Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35332e302f32342d3234203d3e203238353731.roa
File:                     3230302e31382e35332e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier:          Qp6e/7PIhfxacvfurF1yUMFNdE17RZ0jOZWnXq1OvEA=
Subject key identifier:   74:1B:BB:E7:DF:3C:28:64:61:87:D4:D0:D9:A4:A0:84:08:E4:09:69
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       66870792C7A2A496737F39133B46AE79F1BC61CE
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35332e302f32342d3234203d3e203238353731.roa
Signing time:             Mon 14 Sep 2026 13:53:23 +0000
ROA not before:           Mon 14 Sep 2026 13:48:23 +0000
ROA not after:            Mon 13 Sep 2027 13:53:23 +0000
asID:                     28571
IP address blocks:        200.18.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:87:07:92:c7:a2:a4:96:73:7f:39:13:3b:46:ae:79:f1:bc:61:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:23 2026 GMT
            Not After : Sep 13 13:53:23 2027 GMT
        Subject: CN=741BBBE7DF3C28646187D4D0D9A4A08408E40969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:cb:98:5e:e8:bf:9f:90:53:a2:c7:fb:8f:
                    83:8c:17:d8:92:30:6d:77:25:0e:64:5a:bc:ee:7e:
                    24:8a:0a:02:0b:c8:7a:f7:fe:a3:f4:99:86:a6:b6:
                    1f:c8:0c:cc:11:9e:c4:8e:e1:b1:db:40:ac:48:f6:
                    b1:88:90:c5:86:41:07:69:4a:ae:a7:7b:3f:c6:fe:
                    90:33:96:59:bf:6d:92:24:7d:22:d9:44:d6:9d:d5:
                    04:b8:71:a5:59:b1:a2:04:4d:4b:19:4a:2d:0b:15:
                    9a:56:54:d8:e7:01:a1:f0:82:59:d6:63:b7:b9:40:
                    34:56:ac:24:25:b7:91:6d:2a:b4:93:49:cc:49:dd:
                    f6:cf:8d:18:7b:b4:87:38:97:f6:30:ce:74:46:0b:
                    50:9c:77:93:b9:aa:c4:86:13:66:30:81:71:34:fe:
                    3a:22:de:08:f8:6a:eb:4f:4d:78:e2:5c:8b:22:3a:
                    9f:c5:34:3e:9f:78:ca:03:43:06:47:eb:25:c9:99:
                    d8:9a:2b:74:92:57:f3:e2:88:83:3b:80:ed:7a:92:
                    07:69:88:06:72:3c:24:87:a1:38:26:fc:7d:c7:f0:
                    d5:76:fb:28:ea:76:b6:6e:de:ef:e6:81:fd:1f:1d:
                    4d:39:59:2e:db:f5:a3:31:74:bd:50:d7:f8:73:3a:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1B:BB:E7:DF:3C:28:64:61:87:D4:D0:D9:A4:A0:84:08:E4:09:69
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35332e302f32342d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:29:f8:a9:ec:a1:55:56:72:8a:7e:ed:a6:6e:e1:55:d8:4a:
         07:4d:d5:0f:73:e7:43:03:bc:9d:89:8c:4e:55:c0:ee:5f:9e:
         3d:3e:6e:48:0e:96:12:83:f8:e3:09:9b:61:c9:cf:b9:3b:62:
         59:aa:3e:25:c4:2e:ca:62:41:3c:76:cc:60:3c:0f:67:7a:c2:
         29:9f:07:af:7e:d0:10:11:7d:c0:52:46:f8:70:35:15:58:95:
         b9:0c:87:3f:e9:62:44:d1:7f:db:bb:f2:e6:81:1f:07:45:e5:
         8b:35:c8:7a:b2:69:ed:aa:06:83:75:d5:e6:62:b3:03:ba:b5:
         ab:a2:2d:22:35:70:cd:ea:53:39:3e:70:02:14:72:eb:fc:a4:
         18:29:d2:d9:3b:da:76:9b:20:fe:a9:c4:fa:29:28:61:33:c2:
         76:e7:ed:80:60:f3:c6:72:3b:bd:e5:33:f9:37:7f:82:53:f7:
         98:a6:2f:5e:a7:0d:ec:df:07:16:d2:55:e6:aa:21:e4:13:78:
         9e:13:ec:3f:47:bd:9d:2e:05:44:f8:26:66:6f:06:c6:10:5f:
         7f:57:9d:55:40:eb:1e:82:c0:b9:ff:cc:50:6a:20:72:9f:4b:
         0c:06:c0:01:aa:91:1c:25:c7:fd:65:a3:64:d2:d3:4e:98:8f:
         38:68:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:18:16 2026 by rpki-client