Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
File:                     3230302e31382e3234302e302f32302d3234203d3e2031323531.roa (raw, json)
Hash identifier:          DEHF1uHB1JpyiEVxWrGSyaLXTAmWsVDPXNozQd/MVEw=
Subject key identifier:   9F:89:32:4D:0D:28:A0:58:B0:30:A2:C4:6A:66:5B:5C:BC:1A:CA:61
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       5436457D32226F0DD9E1AC9694073553109DDAFB
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:08 +0000
ROA not before:           Mon 14 Sep 2026 13:48:08 +0000
ROA not after:            Mon 13 Sep 2027 13:53:08 +0000
asID:                     1251
IP address blocks:        200.18.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:45:7d:32:22:6f:0d:d9:e1:ac:96:94:07:35:53:10:9d:da:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:08 2026 GMT
            Not After : Sep 13 13:53:08 2027 GMT
        Subject: CN=9F89324D0D28A058B030A2C46A665B5CBC1ACA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:ac:1a:d0:e9:a1:28:6e:49:e8:9d:89:be:
                    af:85:dc:5c:67:a0:3d:2f:73:d2:0b:64:13:e0:e5:
                    ab:cd:68:9d:b5:d0:e9:b0:5a:79:06:73:76:64:43:
                    fa:15:b2:17:e4:61:2d:f2:f7:42:9e:56:ab:d9:d1:
                    35:1f:50:19:3e:87:35:6e:da:7e:22:b8:21:5b:98:
                    6b:63:60:2a:d6:8f:78:1f:00:04:41:78:68:d5:78:
                    e1:2b:8d:b3:94:74:15:ed:b9:67:ac:6a:0a:f1:b2:
                    81:c1:b8:ce:33:30:7f:19:1b:5f:06:72:93:5f:25:
                    32:08:18:c2:cc:5d:9b:f3:27:f6:08:9c:07:28:6a:
                    f7:67:5d:b4:10:69:e9:1b:bc:1f:ac:a9:34:ea:bc:
                    23:76:96:c4:c5:41:72:91:9d:c3:96:bf:55:1e:3d:
                    34:0b:d9:dd:ad:67:68:6b:f9:b1:29:cd:2e:b5:a3:
                    89:db:28:9f:7d:06:3b:d6:2c:1d:84:5b:5b:a8:b4:
                    18:ef:24:38:82:c3:53:47:38:69:df:bb:33:27:d1:
                    99:82:aa:00:42:86:a7:b4:1a:37:4b:1f:b9:73:6c:
                    94:b9:bb:f0:53:45:6b:a7:40:e9:af:7a:18:e9:e9:
                    37:94:e2:62:e0:a3:d3:16:44:38:3b:8c:b1:6c:ea:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:32:4D:0D:28:A0:58:B0:30:A2:C4:6A:66:5B:5C:BC:1A:CA:61
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e3234302e302f32302d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:e2:c8:4f:50:27:32:b0:af:27:76:39:b8:cd:c0:bd:03:
         bf:8b:6f:62:ee:46:ec:75:ad:84:01:bf:9c:1f:fe:b7:26:d0:
         c8:9f:26:01:f0:00:ba:5a:13:10:ce:38:7a:c2:e1:62:88:82:
         98:c6:46:b6:6f:24:c1:3d:d4:b4:af:b0:4d:b9:72:d6:9f:c5:
         ef:70:f7:f9:23:3c:69:e4:d3:47:22:5e:a5:50:66:fc:ae:27:
         29:37:3e:7b:44:49:b3:1e:e5:4e:da:d9:28:1a:ce:3f:1c:9b:
         18:28:d6:34:df:30:da:5f:c4:23:e0:7a:04:5b:7a:9d:9e:7a:
         c5:8b:77:f7:25:3d:8b:20:75:fa:a7:a4:f2:ee:a6:bb:4f:09:
         b5:cc:5c:61:af:4e:33:72:57:02:b4:33:5f:10:19:86:36:bd:
         78:98:bb:77:b9:a4:5e:2c:23:fa:05:c6:53:64:16:72:18:d2:
         39:51:2a:4a:56:90:fd:c3:19:07:80:c3:b6:1e:15:6b:f2:8b:
         0b:b6:b4:10:40:b6:db:4e:77:48:4d:c4:bd:28:de:98:8a:5d:
         cd:8a:af:02:27:57:8d:95:05:61:14:a7:c8:b4:ad:95:0d:01:
         b4:f6:ae:76:45:74:1d:55:0f:08:3f:7f:19:a5:ac:26:3d:68:
         2f:f0:1a:3d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVDZFfTIibw3Z4ayWlAc1UxCd2vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MDhaFw0yNzA5MTMxMzUzMDhaMDMxMTAvBgNV
BAMTKDlGODkzMjREMEQyOEEwNThCMDMwQTJDNDZBNjY1QjVDQkMxQUNBNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeeqwa0OmhKG5J6J2Jvq+F3Fxn
oD0vc9ILZBPg5avNaJ210OmwWnkGc3ZkQ/oVshfkYS3y90KeVqvZ0TUfUBk+hzVu
2n4iuCFbmGtjYCrWj3gfAARBeGjVeOErjbOUdBXtuWesagrxsoHBuM4zMH8ZG18G
cpNfJTIIGMLMXZvzJ/YInAcoavdnXbQQaekbvB+sqTTqvCN2lsTFQXKRncOWv1Ue
PTQL2d2tZ2hr+bEpzS61o4nbKJ99BjvWLB2EW1uotBjvJDiCw1NHOGnfuzMn0ZmC
qgBChqe0GjdLH7lzbJS5u/BTRWunQOmvehjp6TeU4mLgo9MWRDg7jLFs6rw1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUn4kyTQ0ooFiwMKLEamZbXLwaymEwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTM4MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTMy
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMgS8DANBgkqhkiG9w0BAQsFAAOCAQEAMdXiyE9QJzKw
ryd2ObjNwL0Dv4tvYu5G7HWthAG/nB/+tybQyJ8mAfAAuloTEM44esLhYoiCmMZG
tm8kwT3UtK+wTbly1p/F73D3+SM8aeTTRyJepVBm/K4nKTc+e0RJsx7lTtrZKBrO
PxybGCjWNN8w2l/EI+B6BFt6nZ56xYt39yU9iyB1+qek8u6mu08JtcxcYa9OM3JX
ArQzXxAZhja9eJi7d7mkXiwj+gXGU2QWchjSOVEqSlaQ/cMZB4DDth4Va/KLC7a0
EEC22053SE3EvSjemIpdzYqvAidXjZUFYRSnyLStlQ0BtPaudkV0HVUPCD9/GaWs
Jj1oL/AaPQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:51:28 2026 by rpki-client