Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139322e302f32302d3230203d3e203533313430.roa
File:                     3138372e3132302e3139322e302f32302d3230203d3e203533313430.roa (raw, json)
Hash identifier:          RBIs15LH9OQ6WXt+8BFfvxPkNxUGt/wa6XQsQb2T6KU=
Subject key identifier:   93:FC:2C:BA:1E:9E:8A:79:20:BC:3A:63:2A:97:17:AD:74:2A:9A:93
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       440103AF3CC1C7F472CC3866651369F232A13B06
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139322e302f32302d3230203d3e203533313430.roa
Signing time:             Sat 06 Sep 2025 01:29:27 +0000
ROA not before:           Sat 06 Sep 2025 01:24:27 +0000
ROA not after:            Sat 05 Sep 2026 01:29:27 +0000
asID:                     53140
IP address blocks:        187.120.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 08:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:01:03:af:3c:c1:c7:f4:72:cc:38:66:65:13:69:f2:32:a1:3b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Sep  6 01:24:27 2025 GMT
            Not After : Sep  5 01:29:27 2026 GMT
        Subject: CN=93FC2CBA1E9E8A7920BC3A632A9717AD742A9A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:af:96:96:70:8e:24:58:a7:21:4b:05:21:
                    30:83:b4:9a:20:df:e6:66:d4:a3:76:1f:eb:2c:80:
                    6d:bd:62:fb:96:49:14:28:0a:09:c9:9e:28:8a:82:
                    5a:b5:ba:34:f8:81:cd:fe:c8:e8:9b:34:88:1f:32:
                    3a:04:97:b1:66:87:f8:c9:e1:80:06:d6:e9:fa:ba:
                    15:ea:31:8e:4f:97:58:94:43:58:c0:aa:b5:ee:28:
                    eb:55:47:61:7a:bf:9e:d1:73:fd:f7:7e:3c:54:1d:
                    15:c7:d3:03:eb:b3:0d:6a:b2:e6:fb:40:9d:f3:a5:
                    fd:4b:ea:53:0a:45:c4:2e:58:53:76:f4:90:1a:39:
                    74:75:0d:f2:a7:b5:57:cd:ac:59:83:b3:9a:7f:74:
                    51:cd:d8:e5:5b:85:4b:e1:d0:39:01:a6:4f:e5:8f:
                    04:7d:56:92:22:e1:b1:ae:5c:d2:f3:dd:6e:d3:47:
                    53:2a:de:2c:98:3c:e6:4e:54:f1:e4:e6:d7:e4:81:
                    17:a1:86:b8:7f:87:da:80:4a:06:db:da:53:2e:55:
                    8d:e1:27:11:d2:3e:b3:31:c9:ef:83:c3:05:e0:70:
                    c7:2e:54:36:c1:3d:67:ff:c0:06:96:23:5e:67:44:
                    fb:5f:38:c3:90:8a:f0:e1:97:15:0b:38:b8:7d:99:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:2C:BA:1E:9E:8A:79:20:BC:3A:63:2A:97:17:AD:74:2A:9A:93
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139322e302f32302d3230203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:0d:bb:ae:c7:d3:ef:b7:88:c8:9e:40:ab:7d:3a:da:47:b4:
         96:4f:99:d9:b9:60:ef:99:8d:e9:71:61:c0:2c:b5:44:60:f3:
         98:3f:29:3c:8b:b5:d9:e5:6d:d6:4f:b2:ef:f2:82:72:e0:4a:
         2d:e7:46:57:f7:ef:42:b0:f1:00:e5:4f:1e:6b:08:25:f0:dc:
         63:60:cc:b0:b4:05:d6:ab:e8:ea:22:df:71:ea:e4:e4:d5:2d:
         9d:fa:ec:6f:cc:7c:89:33:7e:26:aa:58:1d:d5:db:96:2b:1f:
         6e:81:58:8a:64:3e:ad:8a:84:ee:41:d6:83:14:0b:d7:72:cb:
         5d:b1:63:3a:ff:26:4b:3c:66:6d:4a:8b:cc:b7:79:00:47:9f:
         6d:dc:d8:f9:1e:5d:99:39:bf:9a:03:72:fa:83:46:ff:b7:f4:
         bf:13:0a:ad:de:7d:00:1c:bd:1f:dc:fd:d3:b2:8e:f7:68:4f:
         89:b5:c4:73:fb:09:db:0d:a3:b3:2a:45:ce:f6:a9:b5:12:bf:
         55:f8:7a:7e:e2:4e:32:19:bb:8f:32:fe:88:2d:d3:d5:0b:99:
         e5:84:a7:cd:15:a8:fb:1b:99:f4:f6:88:cd:a5:c9:54:98:ea:
         75:24:77:b8:aa:41:9a:34:cd:75:ac:b2:8a:43:32:8f:80:f5:
         fa:bb:32:11
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURAEDrzzBx/RyzDhmZRNp8jKhOwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0MjZBM0M2MTc0OUQwQ0ZGRjdBM0MzNTVEMDY4NTRF
RDVDMUIwRjAeFw0yNTA5MDYwMTI0MjdaFw0yNjA5MDUwMTI5MjdaMDMxMTAvBgNV
BAMTKDkzRkMyQ0JBMUU5RThBNzkyMEJDM0E2MzJBOTcxN0FENzQyQTlBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlq+WlnCOJFinIUsFITCDtJog
3+Zm1KN2H+ssgG29YvuWSRQoCgnJniiKglq1ujT4gc3+yOibNIgfMjoEl7Fmh/jJ
4YAG1un6uhXqMY5Pl1iUQ1jAqrXuKOtVR2F6v57Rc/33fjxUHRXH0wPrsw1qsub7
QJ3zpf1L6lMKRcQuWFN29JAaOXR1DfKntVfNrFmDs5p/dFHN2OVbhUvh0DkBpk/l
jwR9VpIi4bGuXNLz3W7TR1Mq3iyYPOZOVPHk5tfkgRehhrh/h9qASgbb2lMuVY3h
JxHSPrMxye+DwwXgcMcuVDbBPWf/wAaWI15nRPtfOMOQivDhlxULOLh9mZC3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk/wsuh6einkgvDpjKpcXrXQqmpMwHwYDVR0j
BBgwFoAUSkJqPGF0nQz/96PDVdBoVO1cGw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2ZNWXRHWUJXemdwRWt0RmVzQ3ZZYUgzZXRTQlJqQ0VEZWt5VXBzMnNR
aFkvMC80QTQyNkEzQzYxNzQ5RDBDRkZGN0EzQzM1NUQwNjg1NEVENUMxQjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNDI2QTNDNjE3NDlEMENG
RkY3QTNDMzU1RDA2ODU0RUQ1QzFCMEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmTVl0R1lCV3pncEVrdEZlc0N2WWFIM2V0U0JSakNFRGVreVVwczJzUWhZLzAv
MzEzODM3MmUzMTMyMzAyZTMxMzkzMjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDM1
MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7eMAwDQYJKoZIhvcNAQELBQADggEBAEkNu67H
0++3iMieQKt9OtpHtJZPmdm5YO+ZjelxYcAstURg85g/KTyLtdnlbdZPsu/ygnLg
Si3nRlf370Kw8QDlTx5rCCXw3GNgzLC0Bdar6Ooi33Hq5OTVLZ367G/MfIkzfiaq
WB3V25YrH26BWIpkPq2KhO5B1oMUC9dyy12xYzr/Jks8Zm1Ki8y3eQBHn23c2Pke
XZk5v5oDcvqDRv+39L8TCq3efQAcvR/c/dOyjvdoT4m1xHP7CdsNo7MqRc72qbUS
v1X4en7iTjIZu48y/ogt09ULmeWEp80VqPsbmfT2iM2lyVSY6nUkd7iqQZo0zXWs
sopDMo+A9fq7MhE=
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:45:29 2025 by rpki-client