Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35342e302f32332d3234203d3e2031323531.roa
File:                     3230302e31382e35342e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          RdQ3NADuvmNQYI8nrXg+vfaWcoImUTT5X4irMs4tpHY=
Subject key identifier:   79:AF:72:BE:5C:DD:83:A3:75:1E:0F:48:4A:9C:81:1A:A4:2C:31:33
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       2C0EB82113897751677D1470831C9EBE5149D2FF
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35342e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:14 +0000
ROA not before:           Mon 14 Sep 2026 13:48:14 +0000
ROA not after:            Mon 13 Sep 2027 13:53:14 +0000
asID:                     1251
IP address blocks:        200.18.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0e:b8:21:13:89:77:51:67:7d:14:70:83:1c:9e:be:51:49:d2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:14 2026 GMT
            Not After : Sep 13 13:53:14 2027 GMT
        Subject: CN=79AF72BE5CDD83A3751E0F484A9C811AA42C3133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:f8:57:7a:5a:6c:20:f8:20:bf:67:46:ef:
                    1a:8c:52:04:46:e0:db:63:28:42:20:de:b7:0d:4f:
                    b1:45:d6:7b:1a:60:05:3b:f4:cc:0b:7d:34:94:43:
                    03:0c:75:c1:34:44:3e:ca:4a:81:1a:a4:d5:07:1d:
                    4b:07:5c:4b:36:01:34:3c:17:cd:13:57:5c:f2:a5:
                    8b:c0:13:df:46:cd:e4:24:cf:95:61:8e:e3:f3:15:
                    5b:e0:18:68:c0:6e:8e:01:36:b1:fe:15:86:97:cd:
                    6a:59:19:2c:be:9e:3b:51:b2:28:14:eb:36:c4:5e:
                    8c:3a:27:cf:79:78:c1:46:fc:36:74:dd:8f:af:94:
                    47:4d:a1:58:a8:c5:a3:d4:e3:5e:44:6e:29:5a:08:
                    d4:3f:64:77:05:72:89:40:0f:d4:20:fc:d6:08:0e:
                    09:b2:4c:58:34:ae:72:ab:e5:38:96:f3:b2:37:37:
                    ba:55:5f:8b:cb:d0:af:b9:22:5f:11:ce:1a:7a:c6:
                    ae:0f:0e:36:a2:a0:75:ab:af:c5:7a:8c:03:c4:ce:
                    f7:7c:9d:c3:16:52:00:6e:ab:d8:5d:67:3d:26:7d:
                    42:44:89:e4:54:5b:4e:b2:26:ff:df:d9:cc:06:a1:
                    5d:79:e9:7e:14:31:53:12:bd:fd:6e:f2:f5:9a:f0:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:72:BE:5C:DD:83:A3:75:1E:0F:48:4A:9C:81:1A:A4:2C:31:33
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31382e35342e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:29:76:28:77:1e:7c:10:ac:7e:ae:d0:39:32:39:12:ab:15:
         1c:21:68:39:c9:2e:73:dd:f8:00:fa:25:de:2a:56:6d:c0:d4:
         81:4b:6e:d1:2f:33:01:3b:43:88:9b:8d:d8:05:0a:77:e2:0a:
         d3:8c:3e:fa:a2:fb:b8:84:93:30:70:9c:2c:69:79:32:ae:f7:
         56:2d:0f:79:67:82:31:cf:70:36:a1:2c:5c:b3:be:7e:25:2a:
         7a:81:3b:ed:33:04:74:54:cf:b5:d0:96:f7:1b:8c:ec:63:99:
         c0:af:19:33:70:dc:d2:73:d7:d5:ad:18:40:cd:7e:04:30:ec:
         a3:f4:46:69:05:cb:2c:42:f8:60:89:c9:cb:79:12:84:f3:94:
         3e:0b:06:0a:15:7e:cc:9c:12:79:b6:38:62:78:63:b6:b1:21:
         19:3c:11:1c:1a:9e:c5:41:06:6f:1a:70:88:32:0b:2d:e7:0e:
         c3:70:6b:26:20:0a:75:61:2e:26:8b:36:27:73:10:b6:c9:27:
         f4:9d:8a:3a:d2:9b:de:ac:a1:8f:76:6d:84:e1:d0:8f:e7:fa:
         2b:77:13:09:4d:57:18:d4:02:64:8d:f0:b2:f4:96:6c:54:30:
         84:bd:a0:ba:ca:a3:48:88:44:c4:46:e7:ee:b9:de:7a:8d:4c:
         52:67:4b:5b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIULA64IROJd1FnfRRwgxyevlFJ0v8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MTRaFw0yNzA5MTMxMzUzMTRaMDMxMTAvBgNV
BAMTKDc5QUY3MkJFNUNERDgzQTM3NTFFMEY0ODRBOUM4MTFBQTQyQzMxMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsfhXelpsIPggv2dG7xqMUgRG
4NtjKEIg3rcNT7FF1nsaYAU79MwLfTSUQwMMdcE0RD7KSoEapNUHHUsHXEs2ATQ8
F80TV1zypYvAE99GzeQkz5VhjuPzFVvgGGjAbo4BNrH+FYaXzWpZGSy+njtRsigU
6zbEXow6J895eMFG/DZ03Y+vlEdNoVioxaPU415EbilaCNQ/ZHcFcolAD9Qg/NYI
DgmyTFg0rnKr5TiW87I3N7pVX4vL0K+5Il8Rzhp6xq4PDjaioHWrr8V6jAPEzvd8
ncMWUgBuq9hdZz0mfUJEieRUW06yJv/f2cwGoV156X4UMVMSvf1u8vWa8D9hAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUea9yvlzdg6N1Hg9ISpyBGqQsMTMwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTM4MmUzNTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMjM1
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHIEjYwDQYJKoZIhvcNAQELBQADggEBADspdih3HnwQrH6u
0DkyORKrFRwhaDnJLnPd+AD6Jd4qVm3A1IFLbtEvMwE7Q4ibjdgFCnfiCtOMPvqi
+7iEkzBwnCxpeTKu91YtD3lngjHPcDahLFyzvn4lKnqBO+0zBHRUz7XQlvcbjOxj
mcCvGTNw3NJz19WtGEDNfgQw7KP0RmkFyyxC+GCJyct5EoTzlD4LBgoVfsycEnm2
OGJ4Y7axIRk8ERwansVBBm8acIgyCy3nDsNwayYgCnVhLiaLNidzELbJJ/SdijrS
m96soY92bYTh0I/n+it3EwlNVxjUAmSN8LL0lmxUMIS9oLrKo0iIRMRG5+653nqN
TFJnS1s=
-----END CERTIFICATE-----
Generated at Wed Oct 14 05:06:24 2026 by rpki-client