Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39382e302f32342d3234203d3e2031393136.roa
File:                     3230302e3134342e39382e302f32342d3234203d3e2031393136.roa (raw, json)
Hash identifier:          EnZIV3/lHCGtdX5RJI/VmkAW8p+9C5ppH7KIVJPdPxg=
Subject key identifier:   84:E4:6B:FB:7E:8E:81:1F:3C:59:65:29:96:F0:26:47:19:1F:35:3C
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       6757CA5CB639AB3E44D410D3BE8BA21FC63F54E7
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39382e302f32342d3234203d3e2031393136.roa
Signing time:             Mon 14 Sep 2026 13:53:13 +0000
ROA not before:           Mon 14 Sep 2026 13:48:13 +0000
ROA not after:            Mon 13 Sep 2027 13:53:13 +0000
asID:                     1916
IP address blocks:        200.144.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:57:ca:5c:b6:39:ab:3e:44:d4:10:d3:be:8b:a2:1f:c6:3f:54:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Sep 14 13:48:13 2026 GMT
            Not After : Sep 13 13:53:13 2027 GMT
        Subject: CN=84E46BFB7E8E811F3C59652996F02647191F353C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:7b:37:1d:e7:3d:8b:f6:a0:26:31:64:7e:
                    c8:ae:4c:87:ec:d0:48:cc:4c:24:2f:b7:32:0d:42:
                    76:b2:16:5a:d5:08:c3:7d:d9:5e:a1:a7:72:5b:6e:
                    55:b4:57:bc:33:ff:24:61:7c:58:6a:8a:07:e1:10:
                    43:dd:4c:a4:9c:d6:fc:f6:db:05:cf:f5:fe:55:9b:
                    8c:fe:83:43:a4:f7:15:8e:a8:10:0c:a2:0b:08:ab:
                    f2:1e:bd:b5:7c:d8:ea:77:a5:11:ec:ee:7c:49:54:
                    bc:1b:ad:78:79:f8:6d:49:fd:ba:69:c9:35:4b:ac:
                    2f:b4:08:4e:96:fa:89:b7:81:f0:89:cc:40:44:cc:
                    19:1a:21:df:39:f0:6a:cf:87:13:53:c4:7c:f5:8d:
                    3a:91:7f:69:71:ae:03:5b:99:f6:80:b0:02:44:c3:
                    e8:9e:8d:58:97:79:7a:27:b1:05:8f:37:ec:ec:e6:
                    be:ee:85:0e:7e:5d:8d:66:b9:b9:d6:20:dd:f4:70:
                    1a:fe:34:b4:64:1f:5e:8d:42:89:d2:51:f8:79:38:
                    71:6b:d3:a2:80:ef:4a:1b:f4:e2:1e:86:52:88:30:
                    f8:51:dd:11:d0:17:7a:74:07:8e:7d:3d:56:d6:f2:
                    29:6a:c7:35:f2:bb:f7:90:a1:df:9b:e4:de:0c:25:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:6B:FB:7E:8E:81:1F:3C:59:65:29:96:F0:26:47:19:1F:35:3C
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39382e302f32342d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:40:fe:7f:30:0d:bb:8f:14:ec:a7:de:78:40:7c:6e:69:df:
         fd:08:66:da:6b:1b:30:c8:a8:39:e7:f9:f9:17:5e:19:72:22:
         1b:04:3a:a7:90:b6:86:27:85:22:49:b6:2b:5e:84:89:c2:d7:
         f6:6c:35:5c:b7:3a:d7:fc:c0:37:22:c5:90:ca:e0:1d:ad:80:
         02:b5:94:5e:ae:88:01:c4:08:13:54:ff:c2:5a:9c:29:9c:10:
         bb:1a:6d:45:0c:ab:c6:35:44:f9:7f:16:2b:29:1c:f5:65:ec:
         f2:6b:b5:da:a8:fb:14:06:79:37:ae:83:65:1a:52:35:17:f4:
         99:f2:4e:5d:7f:66:55:1b:b5:7b:54:63:b1:c2:14:64:67:49:
         ec:92:37:30:bf:90:df:5a:e0:03:f7:cc:ad:9f:16:7b:91:ab:
         85:8e:39:b6:19:b8:67:d3:30:fa:3e:5e:03:20:9f:d8:42:3e:
         db:9d:54:d6:c7:02:1f:05:2d:7a:95:34:be:f9:4e:06:7d:48:
         1f:48:ff:87:04:c1:a7:c8:81:32:f3:da:da:32:e7:85:28:3a:
         0e:14:fd:7d:ec:46:6d:a5:f2:da:08:3c:7a:4a:80:f5:be:bc:
         e5:dc:9b:21:14:93:07:f8:bf:72:ce:10:06:bb:10:ea:f9:1e:
         73:e2:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:07:07 2026 by rpki-client