Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32312d3234203d3e2031323531.roa
File:                     3230302e31392e38382e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          PCfeiypN7XSZphV3RtR+hB535hYHDWFq4Ay6vG4v3fk=
Subject key identifier:   86:4B:7B:C0:E6:87:BC:29:AB:C2:9A:87:A1:A5:7D:D4:64:8E:70:11
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       1E0B9FA269E7DF46807143A811D793AD71B0FB38
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 14 Sep 2026 13:53:10 +0000
ROA not before:           Mon 14 Sep 2026 13:48:10 +0000
ROA not after:            Mon 13 Sep 2027 13:53:10 +0000
asID:                     1251
IP address blocks:        200.19.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0b:9f:a2:69:e7:df:46:80:71:43:a8:11:d7:93:ad:71:b0:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:10 2026 GMT
            Not After : Sep 13 13:53:10 2027 GMT
        Subject: CN=864B7BC0E687BC29ABC29A87A1A57DD4648E7011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:ea:a2:b1:28:0c:ce:22:cf:d3:92:86:4a:
                    9b:08:1d:cf:e1:4f:95:56:76:fd:98:cd:74:cb:06:
                    35:9a:0f:2c:3c:d4:e4:23:c7:4b:95:4f:f3:06:08:
                    b3:0d:6f:53:61:f3:c8:90:38:ec:4a:71:94:76:99:
                    3a:83:5f:48:38:e4:89:a0:a8:20:28:4f:bf:3c:92:
                    b9:18:bb:f5:00:78:44:9b:4d:77:1f:a3:3c:73:a6:
                    84:9d:3e:0a:b4:04:12:c4:b5:a0:e1:5f:ee:44:3e:
                    7b:07:45:b2:00:a3:64:df:80:60:b6:03:8c:1c:66:
                    89:9d:cd:59:8e:52:6f:68:65:21:50:c3:74:3a:b4:
                    2a:08:06:52:8c:dd:b6:e3:57:c6:6b:21:8e:2d:d2:
                    e8:74:71:1a:80:28:54:90:cf:1d:d1:6d:8e:84:ea:
                    8c:88:67:db:70:02:cd:73:06:b7:de:cf:44:93:f4:
                    0e:4d:88:fc:76:e4:0e:2a:31:62:c7:90:4e:24:2d:
                    86:3e:bc:7e:88:cb:a2:fe:42:bd:bf:9e:7e:91:81:
                    9b:2d:10:fd:09:7e:41:23:4c:bd:88:23:8c:c2:5b:
                    06:10:87:20:df:76:9a:40:87:2e:5a:2c:40:0e:8e:
                    56:55:be:41:74:79:6b:ba:e2:b5:02:b7:2c:18:c7:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:7B:C0:E6:87:BC:29:AB:C2:9A:87:A1:A5:7D:D4:64:8E:70:11
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:97:79:fc:4e:57:0d:44:c4:a0:fd:1a:5d:75:63:e1:72:
         f9:6e:ef:b4:08:65:17:b3:71:17:f0:6b:16:9c:5a:bf:e5:cb:
         85:01:01:7f:9a:c1:c2:50:d8:6b:df:99:b9:45:5e:fa:c7:2d:
         9c:a0:5e:78:69:df:c2:ed:46:2d:8f:c0:e7:ee:80:1e:79:c7:
         c6:ab:4d:74:3a:5f:5e:9b:19:2f:a1:f4:b7:d2:9f:75:34:51:
         4c:0c:6a:d7:a9:ca:4f:c4:d3:67:ab:96:c6:a5:a2:db:6a:d2:
         52:39:13:ae:f2:4d:45:33:38:71:cb:c1:98:91:93:9d:28:82:
         e0:27:92:f6:53:56:87:4f:a7:22:0f:26:ca:7a:7f:6e:d7:80:
         25:e3:65:db:8b:15:5d:20:b4:64:02:75:21:7f:a0:1f:8e:a6:
         c4:30:ab:27:4d:e1:7e:10:36:08:3a:9d:87:c7:ab:e0:c1:1e:
         69:7d:3e:b6:f4:9f:7d:2d:d8:1d:30:82:c6:63:0b:69:67:bc:
         64:89:c3:0f:90:d4:90:0e:97:93:65:54:b4:8e:6b:6a:45:b4:
         90:94:ef:f1:0b:6a:d7:90:e8:33:2d:21:ed:1b:83:ae:74:6e:
         76:cb:c2:a0:50:20:b2:99:29:26:7e:d1:8d:e1:8d:57:f1:fc:
         97:2a:a5:b3
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUHgufomnn30aAcUOoEdeTrXGw+zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MTBaFw0yNzA5MTMxMzUzMTBaMDMxMTAvBgNV
BAMTKDg2NEI3QkMwRTY4N0JDMjlBQkMyOUE4N0ExQTU3REQ0NjQ4RTcwMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2R+qisSgMziLP05KGSpsIHc/h
T5VWdv2YzXTLBjWaDyw81OQjx0uVT/MGCLMNb1Nh88iQOOxKcZR2mTqDX0g45Img
qCAoT788krkYu/UAeESbTXcfozxzpoSdPgq0BBLEtaDhX+5EPnsHRbIAo2TfgGC2
A4wcZomdzVmOUm9oZSFQw3Q6tCoIBlKM3bbjV8ZrIY4t0uh0cRqAKFSQzx3RbY6E
6oyIZ9twAs1zBrfez0ST9A5NiPx25A4qMWLHkE4kLYY+vH6Iy6L+Qr2/nn6RgZst
EP0JfkEjTL2II4zCWwYQhyDfdppAhy5aLEAOjlZVvkF0eWu64rUCtywYx7r1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUhkt7wOaHvCmrwpqHoaV91GSOcBEwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTM5MmUzODM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzMjM1
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAPIE1gwDQYJKoZIhvcNAQELBQADggEBAFacl3n8TlcNRMSg
/RpddWPhcvlu77QIZRezcRfwaxacWr/ly4UBAX+awcJQ2GvfmblFXvrHLZygXnhp
38LtRi2PwOfugB55x8arTXQ6X16bGS+h9LfSn3U0UUwMatepyk/E02erlsalottq
0lI5E67yTUUzOHHLwZiRk50oguAnkvZTVodPpyIPJsp6f27XgCXjZduLFV0gtGQC
dSF/oB+OpsQwqydN4X4QNgg6nYfHq+DBHml9Prb0n30t2B0wgsZjC2lnvGSJww+Q
1JAOl5NlVLSOa2pFtJCU7/ELateQ6DMtIe0bg650bnbLwqBQILKZKSZ+0Y3hjVfx
/JcqpbM=
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:00:55 2026 by rpki-client