Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3233312e302f32342d3234203d3e203131303937.roa
File:                     3230302e31392e3233312e302f32342d3234203d3e203131303937.roa (raw, json)
Hash identifier:          Pd0UfPjapYHuZr4ieTOXuOpLrLcUN2md+Q6j3XFmpno=
Subject key identifier:   32:C8:9B:AD:AA:F4:04:3F:E7:83:48:33:CF:83:FC:1A:43:87:0C:5C
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       36B49AB9C9C3D6736C0CA07E11C4D6F3EAA7A7B0
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3233312e302f32342d3234203d3e203131303937.roa
Signing time:             Mon 13 Oct 2025 13:46:17 +0000
ROA not before:           Mon 13 Oct 2025 13:41:17 +0000
ROA not after:            Mon 12 Oct 2026 13:46:17 +0000
asID:                     11097
IP address blocks:        200.19.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:9a:b9:c9:c3:d6:73:6c:0c:a0:7e:11:c4:d6:f3:ea:a7:a7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:17 2025 GMT
            Not After : Oct 12 13:46:17 2026 GMT
        Subject: CN=32C89BADAAF4043FE7834833CF83FC1A43870C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:01:fd:44:c9:77:00:78:e0:a9:13:3d:a3:
                    80:a2:e8:bb:97:d7:9d:02:a9:2d:ac:8f:ef:26:48:
                    fe:c8:65:24:27:ca:67:74:77:76:4e:9d:f9:ff:be:
                    8b:9e:e9:23:40:4f:dd:70:b1:8b:a0:20:ea:a4:03:
                    df:28:f3:ad:db:bf:f9:56:0f:8a:3d:bd:fd:72:db:
                    d2:f1:0b:94:4b:3a:3d:8a:57:4d:60:57:60:8c:26:
                    81:ed:35:73:64:c7:ca:4a:10:cb:fe:0c:fd:22:b5:
                    34:0d:da:b1:17:b2:59:86:66:0d:23:93:48:40:b9:
                    43:1e:5c:e8:14:37:02:64:4d:97:52:b6:a8:91:2e:
                    2c:a0:3b:7f:f7:39:b5:d8:7c:9a:e6:03:f9:a7:31:
                    78:83:17:2d:ff:c0:7a:fc:3e:69:bc:ec:9c:44:bd:
                    3b:9a:cf:38:97:01:be:de:c6:c6:d2:37:4a:aa:ba:
                    78:33:4e:3b:08:e9:2d:77:40:d0:d7:b1:74:71:ae:
                    b1:80:2d:70:e9:dd:73:b4:60:b8:ff:aa:d6:57:98:
                    59:e0:06:f1:11:89:ad:79:67:0d:55:82:2a:30:ae:
                    22:a7:b2:6c:41:86:72:a7:0a:87:80:94:c3:e2:05:
                    8f:f0:22:ec:36:df:5e:71:c2:a9:0e:da:fc:08:9c:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C8:9B:AD:AA:F4:04:3F:E7:83:48:33:CF:83:FC:1A:43:87:0C:5C
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3233312e302f32342d3234203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:be:0e:58:d1:e9:0a:27:53:bc:17:70:3c:3f:28:27:61:68:
         26:07:78:1b:ff:1e:50:0e:8d:0c:28:bf:13:06:72:e6:88:5a:
         ac:80:7c:4f:8e:bd:a7:7d:2f:3e:cb:b4:ad:45:ab:50:14:e1:
         e6:22:4e:43:6e:b3:bc:8a:36:94:d3:c8:d0:37:61:7a:82:d2:
         ba:bb:fd:50:da:29:a4:46:ca:3d:a7:e9:68:ec:b8:94:aa:0e:
         ef:8e:28:34:25:31:35:80:2e:d4:15:45:85:87:51:a5:94:33:
         af:54:b2:5a:dc:5c:5d:ff:26:40:23:7b:a9:db:75:46:b7:d1:
         01:4b:17:a6:f7:67:cf:3b:3c:14:3a:35:0a:0f:ec:c5:5f:1f:
         7c:bb:87:a0:db:98:7b:9c:14:87:41:d1:bb:73:24:29:dd:ef:
         72:33:36:11:3f:b4:ec:ea:23:ac:46:cd:73:5f:a7:61:84:5e:
         f5:83:4d:df:6e:bb:2d:ae:72:4c:b2:1c:b4:fe:03:2f:0f:f3:
         2b:f2:66:00:9c:82:fd:9e:c1:fd:fc:4d:04:cb:f9:91:2d:cf:
         9d:4b:c2:ac:2d:19:ea:b0:1f:14:f2:02:c3:e8:81:56:ab:95:
         1e:8b:51:f0:33:46:67:04:51:c9:35:84:56:fd:ed:f2:ee:44:
         a7:c1:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:12 2025 by rpki-client