Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32312d3234203d3e2031323531.roa
File:                     3230302e31392e38382e302f32312d3234203d3e2031323531.roa (raw, json)
Hash identifier:          86Wj1c/qgJiT2O7Pton/yHIi3fINIkFN86jV1BoQNgU=
Subject key identifier:   F6:B9:24:8D:18:79:03:62:E6:B5:91:D0:A3:9E:7D:83:26:58:2C:13
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       2B5A63C3798E5A7A32D44209C81A1883315A9DBF
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32312d3234203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:35 +0000
ROA not before:           Mon 13 Oct 2025 13:41:35 +0000
ROA not after:            Mon 12 Oct 2026 13:46:35 +0000
asID:                     1251
IP address blocks:        200.19.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5a:63:c3:79:8e:5a:7a:32:d4:42:09:c8:1a:18:83:31:5a:9d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:35 2025 GMT
            Not After : Oct 12 13:46:35 2026 GMT
        Subject: CN=F6B9248D18790362E6B591D0A39E7D8326582C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:9a:25:75:32:93:ab:4d:d4:d9:f8:79:d1:
                    1c:1e:aa:6c:0a:30:6f:54:aa:91:90:a5:85:7c:5c:
                    31:73:b1:18:af:b7:2b:47:e5:46:e9:d0:be:e3:e5:
                    c1:4d:d5:48:46:3e:ed:47:95:01:81:93:b4:42:29:
                    78:fa:02:96:5c:92:e2:ad:05:09:13:36:2a:96:b3:
                    19:8a:d7:65:b9:77:3e:32:0d:2b:9c:fa:72:f6:af:
                    d0:b6:b9:03:0b:21:2e:cf:81:b7:16:59:1c:27:bd:
                    e3:79:1d:82:30:f7:c0:f0:06:84:f4:9f:27:9a:35:
                    d5:05:28:7c:ee:62:89:74:cb:d5:a7:bf:27:a8:fa:
                    ba:75:41:b0:4f:08:d4:93:7c:17:f8:88:6d:ee:45:
                    6b:60:b5:69:68:ec:31:11:9c:8c:9b:1c:11:1c:c4:
                    4e:f7:4d:b9:f8:c6:7a:a9:a2:8e:5c:1c:fa:28:cc:
                    97:21:50:b5:9a:53:5e:4e:ba:9b:96:bf:fd:3b:fd:
                    9a:a9:26:ac:fd:29:c8:d3:92:27:b9:2a:59:73:6e:
                    2c:52:87:02:cc:af:d9:33:c3:c0:50:62:4a:e6:3b:
                    46:d6:2e:03:6e:f1:1f:ae:3c:ec:bc:3f:e9:c9:97:
                    f4:45:6f:2a:da:d1:ad:99:47:6a:36:54:d6:78:63:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B9:24:8D:18:79:03:62:E6:B5:91:D0:A3:9E:7D:83:26:58:2C:13
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e31392e38382e302f32312d3234203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:14:d8:92:56:b6:b8:c5:dc:fc:59:97:41:ff:f0:aa:13:
         87:e3:e5:c8:96:26:f4:71:79:8f:e2:4e:20:5e:40:31:67:1f:
         0a:a8:53:b8:15:ae:67:fe:bc:ea:1d:92:5d:51:7b:7c:91:1b:
         49:4d:99:c6:10:65:65:45:a2:9d:cf:20:cc:97:5c:9c:14:e5:
         8d:10:eb:04:51:24:75:23:bc:9e:02:6a:02:52:fb:86:14:3b:
         18:90:c7:18:7c:e7:cf:a8:b5:a9:75:60:a9:4b:d2:53:3a:f8:
         a1:02:ce:4d:68:03:54:3e:9a:2f:02:50:25:bd:b3:1b:7b:b2:
         f0:1c:86:ec:0d:89:29:23:38:c1:d6:22:84:41:1e:57:bb:89:
         04:56:f6:fa:cc:77:2f:a8:25:34:e3:24:07:96:e6:4f:bd:f3:
         70:23:3a:01:43:b1:7b:5f:82:5c:a3:90:31:6a:65:e5:4b:d6:
         60:87:79:82:02:d4:e4:86:87:a2:67:4d:28:e0:c3:75:fe:41:
         4f:ff:a8:7c:b2:76:c3:39:77:2b:b6:fe:62:eb:5f:1d:02:9e:
         ba:1f:55:0c:fa:60:a0:9c:b2:f0:e3:e8:8d:61:30:ba:11:8c:
         9c:ee:a9:ce:00:f3:30:f8:db:a3:7d:d7:dd:4e:13:6a:9f:04:
         f1:9e:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:10 2025 by rpki-client