Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38302e302f32312d3234203d3e203532393932.roa
File:                     3230302e31392e38302e302f32312d3234203d3e203532393932.roa (raw, json)
Hash identifier:          u6TdbqcqVbYDG9eAaLm8ak5ktEFxbLfIKMMjddGyZ40=
Subject key identifier:   6C:B1:B9:63:D4:D6:EE:9E:6E:18:AE:15:94:AF:15:B6:C3:11:4E:3F
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       7AF08810C93ABF2A4CDA892F7432FB5B0AF61A11
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38302e302f32312d3234203d3e203532393932.roa
Signing time:             Mon 13 Oct 2025 13:46:24 +0000
ROA not before:           Mon 13 Oct 2025 13:41:24 +0000
ROA not after:            Mon 12 Oct 2026 13:46:24 +0000
asID:                     52992
IP address blocks:        200.19.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f0:88:10:c9:3a:bf:2a:4c:da:89:2f:74:32:fb:5b:0a:f6:1a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:24 2025 GMT
            Not After : Oct 12 13:46:24 2026 GMT
        Subject: CN=6CB1B963D4D6EE9E6E18AE1594AF15B6C3114E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:61:6e:c1:61:43:9c:3d:b6:a3:ad:c4:71:
                    33:6b:b2:64:7b:bb:fc:a7:6f:da:37:b2:12:11:52:
                    48:a0:80:fa:da:04:a9:01:e8:94:ec:d7:55:b8:b4:
                    27:56:f2:c0:0b:18:a8:0b:fe:a6:01:31:6f:6c:09:
                    45:91:65:f3:87:6f:33:75:63:3b:c5:a7:7b:61:d4:
                    a5:ba:73:68:ab:48:e5:7c:2a:bc:39:b2:9e:03:f1:
                    b8:dd:ba:a0:75:47:b0:71:58:de:5e:91:b8:a0:a3:
                    b6:f4:b1:d0:82:4f:9d:5d:76:53:a9:1d:e7:59:a3:
                    08:04:72:0a:98:85:2d:93:6a:f2:1e:66:d3:28:35:
                    02:85:92:a5:7a:96:f9:fa:fa:39:d5:aa:12:7b:ba:
                    11:e6:04:4e:be:1b:f2:7a:55:ea:dd:8d:a7:b7:c4:
                    32:e1:e5:fc:8d:98:a3:97:b6:d9:3b:71:a8:53:25:
                    37:17:17:82:c7:b4:10:93:26:48:7f:3f:58:8b:93:
                    67:58:03:3b:b7:13:67:de:73:0b:14:fc:93:66:f9:
                    80:d9:8c:7f:89:db:0c:e6:3f:5b:b7:b4:06:14:04:
                    ca:d5:44:e4:36:2e:e1:09:20:77:25:e3:27:73:e1:
                    cf:9c:8d:8c:c2:14:23:e3:dd:ce:b5:92:d8:3d:41:
                    f6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B1:B9:63:D4:D6:EE:9E:6E:18:AE:15:94:AF:15:B6:C3:11:4E:3F
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38302e302f32312d3234203d3e203532393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:5c:e4:f6:1e:30:d4:dc:8b:8a:bd:b3:45:9f:cd:a9:3e:b4:
         27:2e:5c:51:76:c1:80:12:40:a3:d1:a5:22:4a:a4:ab:d5:fe:
         9f:36:50:62:35:a1:a5:db:b4:5f:0c:58:58:f2:7b:6a:ef:c5:
         1e:04:d4:31:e7:95:43:3d:71:59:fc:3a:5f:b9:25:04:9c:06:
         b8:15:f1:a2:ea:f2:cc:81:a6:53:4c:eb:4b:21:c9:0c:be:a3:
         99:9b:a1:0b:7d:5f:66:cb:f6:79:20:8d:73:c6:02:ea:97:af:
         94:98:54:44:56:25:fc:fd:a7:fb:94:0c:64:3e:b9:b8:23:b6:
         7a:98:f7:c4:ef:48:42:e3:0d:59:9c:14:b6:02:5f:2b:50:71:
         a3:86:df:e0:2f:80:bb:a7:05:e4:dd:5d:ff:1c:1f:51:e2:00:
         cc:b2:63:93:ec:5e:c2:15:37:6a:47:16:c1:0c:bc:c9:a1:61:
         39:05:0e:e5:4c:5a:96:fc:72:ab:ca:ef:fb:61:f5:57:56:bb:
         fb:4e:a0:95:9a:ba:41:4e:92:c9:6f:e0:01:32:97:78:09:a3:
         1b:90:b0:87:59:6d:4a:ff:87:57:60:42:d0:38:5b:59:47:3e:
         a0:57:1f:c6:51:74:20:15:22:db:2c:91:6b:47:2c:d1:1b:00:
         c0:42:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:15 2025 by rpki-client