Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232342e302f32322d3234203d3e2031323531.roa
File:                     3230302e31392e3232342e302f32322d3234203d3e2031323531.roa (raw, json)
Hash identifier:          FEARTUKSUC2l3WjBTpskaP+JyWihaxYxc9lZxicfbW0=
Subject key identifier:   52:07:40:7A:5A:95:13:46:BD:F3:07:BE:44:88:16:59:F9:56:57:19
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       4BBA73091A873384CBE476BF5165F0B121D6027A
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232342e302f32322d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:21 +0000
ROA not before:           Mon 14 Sep 2026 13:48:21 +0000
ROA not after:            Mon 13 Sep 2027 13:53:21 +0000
asID:                     1251
IP address blocks:        200.19.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ba:73:09:1a:87:33:84:cb:e4:76:bf:51:65:f0:b1:21:d6:02:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:21 2026 GMT
            Not After : Sep 13 13:53:21 2027 GMT
        Subject: CN=5207407A5A951346BDF307BE44881659F9565719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:99:dd:5c:73:b1:9a:c1:11:88:c5:01:cf:
                    9e:80:f1:6f:f8:70:49:f1:68:2f:66:1e:d5:f0:92:
                    38:7b:fb:07:ee:be:1d:7f:44:48:a6:08:1a:40:a9:
                    aa:7c:90:6a:0f:a8:9e:9c:a9:00:d0:18:5f:b7:51:
                    0c:d6:1c:10:c0:ba:d2:e4:a3:1d:5d:26:b8:1c:04:
                    41:8e:01:b6:1e:57:f2:6a:32:a1:37:e2:51:82:c7:
                    bf:68:40:24:12:34:71:ef:ae:e3:fe:10:de:9d:ba:
                    3f:49:79:d0:d1:4d:2a:ca:fc:7b:75:23:2e:55:5b:
                    12:6b:3e:a0:0b:00:3e:3f:be:a3:62:42:6f:da:84:
                    7d:56:24:c7:34:83:c7:49:3d:bd:61:c4:ee:ea:1e:
                    ab:24:27:f9:5a:73:14:df:7c:e4:3f:f7:82:27:be:
                    30:91:69:94:85:81:30:41:f3:d6:8f:b7:3c:af:de:
                    50:0d:39:8c:f6:2e:df:cb:ff:5e:b5:dc:7b:68:ea:
                    66:93:13:59:bb:8e:77:17:8b:b3:f4:f0:b0:e7:b9:
                    53:98:14:32:37:a2:e9:2a:74:38:41:da:35:df:f2:
                    9d:b4:9f:ef:16:db:03:57:9a:38:e6:1c:f4:82:d5:
                    38:93:9f:4e:53:d4:35:bb:62:51:b6:bc:46:2f:09:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:07:40:7A:5A:95:13:46:BD:F3:07:BE:44:88:16:59:F9:56:57:19
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232342e302f32322d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:be:f2:2a:30:33:10:1b:a9:e3:7b:f9:ee:12:fc:52:e8:a1:
         c8:72:b6:7f:78:41:33:05:e1:4e:c6:6d:4c:3f:9f:61:64:e3:
         43:47:f2:1c:19:ca:9b:e2:6f:b3:e6:87:d9:3e:bd:af:de:3a:
         25:05:c7:2e:9f:6d:1d:3c:a5:d9:ba:94:e3:38:3e:3f:a2:2b:
         3a:0f:8e:58:a2:24:fb:30:c5:07:de:10:3f:e6:2d:ee:71:1e:
         0c:61:d8:e3:0f:15:6e:12:8b:54:ce:23:26:f4:fe:8f:07:00:
         9a:8b:a9:b2:1c:6b:2a:75:20:e4:35:17:53:07:6c:b1:93:9a:
         6b:bb:45:3e:23:e1:85:0e:42:9e:27:c8:3f:e6:f9:eb:93:70:
         a7:55:75:4c:86:d1:a4:6b:85:63:3a:67:e4:4c:ca:bf:ff:82:
         2a:f7:38:d9:fd:c1:8a:b6:75:62:54:50:5f:66:2a:51:58:8a:
         b9:32:d8:94:79:07:9e:7c:33:33:54:73:0a:48:91:a9:2d:1a:
         be:2e:ad:8b:33:e0:c3:be:20:cb:bc:b0:f7:0e:8a:a4:3c:29:
         7c:da:6e:84:35:b9:84:53:dd:36:da:b8:a7:05:10:f1:77:87:
         e9:46:ff:28:88:22:ab:c1:9c:1f:ae:3c:cc:23:b1:76:a0:c0:
         bd:ad:f4:9c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUS7pzCRqHM4TL5Ha/UWXwsSHWAnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MjFaFw0yNzA5MTMxMzUzMjFaMDMxMTAvBgNV
BAMTKDUyMDc0MDdBNUE5NTEzNDZCREYzMDdCRTQ0ODgxNjU5Rjk1NjU3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGa5ndXHOxmsERiMUBz56A8W/4
cEnxaC9mHtXwkjh7+wfuvh1/REimCBpAqap8kGoPqJ6cqQDQGF+3UQzWHBDAutLk
ox1dJrgcBEGOAbYeV/JqMqE34lGCx79oQCQSNHHvruP+EN6duj9JedDRTSrK/Ht1
Iy5VWxJrPqALAD4/vqNiQm/ahH1WJMc0g8dJPb1hxO7qHqskJ/lacxTffOQ/94In
vjCRaZSFgTBB89aPtzyv3lANOYz2Lt/L/1613Hto6maTE1m7jncXi7P08LDnuVOY
FDI3oukqdDhB2jXf8p20n+8W2wNXmjjmHPSC1TiTn05T1DW7YlG2vEYvCd/dAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUgdAelqVE0a98we+RIgWWflWVxkwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTM5MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMy
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgT4DANBgkqhkiG9w0BAQsFAAOCAQEACL7yKjAzEBup
43v57hL8UuihyHK2f3hBMwXhTsZtTD+fYWTjQ0fyHBnKm+Jvs+aH2T69r946JQXH
Lp9tHTyl2bqU4zg+P6IrOg+OWKIk+zDFB94QP+Yt7nEeDGHY4w8VbhKLVM4jJvT+
jwcAmoupshxrKnUg5DUXUwdssZOaa7tFPiPhhQ5CnifIP+b565Nwp1V1TIbRpGuF
Yzpn5EzKv/+CKvc42f3BirZ1YlRQX2YqUViKuTLYlHkHnnwzM1RzCkiRqS0avi6t
izPgw74gy7yw9w6KpDwpfNpuhDW5hFPdNtq4pwUQ8XeH6Ub/KIgiq8GcH648zCOx
dqDAva30nA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:23:39 2026 by rpki-client