Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232342e302f32322d3234203d3e2031323531.roa
File:                     3230302e31392e3232342e302f32322d3234203d3e2031323531.roa (raw, json)
Hash identifier:          1ceZnCF/XEA7mHXdG0bDGirYLGEQNP29Qy8P1MB7w8s=
Subject key identifier:   A0:D0:67:87:4F:8E:0C:65:C2:17:8E:C4:87:60:B3:82:05:E5:65:2A
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       0345A5ECA70B19967DC18A3CE92287F5DF4BB33B
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232342e302f32322d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:19 +0000
ROA not before:           Mon 13 Oct 2025 13:41:19 +0000
ROA not after:            Mon 12 Oct 2026 13:46:19 +0000
asID:                     1251
IP address blocks:        200.19.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:45:a5:ec:a7:0b:19:96:7d:c1:8a:3c:e9:22:87:f5:df:4b:b3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:19 2025 GMT
            Not After : Oct 12 13:46:19 2026 GMT
        Subject: CN=A0D067874F8E0C65C2178EC48760B38205E5652A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:b3:a1:02:ee:e1:99:18:53:2f:f6:91:14:
                    89:36:bf:8c:5d:c0:97:0f:f2:0d:c1:6a:17:3c:35:
                    e5:dc:2b:d7:fe:fa:b4:68:be:06:53:ed:89:20:35:
                    63:eb:d6:c1:cd:62:e2:21:bc:5f:43:43:e2:70:86:
                    5a:5c:50:55:3a:8f:66:e6:47:f3:38:83:8a:4c:f8:
                    83:4e:85:1b:46:eb:d6:60:18:c7:b3:e8:36:09:74:
                    80:92:09:ea:44:8e:38:d5:82:03:66:de:ca:10:d0:
                    68:39:f1:be:08:f1:47:f8:aa:22:8f:a0:d7:d0:b7:
                    7a:15:b4:2e:ae:fc:c7:70:e3:02:44:d4:53:7a:d6:
                    5b:47:8b:d7:5e:cd:05:85:e1:29:3c:d3:88:ae:c1:
                    2a:d4:c1:e0:5f:fb:1e:90:15:af:6b:fb:e5:32:74:
                    f2:eb:ff:ab:2e:fe:50:fd:33:a1:3f:bd:ab:00:94:
                    0b:68:c3:5a:6e:ac:1e:db:9f:b8:69:03:3a:71:fc:
                    ce:e2:71:37:c1:58:c5:6a:e3:cb:4e:d1:79:95:be:
                    7e:43:30:ea:08:12:c3:b0:2d:9b:1c:93:96:2e:f4:
                    7e:ea:bc:71:01:97:fa:20:69:41:7b:d9:de:75:00:
                    18:1b:ce:c6:1c:69:17:02:72:44:1f:5b:3c:a3:50:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:67:87:4F:8E:0C:65:C2:17:8E:C4:87:60:B3:82:05:E5:65:2A
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232342e302f32322d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:0a:56:b8:45:f5:f4:06:53:2e:99:89:8c:5c:d4:d9:9d:
         76:df:93:d0:ee:79:3c:16:8b:76:92:9c:fe:12:11:9f:fa:75:
         1a:b1:31:58:af:c3:cc:9c:38:11:f7:d9:c9:5d:e1:1d:60:c0:
         dc:99:a5:fa:d4:d7:5a:92:2d:1f:a7:03:5a:39:a6:20:70:e7:
         93:17:cf:da:6e:f9:ed:22:5a:7b:b4:7d:10:d4:06:46:a6:0c:
         93:2e:3a:03:1d:ed:cd:d0:e2:e7:9f:6d:4a:76:0a:5b:f2:db:
         bc:9e:bf:99:70:07:45:0f:1e:5e:95:b3:e8:fd:4e:77:3a:ca:
         bb:d2:06:03:6c:3d:50:e5:8b:86:74:f6:fe:80:f4:bc:46:66:
         da:fa:99:91:8e:31:67:fd:22:82:b3:6a:df:87:21:fb:1b:e6:
         37:b2:80:e3:8e:b9:28:e2:72:10:85:0c:a1:f0:56:51:58:aa:
         89:1b:0e:4f:7c:d7:05:27:4f:6a:f3:6c:19:85:50:57:20:33:
         20:51:d1:c3:21:cc:92:77:92:04:81:af:49:44:5a:0f:43:ab:
         2a:98:dd:49:37:b9:fd:fd:3b:d5:2b:7e:c2:af:e0:f0:8f:82:
         ae:4e:f9:65:f6:07:8a:d6:4c:01:64:18:db:06:01:10:24:df:
         6c:c6:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:06 2025 by rpki-client