Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa
File:                     3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa (raw, json)
Hash identifier:          J4Eat5rxqCUDu1DVrY149DoU2r9UygMnNeRWNzkqejs=
Subject key identifier:   D7:1A:8A:63:A4:68:FB:53:EB:3E:E0:30:F5:E1:2E:07:86:01:0D:93
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       05FF749D1EC56A661E363349D8936125D0606DD4
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa
Signing time:             Mon 14 Sep 2026 13:53:22 +0000
ROA not before:           Mon 14 Sep 2026 13:48:22 +0000
ROA not after:            Mon 13 Sep 2027 13:53:22 +0000
asID:                     1916
IP address blocks:        200.136.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 19:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ff:74:9d:1e:c5:6a:66:1e:36:33:49:d8:93:61:25:d0:60:6d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:22 2026 GMT
            Not After : Sep 13 13:53:22 2027 GMT
        Subject: CN=D71A8A63A468FB53EB3EE030F5E12E0786010D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:95:ff:1e:a0:0e:07:ff:af:21:de:28:6d:
                    77:1c:21:c2:e6:7a:5c:01:9f:d4:50:50:12:05:39:
                    46:fc:dc:01:46:fe:c0:b7:6c:63:94:90:83:f8:55:
                    97:16:96:19:59:0f:e7:c0:13:fb:a2:74:74:9e:63:
                    5d:c2:eb:8b:55:8d:ea:bf:57:0e:1f:d5:1b:27:e6:
                    d2:19:cd:e0:dd:84:9e:48:25:99:e6:10:c7:fe:ef:
                    59:4f:31:bd:1d:a3:ee:3b:7d:e0:b9:10:d4:a0:13:
                    3b:d1:91:01:a9:b0:33:bd:cc:88:ad:1a:ae:57:72:
                    81:84:6c:53:98:d8:94:4f:63:29:e4:cb:1c:19:e3:
                    48:ab:fe:50:ff:e8:23:37:f0:82:90:15:b1:a6:86:
                    a4:28:32:01:bc:f4:f7:7b:44:0e:17:f9:3c:0d:3c:
                    91:60:f6:8e:ff:2e:c8:34:4a:2a:18:92:4f:84:22:
                    a8:38:e2:cc:c5:a6:c4:0c:b4:f4:72:54:77:2b:e2:
                    ad:e6:38:f0:17:b2:1f:52:9e:02:ce:81:fb:59:4a:
                    84:84:a6:ce:70:d1:b9:0e:0c:13:d9:90:e1:1d:61:
                    f0:68:ee:93:a5:d8:5c:15:75:a9:82:6b:bf:a7:6d:
                    70:73:7c:a4:cf:40:f7:fe:24:8c:9a:90:62:8d:42:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:8A:63:A4:68:FB:53:EB:3E:E0:30:F5:E1:2E:07:86:01:0D:93
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3133362e3137372e302f32342d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.136.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:61:a1:43:11:22:7d:f4:0d:a5:b9:d6:66:f1:16:59:ff:4f:
         e0:6e:48:6f:ef:97:05:2f:f0:97:23:db:7f:d9:dd:82:41:18:
         28:d6:47:76:15:82:19:d5:a4:69:c6:31:44:c1:20:42:79:60:
         6f:bd:0f:1f:5d:2d:0e:e9:4a:7f:d1:85:94:e7:98:96:03:22:
         cf:c3:e7:79:a6:db:aa:83:9d:da:24:9c:3a:e0:2e:84:f7:a4:
         48:05:56:e1:9c:1f:20:0c:ba:b7:09:d3:25:2a:c3:b4:22:f4:
         d2:14:8b:c8:b2:3a:a2:a6:50:7b:97:9c:82:29:60:16:93:91:
         2a:14:91:a0:53:99:39:46:11:88:db:31:c3:4b:da:b9:f8:c9:
         6a:26:ae:b6:da:df:b3:f8:0c:7b:7a:4f:68:0f:46:93:3c:6d:
         91:0a:1d:e3:ff:9e:69:52:02:27:c2:bd:21:39:8f:09:25:7e:
         8c:5c:4e:0c:ff:ec:cd:00:41:13:79:fd:f9:c0:b8:46:26:f8:
         24:c7:ec:d3:e9:5f:4c:b3:a2:17:03:75:53:b8:1f:d7:3d:2d:
         86:9d:6c:b0:d8:36:39:33:ae:8d:f9:b3:50:b5:1a:6a:13:1c:
         3b:b3:ef:29:5c:dd:fd:d1:04:b0:7b:ef:e5:36:26:48:5c:37:
         1e:cd:f0:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBf90nR7FamYeNjNJ2JNhJdBgbdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNjA5MTQxMzQ4MjJaFw0yNzA5MTMxMzUzMjJaMDMxMTAvBgNV
BAMTKEQ3MUE4QTYzQTQ2OEZCNTNFQjNFRTAzMEY1RTEyRTA3ODYwMTBEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUBZX/HqAOB/+vId4obXccIcLm
elwBn9RQUBIFOUb83AFG/sC3bGOUkIP4VZcWlhlZD+fAE/uidHSeY13C64tVjeq/
Vw4f1Rsn5tIZzeDdhJ5IJZnmEMf+71lPMb0do+47feC5ENSgEzvRkQGpsDO9zIit
Gq5XcoGEbFOY2JRPYynkyxwZ40ir/lD/6CM38IKQFbGmhqQoMgG89Pd7RA4X+TwN
PJFg9o7/Lsg0SioYkk+EIqg44szFpsQMtPRyVHcr4q3mOPAXsh9SngLOgftZSoSE
ps5w0bkODBPZkOEdYfBo7pOl2FwVdamCa7+nbXBzfKTPQPf+JIyakGKNQsFLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1xqKY6Ro+1PrPuAw9eEuB4YBDZMwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTMzMzYyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyIixMA0GCSqGSIb3DQEBCwUAA4IBAQB1YaFDESJ9
9A2ludZm8RZZ/0/gbkhv75cFL/CXI9t/2d2CQRgo1kd2FYIZ1aRpxjFEwSBCeWBv
vQ8fXS0O6Up/0YWU55iWAyLPw+d5ptuqg53aJJw64C6E96RIBVbhnB8gDLq3CdMl
KsO0IvTSFIvIsjqiplB7l5yCKWAWk5EqFJGgU5k5RhGI2zHDS9q5+MlqJq622t+z
+Ax7ek9oD0aTPG2RCh3j/55pUgInwr0hOY8JJX6MXE4M/+zNAEETef35wLhGJvgk
x+zT6V9Ms6IXA3VTuB/XPS2GnWyw2DY5M66N+bNQtRpqExw7s+8pXN390QSwe+/l
NiZIXDcezfDk
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:42:56 2026 by rpki-client