a:2a:2a:59:fe:85:
         34:68:d2:1e:b5:94:7b:80:76:42:8f:53:5a:12:46:86:27:0f:
         e5:77:97:c4:fb:a1:88:58:5f:d9:88:c6:09:20:e8:7f:2f:37:
         b5:c7:5e:3f:47:7a:91:92:58:cc:be:03:3f:01:9f:92:bf:e4:
         87:25:97:7e:5e:b6:07:6e:06:e8:6a:f6:91:24:c0:2b:0c:0d:
         79:aa:36:fe:d4:68:2e:e7:a2:5e:a0:9d:4e:eb:d6:37:0d:e3:
         b1:ea:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:35 2025 by rpki-client