Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/323030313a313264383a3a2f33322d3332203d3e2031323531.roa
File:                     323030313a313264383a3a2f33322d3332203d3e2031323531.roa (raw, json)
Hash identifier:          XGYM/50NUJJLr/GyKIuCfYkpOe6NcebLKXuLDvw1o8M=
Subject key identifier:   31:44:41:8D:8F:6F:91:57:42:43:CB:28:A5:31:2A:68:04:DC:8F:58
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       78F063375D7F4283699BA2FE42B3B6D702CCDC0D
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/323030313a313264383a3a2f33322d3332203d3e2031323531.roa
Signing time:             Mon 13 Oct 2025 13:46:18 +0000
ROA not before:           Mon 13 Oct 2025 13:41:18 +0000
ROA not after:            Mon 12 Oct 2026 13:46:18 +0000
asID:                     1251
IP address blocks:        2001:12d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:63:37:5d:7f:42:83:69:9b:a2:fe:42:b3:b6:d7:02:cc:dc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:18 2025 GMT
            Not After : Oct 12 13:46:18 2026 GMT
        Subject: CN=3144418D8F6F91574243CB28A5312A6804DC8F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:48:69:54:5b:5f:07:87:7e:fc:e5:9c:13:
                    82:8d:03:b6:c5:37:a8:7a:3f:5e:23:25:a4:e6:f2:
                    83:80:0b:a8:ad:91:ad:72:08:f3:8a:a4:60:86:4b:
                    d8:7c:0f:f6:85:6e:18:3d:5e:39:5d:3d:15:4a:35:
                    b3:6e:cc:33:c9:dc:4d:2f:c8:ba:a9:77:6c:5d:6e:
                    b2:48:9d:14:89:c4:03:d6:84:df:6d:76:88:a5:37:
                    8c:27:33:da:71:c6:cc:bb:c0:1d:7f:de:1a:db:8a:
                    d1:a3:af:d8:6a:75:4e:2b:4c:0d:01:c5:b1:59:f0:
                    39:57:6d:ca:b6:93:40:2d:0e:b6:50:a2:0c:58:50:
                    9e:93:d5:da:22:f0:72:9a:4d:a7:4f:46:4a:d3:9f:
                    68:4e:72:55:cd:43:30:09:11:94:f4:bc:64:67:3f:
                    2f:bb:cf:2f:17:7d:99:83:4e:ba:c8:7c:fd:07:ab:
                    10:5c:bb:35:fa:44:27:cb:0e:92:52:07:81:48:c9:
                    e4:7f:f4:15:94:52:1d:e3:74:d7:f5:f6:bf:11:90:
                    c5:b5:52:d8:41:e3:35:6a:de:38:93:d4:05:d4:cb:
                    ad:05:a0:9a:ad:88:77:9f:da:53:61:b1:9b:df:f0:
                    86:fd:6b:79:9d:d3:02:87:05:51:8e:9d:cb:b6:93:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:44:41:8D:8F:6F:91:57:42:43:CB:28:A5:31:2A:68:04:DC:8F:58
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/323030313a313264383a3a2f33322d3332203d3e2031323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:e1:48:e2:14:94:b2:f4:5b:70:c6:5b:7b:39:e1:e0:86:
         11:ad:00:25:3f:32:a5:e0:52:c7:85:e2:29:bf:95:2c:b7:a9:
         f2:e1:75:98:87:25:d0:eb:1b:fb:b9:69:00:47:a0:d8:6f:f7:
         7c:d4:a7:5f:4a:20:1a:b4:ad:3c:0e:45:71:3a:65:40:04:03:
         65:7b:42:e8:45:5c:ba:8b:1e:bf:e1:c5:b4:cc:0e:94:96:8b:
         b9:6b:5f:5c:46:29:a0:b8:7f:91:5a:6c:72:cf:5e:1d:77:f2:
         a3:be:62:16:64:9b:b4:4c:51:38:ea:36:61:7e:c1:0d:82:52:
         87:f0:8a:b8:35:da:e0:8f:1b:7b:b3:d8:e7:e8:ad:fb:85:cd:
         aa:7c:88:0f:96:dc:07:15:a6:2c:b5:9f:3e:7e:31:5e:cf:13:
         d1:27:e7:2f:ea:1f:38:00:2d:9c:6c:21:47:d9:37:68:25:f7:
         2c:6d:ec:66:2b:d1:50:33:7a:25:6d:9e:f9:68:41:a7:33:13:
         99:5b:9c:55:b3:44:24:92:57:ba:79:7e:14:1b:a8:fc:b7:bc:
         83:84:c6:1d:8f:56:e7:3b:cf:0e:11:a0:4f:66:cf:b5:16:51:
         15:15:99:17:aa:3b:5d:26:00:5b:4f:4f:2b:e1:59:7f:96:c7:
         0f:23:44:f1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUePBjN11/QoNpm6L+QrO21wLM3A0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNTEwMTMxMzQxMThaFw0yNjEwMTIxMzQ2MThaMDMxMTAvBgNV
BAMTKDMxNDQ0MThEOEY2RjkxNTc0MjQzQ0IyOEE1MzEyQTY4MDREQzhGNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3EhpVFtfB4d+/OWcE4KNA7bF
N6h6P14jJaTm8oOAC6itka1yCPOKpGCGS9h8D/aFbhg9XjldPRVKNbNuzDPJ3E0v
yLqpd2xdbrJInRSJxAPWhN9tdoilN4wnM9pxxsy7wB1/3hrbitGjr9hqdU4rTA0B
xbFZ8DlXbcq2k0AtDrZQogxYUJ6T1doi8HKaTadPRkrTn2hOclXNQzAJEZT0vGRn
Py+7zy8XfZmDTrrIfP0HqxBcuzX6RCfLDpJSB4FIyeR/9BWUUh3jdNf19r8RkMW1
UthB4zVq3jiT1AXUy60FoJqtiHef2lNhsZvf8Ib9a3md0wKHBVGOncu2k1PZAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUMURBjY9vkVdCQ8sopTEqaATcj1gwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMzEzYTMxMzI2NDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEzMjM1
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAgARLYMA0GCSqGSIb3DQEBCwUAA4IBAQB9fuFI4hSUsvRb
cMZbeznh4IYRrQAlPzKl4FLHheIpv5Ust6ny4XWYhyXQ6xv7uWkAR6DYb/d81Kdf
SiAatK08DkVxOmVABANle0LoRVy6ix6/4cW0zA6Ulou5a19cRimguH+RWmxyz14d
d/KjvmIWZJu0TFE46jZhfsENglKH8Iq4Ndrgjxt7s9jn6K37hc2qfIgPltwHFaYs
tZ8+fjFezxPRJ+cv6h84AC2cbCFH2TdoJfcsbexmK9FQM3olbZ75aEGnMxOZW5xV
s0Qkkle6eX4UG6j8t7yDhMYdj1bnO88OEaBPZs+1FlEVFZkXqjtdJgBbT08r4Vl/
lscPI0Tx
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:15 2025 by rpki-client