Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35342e302f32332d3234203d3e2031323531.roa
File:                     3230302e31382e35342e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          UxO2MN4hF6AgLq45fSi+PzZdQl+mye2LF8kPy6yVmb4=
Subject key identifier:   E0:BC:05:90:FF:DD:1E:22:54:1F:B0:F7:F2:97:22:90:6D:E1:11:24
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       31F4E8269836380E390759496C9AB7C15DAA4A58
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35342e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:26 +0000
ROA not before:           Mon 13 Oct 2025 13:41:26 +0000
ROA not after:            Mon 12 Oct 2026 13:46:26 +0000
asID:                     1251
IP address blocks:        200.18.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f4:e8:26:98:36:38:0e:39:07:59:49:6c:9a:b7:c1:5d:aa:4a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:26 2025 GMT
            Not After : Oct 12 13:46:26 2026 GMT
        Subject: CN=E0BC0590FFDD1E22541FB0F7F29722906DE11124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:fd:b4:37:6b:b2:9e:e8:1d:1b:cf:88:99:
                    ba:23:c9:5f:6e:68:9f:6c:5b:8d:81:98:66:65:d2:
                    40:9f:c3:0a:d3:4d:43:be:d3:6d:70:98:dc:ef:0e:
                    e0:ba:53:db:ce:6c:24:e4:a1:ac:94:0d:63:ab:0c:
                    65:ea:a9:6b:28:6c:95:f4:4f:9d:3e:05:97:bd:73:
                    42:20:5a:32:a1:ba:21:84:c0:88:73:cd:af:1b:6c:
                    db:66:c2:d7:a6:d3:1e:c0:1f:05:21:7b:c6:74:1d:
                    6d:28:59:c5:eb:7f:56:7f:38:bf:04:6d:ca:7d:18:
                    5e:02:96:a0:d3:ac:a6:b4:2d:e1:d7:96:73:4e:f8:
                    16:6a:30:36:c3:1d:35:61:0c:f7:85:a7:10:d6:05:
                    02:63:be:bc:17:b7:98:d4:d8:43:1c:cb:bb:c5:aa:
                    c2:f7:b4:d7:15:bb:b7:e5:cc:55:a1:55:f2:4c:d1:
                    65:32:e0:bf:e9:38:bf:d6:58:e3:3f:c1:cf:e3:23:
                    91:8f:c2:ea:0c:52:09:b6:36:e7:f4:28:03:0a:fd:
                    66:4e:b3:47:33:48:19:f9:15:da:2c:4b:17:ac:d6:
                    c5:98:71:81:73:76:e6:24:66:a4:7d:a4:85:6d:e6:
                    f0:8a:bf:68:b6:b6:00:04:68:bb:8a:63:6c:76:62:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:05:90:FF:DD:1E:22:54:1F:B0:F7:F2:97:22:90:6D:E1:11:24
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35342e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:bc:60:dc:7d:14:79:5a:56:fc:46:fb:bb:bd:f7:34:c7:
         c7:b5:ee:e9:1c:05:aa:37:49:88:21:e8:5c:a9:51:c1:54:04:
         2c:bb:e1:97:b7:df:4e:27:26:1a:b1:1d:de:43:83:9c:c1:5b:
         76:d2:56:8d:32:fb:dd:2a:05:e9:42:6f:25:63:e3:ec:25:f7:
         0d:1e:c3:2b:57:11:a4:1d:ae:49:7a:82:f5:b9:d0:74:4a:56:
         a3:0d:bd:f1:e2:af:6a:b0:52:dd:a3:43:c8:60:a7:6f:7f:ea:
         bc:9f:63:6a:a5:28:2d:fa:9d:e5:61:7d:e3:6a:6a:58:c2:cc:
         73:a1:ef:50:ab:b5:c3:3b:2f:3d:f0:5f:78:67:2f:24:6e:4a:
         2f:07:29:0a:fa:e6:0d:09:a2:ef:c6:52:29:de:54:af:07:a8:
         7a:75:70:a2:b9:a6:ae:6b:66:7d:21:6e:df:d5:4b:0c:41:e6:
         ea:ac:71:89:32:ef:48:0e:da:68:0c:28:8a:56:ea:3d:0f:07:
         e5:ff:e9:47:69:b6:3b:fb:12:16:4a:97:d4:99:9a:73:63:04:
         83:9f:53:b0:d4:ce:06:8b:46:af:fb:90:11:9c:a9:2a:6a:10:
         90:e6:7b:2d:01:fb:d9:36:15:33:e4:35:e6:f9:1d:ec:f1:bd:
         ce:a2:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:04 2025 by rpki-client