Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3233322e302f32312d3234203d3e2031323531.roa
File:                     3230302e31392e3233322e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          TIsMYGiQiUd83QZLMEDcLLeRgfn5gdG6Q/UXaPxJCjI=
Subject key identifier:   0A:98:CF:CE:7F:A1:B2:D1:B9:A8:ED:83:0A:00:9D:4D:C4:13:48:98
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       21F07F17C50AC21CC8CE479C544BEB18C8E97367
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3233322e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:33 +0000
ROA not before:           Mon 13 Oct 2025 13:41:33 +0000
ROA not after:            Mon 12 Oct 2026 13:46:33 +0000
asID:                     1251
IP address blocks:        200.19.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f0:7f:17:c5:0a:c2:1c:c8:ce:47:9c:54:4b:eb:18:c8:e9:73:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:33 2025 GMT
            Not After : Oct 12 13:46:33 2026 GMT
        Subject: CN=0A98CFCE7FA1B2D1B9A8ED830A009D4DC4134898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:f7:66:08:6e:d3:07:52:ab:80:12:57:0e:
                    5c:b7:7c:8a:64:ea:02:f3:fa:98:ce:ab:59:ab:92:
                    e6:ab:79:82:da:67:c1:19:52:17:90:bc:8f:03:52:
                    b6:a2:87:fe:37:be:61:b6:19:cb:53:f9:29:86:d6:
                    81:95:aa:cb:49:a5:f2:1e:a4:7e:57:b5:3c:07:04:
                    82:26:13:18:2b:97:8d:31:f8:d9:5f:fe:fb:06:a8:
                    62:ec:32:46:12:bd:37:e8:cf:4a:7a:55:bd:c0:26:
                    88:dc:60:e5:23:5b:74:9a:27:b8:5d:04:8f:a3:69:
                    14:9a:d6:4c:b4:ac:c7:b9:2a:e6:db:93:6b:24:0e:
                    a4:e9:e7:c2:f4:e8:51:1f:cb:4e:14:8b:fe:a4:67:
                    82:38:93:ce:f3:da:1f:68:da:40:a7:ac:fc:38:4d:
                    21:b7:f8:93:60:3f:9e:ee:01:01:67:81:ee:e1:70:
                    f0:e1:18:f2:5e:85:d4:dd:04:97:67:e8:43:85:a5:
                    cc:48:6a:f3:fd:21:ee:75:cb:c7:8e:b0:af:10:18:
                    94:e6:4c:c2:50:5d:7d:81:1a:34:d1:f4:fa:6d:6b:
                    71:c2:3a:8d:9f:e2:eb:fd:b1:ed:49:d9:e4:54:51:
                    ce:d9:38:d9:b0:07:9c:28:1e:20:30:b1:5f:e7:a0:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:CF:CE:7F:A1:B2:D1:B9:A8:ED:83:0A:00:9D:4D:C4:13:48:98
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e3233322e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:84:44:f1:3b:d9:97:9f:96:fd:db:32:82:ea:0b:2f:b0:d2:
         64:01:94:33:ed:d9:39:78:3b:75:f9:1d:38:9e:7d:15:72:1f:
         91:24:65:3a:14:34:27:94:44:17:55:56:d2:f2:11:cb:be:d2:
         67:36:60:38:b9:7a:27:12:72:82:73:7f:69:60:94:6e:08:1d:
         a0:e3:74:9f:e2:f6:25:26:cc:56:16:2d:c0:f0:df:57:8b:dc:
         44:cd:d3:b3:91:36:f8:f1:01:99:bd:b3:18:1c:0a:7c:1f:26:
         b3:80:2d:ea:61:ec:ae:75:fa:2e:a8:a4:4c:a3:6d:cf:2f:7a:
         04:98:db:8a:62:3f:47:fa:fe:e3:04:08:fa:d0:dd:eb:96:73:
         11:63:d0:c4:83:1f:d6:12:3e:19:5d:f5:1c:24:54:a5:19:77:
         18:ef:b6:84:1b:cf:a3:dd:89:21:85:3d:95:59:41:96:ef:7e:
         aa:e9:81:a8:82:b4:1a:68:97:6d:ef:19:6f:19:37:f7:8a:e6:
         43:7a:65:6c:89:81:d6:33:4b:95:55:a5:92:96:13:15:0e:e7:
         8b:88:09:ea:df:13:c1:4f:4b:cc:10:ae:9c:96:ab:24:46:b1:
         3d:ad:cf:21:12:7a:ce:7a:99:98:53:d2:d4:01:80:3c:b2:23:
         31:82:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:12 2025 by rpki-client