Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232382e302f32332d3234203d3e2031323531.roa
File:                     3230302e31392e3232382e302f32332d3234203d3e2031323531.roa (raw, json)
Hash identifier:          CzYxqfanwT0IRwz/s2e9iIkugX+ojjwifA1zlEMF4Xs=
Subject key identifier:   6B:70:29:69:75:B4:48:4F:45:BA:ED:7A:95:1A:50:93:2C:B1:0E:81
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       1589D45B7BAF5F6515A234D40DC8451B0F678FDC
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232382e302f32332d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:27 +0000
ROA not before:           Mon 13 Oct 2025 13:41:27 +0000
ROA not after:            Mon 12 Oct 2026 13:46:27 +0000
asID:                     1251
IP address blocks:        200.19.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:89:d4:5b:7b:af:5f:65:15:a2:34:d4:0d:c8:45:1b:0f:67:8f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:27 2025 GMT
            Not After : Oct 12 13:46:27 2026 GMT
        Subject: CN=6B70296975B4484F45BAED7A951A50932CB10E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:88:0a:14:03:8e:07:28:43:e6:60:a1:b3:96:
                    c8:dd:fd:ab:71:7d:79:58:42:51:46:0a:50:55:90:
                    be:35:e1:a1:81:83:d3:8e:fb:07:83:54:d7:e3:89:
                    81:d3:9d:48:17:68:18:d0:56:42:ad:56:31:9f:77:
                    9c:38:59:ab:21:00:f8:d7:2a:74:9b:a1:82:24:ac:
                    9f:e2:53:be:7b:6a:d0:02:69:f4:a9:89:e3:5f:b1:
                    e3:f1:9c:d7:f9:a9:d9:d8:13:f7:1a:0b:a1:ed:2d:
                    e3:0f:51:9a:fd:12:2a:5c:f6:34:d3:d5:74:bf:3c:
                    12:ad:80:12:1e:11:a5:19:5d:7a:4f:81:51:23:fd:
                    0a:b4:41:a5:b6:86:ec:c4:2a:2b:79:a5:f7:40:06:
                    65:c6:b6:69:3b:66:82:39:cd:e6:79:7d:ca:ff:7b:
                    23:b9:d6:8d:b0:ee:e6:e6:1d:ba:3f:16:17:e1:12:
                    1d:c9:41:3e:7c:85:88:50:e9:64:20:91:26:3e:cd:
                    7c:42:6d:7e:87:01:23:d0:69:36:70:90:ec:a3:da:
                    dd:a4:72:28:7c:e3:a7:71:fd:d4:e0:16:e5:c5:23:
                    6b:c0:97:30:11:21:1a:06:9c:df:5f:e0:30:b5:eb:
                    12:19:32:a3:21:c1:a5:e1:37:f2:00:d8:4e:77:96:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:29:69:75:B4:48:4F:45:BA:ED:7A:95:1A:50:93:2C:B1:0E:81
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3232382e302f32332d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:de:f5:50:68:ea:21:50:69:7f:1c:59:ad:a4:39:98:2f:
         84:2d:71:a7:d9:ad:7b:f9:bb:b1:5f:13:15:3a:b5:f0:4d:e8:
         fe:a6:4a:ab:49:ec:10:c0:43:41:65:c4:6c:1d:65:f7:7e:c5:
         f6:79:ee:af:68:8b:13:b7:54:f3:af:5a:e2:8d:54:82:9a:ae:
         ad:c0:b2:f1:3a:02:2a:27:74:f0:75:3c:8b:be:e7:e1:9c:08:
         96:0a:cc:e9:65:f1:7e:da:a3:22:8a:e9:ec:65:82:3f:31:90:
         5e:81:c0:9b:35:d6:ea:10:88:e6:34:b1:51:6f:4b:ca:3e:4e:
         2e:60:0f:ed:14:5c:40:2b:37:92:08:18:4e:02:ee:c5:c5:96:
         17:ca:9c:da:6d:c8:96:d6:08:bd:04:7c:1d:e2:65:93:0d:d1:
         1c:77:7f:bc:0d:82:9c:c4:5b:1f:23:b6:d6:eb:54:a6:f7:32:
         d1:02:1b:df:25:2b:7e:f0:6d:31:ad:61:ae:5b:33:0c:b7:b8:
         f5:dc:04:42:fc:c9:f4:51:0f:13:4d:c7:e1:94:64:0b:ef:38:
         e0:0b:ee:42:6a:af:0c:41:c2:82:3d:48:88:c1:e8:47:51:71:
         14:d6:73:51:92:eb:28:be:ed:a1:52:fc:ca:0a:a8:3f:e1:76:
         9a:02:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:29 2025 by rpki-client