Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/3138372e3132312e3234322e302f32342d3332203d3e20323733333231.roa
File:                     3138372e3132312e3234322e302f32342d3332203d3e20323733333231.roa (raw, json)
Hash identifier:          fPF6IZsLCHAm6rSwpYf4QYEZMZYzIRc0abVl8hA03IQ=
Subject key identifier:   87:F9:69:7E:85:7D:C2:51:88:B0:43:75:2E:F2:69:69:AE:FA:D5:AC
Certificate issuer:       /CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
Certificate serial:       21A398DFA9E2803E27D01068E67080B107C2D9DE
Authority key identifier: 45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/3138372e3132312e3234322e302f32342d3332203d3e20323733333231.roa
Signing time:             Thu 20 Aug 2026 11:36:03 +0000
ROA not before:           Thu 20 Aug 2026 11:31:03 +0000
ROA not after:            Thu 19 Aug 2027 11:36:03 +0000
asID:                     273321
IP address blocks:        187.121.242.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl
                          rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a3:98:df:a9:e2:80:3e:27:d0:10:68:e6:70:80:b1:07:c2:d9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457622338C9A8341960D5AE3CBA0EB443A0F8E3C
        Validity
            Not Before: Aug 20 11:31:03 2026 GMT
            Not After : Aug 19 11:36:03 2027 GMT
        Subject: CN=87F9697E857DC25188B043752EF26969AEFAD5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:1f:fb:95:21:85:08:5a:b0:1e:0a:0f:79:
                    db:6f:c5:a3:34:52:b2:5d:f0:db:c7:34:e3:6c:aa:
                    3e:42:6e:69:bb:81:6a:22:55:48:a0:30:90:1b:65:
                    e3:30:fb:62:0c:69:eb:34:b7:b6:96:cb:b8:e4:10:
                    ee:fc:71:5f:27:88:f6:f9:9a:bf:cf:80:96:5e:43:
                    27:70:b2:9d:d3:f8:be:74:64:e4:d1:cb:65:7f:87:
                    19:45:fe:f6:5c:12:07:21:62:33:62:19:5f:3e:c9:
                    14:69:ba:b8:eb:ba:27:bd:15:96:12:24:09:35:f3:
                    95:8e:26:f4:d4:4f:10:a9:6a:7e:8d:c4:f4:f6:64:
                    13:f1:16:4a:d5:fe:d9:52:21:92:8d:da:48:4f:b7:
                    b3:30:6e:5b:b5:3a:14:01:2d:4a:c2:92:27:7d:0d:
                    f5:6c:3a:91:c9:65:55:b0:4c:88:07:6f:7e:8d:b4:
                    ef:d1:7d:f7:72:33:36:d2:65:a2:22:22:dc:f2:41:
                    eb:cb:a3:7d:f5:5d:4f:72:ee:1d:ce:74:7a:ca:d5:
                    c1:22:00:17:f0:ab:15:08:f7:11:49:20:86:73:81:
                    ce:0e:e4:0e:51:59:82:f1:c9:47:d0:d0:c4:ae:6d:
                    75:97:f4:5d:12:4a:f1:91:f4:55:05:92:fc:b3:44:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:69:7E:85:7D:C2:51:88:B0:43:75:2E:F2:69:69:AE:FA:D5:AC
            X509v3 Authority Key Identifier:
                keyid:45:76:22:33:8C:9A:83:41:96:0D:5A:E3:CB:A0:EB:44:3A:0F:8E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457622338C9A8341960D5AE3CBA0EB443A0F8E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dmfx4fBPDCfv2W5Voj2j49NL5X4saTXdv6EZKJJE8jK6/0/3138372e3132312e3234322e302f32342d3332203d3e20323733333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:be:af:ce:8b:ca:9a:ed:ab:c9:15:bd:57:25:3b:57:36:
         27:24:b5:55:e6:c1:77:ec:e3:32:22:fc:81:77:57:f4:c1:9f:
         57:6e:cd:ae:85:46:a8:66:1a:61:c2:09:fb:16:03:01:88:55:
         24:69:35:ab:7f:b9:80:f6:7e:fa:b0:c1:23:e4:c4:f1:13:c9:
         87:2f:ba:95:5f:88:7c:d1:0a:1c:46:fb:87:c4:9f:20:19:d8:
         e6:24:4f:80:22:06:f5:f1:72:e7:79:06:3d:31:05:cb:75:b7:
         33:9b:62:db:0d:55:66:ec:0e:57:2d:a0:d1:90:8d:2c:28:2f:
         32:0c:53:18:cd:90:88:91:fe:f3:10:c9:8f:40:b9:24:31:b7:
         10:34:fc:1b:ce:74:2c:b4:69:c0:59:f1:70:eb:a9:7a:d1:d5:
         aa:50:8a:5d:42:99:cb:a3:84:1f:ae:43:7c:d4:8d:e2:16:24:
         68:64:b6:f5:6d:7a:2c:b2:59:62:e0:f6:55:06:5a:3c:b9:b6:
         07:70:4c:bb:a2:e7:5a:64:5b:3a:3f:c2:2c:0a:8a:d3:a6:4d:
         dd:44:7f:c4:dc:6e:e7:9f:69:83:77:af:98:fb:9b:e7:9f:dc:
         e9:f7:3b:0b:10:b8:a6:58:c2:5a:39:32:78:c6:1f:42:ba:3c:
         df:4a:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----