Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139362e302f32322d3232203d3e203533313430.roa
File:                     3138372e3132302e3139362e302f32322d3232203d3e203533313430.roa (raw, json)
Hash identifier:          YHv+c+AvN8539gsREb8OrcOvXQz3iRGLGy2iaZNovbE=
Subject key identifier:   28:ED:B1:DD:9C:D9:8A:E5:9A:66:72:C1:46:C2:BF:14:BF:E6:FB:C5
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       101257913E21A43E890D219D3D3BB67F9A71B749
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139362e302f32322d3232203d3e203533313430.roa
Signing time:             Sat 08 Aug 2026 02:27:16 +0000
ROA not before:           Sat 08 Aug 2026 02:22:16 +0000
ROA not after:            Sat 07 Aug 2027 02:27:16 +0000
asID:                     53140
IP address blocks:        187.120.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:57:91:3e:21:a4:3e:89:0d:21:9d:3d:3b:b6:7f:9a:71:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Aug  8 02:22:16 2026 GMT
            Not After : Aug  7 02:27:16 2027 GMT
        Subject: CN=28EDB1DD9CD98AE59A6672C146C2BF14BFE6FBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:b3:41:9a:c8:03:06:a6:10:9d:5d:68:3c:
                    79:ab:7d:60:36:73:07:05:f1:d2:f0:ba:f6:b0:d1:
                    0b:ca:b5:a2:86:88:f2:c1:6e:dc:2c:ce:e5:9a:8e:
                    7e:33:5f:00:c2:81:da:7f:f5:6f:ea:60:ec:de:20:
                    2b:86:aa:5c:83:fd:44:29:69:d7:19:b3:95:8c:4d:
                    62:63:5b:bb:ea:b2:43:4b:63:3e:c8:78:86:09:ad:
                    5d:01:13:a9:35:63:81:9f:5a:fb:dc:ff:4c:45:2b:
                    ef:eb:9e:cf:cd:af:bb:3a:86:e1:33:e4:3a:bb:c5:
                    2a:e7:7f:65:bc:86:bb:f7:79:2c:5d:26:d7:28:d8:
                    c8:56:41:d1:05:8d:fc:ba:21:4e:66:9a:6d:8c:09:
                    37:fa:d2:72:32:ca:4d:1c:e4:3f:c4:ea:8f:27:a8:
                    e7:c0:ff:21:b5:4d:c3:47:b7:1d:ef:28:72:90:e0:
                    21:57:55:e6:5d:4e:86:26:24:6a:61:01:79:d4:d3:
                    01:18:6d:ec:dc:ba:a6:0a:d9:f9:c9:cf:6e:8c:15:
                    3f:31:8a:8c:e5:a5:cf:b9:e5:61:52:34:4d:2a:02:
                    8e:78:ed:a3:a5:c1:1c:e1:b7:e0:80:8a:35:8c:33:
                    d0:b5:f9:5a:7f:b4:3d:8e:ae:c1:2e:ec:0e:f1:4a:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:ED:B1:DD:9C:D9:8A:E5:9A:66:72:C1:46:C2:BF:14:BF:E6:FB:C5
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139362e302f32322d3232203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:55:ef:76:b4:42:20:61:41:da:51:e8:a0:14:fd:58:e1:
         ac:99:9e:f3:04:64:4a:d7:b0:84:2f:9d:14:d0:fe:ad:9b:c7:
         f1:9f:59:4c:10:f8:2d:b2:66:8f:d1:b4:59:5b:34:7c:65:70:
         79:4e:2d:0e:1e:7a:ca:da:ee:fc:4e:d9:92:d7:68:57:ee:69:
         f9:00:a4:67:b9:96:62:03:d8:2e:fb:07:80:94:ba:ae:79:11:
         3c:78:db:68:e9:f6:1c:89:32:61:76:15:36:cd:8e:d4:95:2b:
         9c:d5:33:e6:f2:79:05:b5:b8:f4:00:c1:cb:a9:1e:0e:ef:01:
         5c:a9:96:ca:48:93:4c:89:ae:b2:64:15:45:f9:33:fd:a7:b5:
         46:c4:06:7c:cd:32:25:ec:b5:04:31:ab:33:ee:16:f3:e2:c4:
         ec:89:4a:da:75:78:32:d5:d6:07:af:1e:2c:02:48:a4:34:96:
         f2:75:bb:4c:f9:4a:60:7a:a0:c8:8d:90:b8:40:7b:94:1f:63:
         62:ed:2b:a8:25:5c:98:35:db:c7:61:70:4f:aa:f0:13:9e:68:
         f1:0b:e7:a6:b6:6b:2b:db:03:cf:cf:37:7e:81:9c:d9:42:3d:
         67:67:c9:7e:1a:02:fe:39:f8:ff:10:15:7f:dd:d5:99:08:62:
         4e:da:13:b4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEBJXkT4hpD6JDSGdPTu2f5pxt0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0MjZBM0M2MTc0OUQwQ0ZGRjdBM0MzNTVEMDY4NTRF
RDVDMUIwRjAeFw0yNjA4MDgwMjIyMTZaFw0yNzA4MDcwMjI3MTZaMDMxMTAvBgNV
BAMTKDI4RURCMUREOUNEOThBRTU5QTY2NzJDMTQ2QzJCRjE0QkZFNkZCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ULNBmsgDBqYQnV1oPHmrfWA2
cwcF8dLwuvaw0QvKtaKGiPLBbtwszuWajn4zXwDCgdp/9W/qYOzeICuGqlyD/UQp
adcZs5WMTWJjW7vqskNLYz7IeIYJrV0BE6k1Y4GfWvvc/0xFK+/rns/Nr7s6huEz
5Dq7xSrnf2W8hrv3eSxdJtco2MhWQdEFjfy6IU5mmm2MCTf60nIyyk0c5D/E6o8n
qOfA/yG1TcNHtx3vKHKQ4CFXVeZdToYmJGphAXnU0wEYbezcuqYK2fnJz26MFT8x
iozlpc+55WFSNE0qAo547aOlwRzht+CAijWMM9C1+Vp/tD2OrsEu7A7xSrQrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKO2x3ZzZiuWaZnLBRsK/FL/m+8UwHwYDVR0j
BBgwFoAUSkJqPGF0nQz/96PDVdBoVO1cGw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2ZNWXRHWUJXemdwRWt0RmVzQ3ZZYUgzZXRTQlJqQ0VEZWt5VXBzMnNR
aFkvMC80QTQyNkEzQzYxNzQ5RDBDRkZGN0EzQzM1NUQwNjg1NEVENUMxQjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNDI2QTNDNjE3NDlEMENG
RkY3QTNDMzU1RDA2ODU0RUQ1QzFCMEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmTVl0R1lCV3pncEVrdEZlc0N2WWFIM2V0U0JSakNFRGVreVVwczJzUWhZLzAv
MzEzODM3MmUzMTMyMzAyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7eMQwDQYJKoZIhvcNAQELBQADggEBAHu/Ve92
tEIgYUHaUeigFP1Y4ayZnvMEZErXsIQvnRTQ/q2bx/GfWUwQ+C2yZo/RtFlbNHxl
cHlOLQ4eesra7vxO2ZLXaFfuafkApGe5lmID2C77B4CUuq55ETx422jp9hyJMmF2
FTbNjtSVK5zVM+byeQW1uPQAwcupHg7vAVyplspIk0yJrrJkFUX5M/2ntUbEBnzN
MiXstQQxqzPuFvPixOyJStp1eDLV1gevHiwCSKQ0lvJ1u0z5SmB6oMiNkLhAe5Qf
Y2LtK6glXJg128dhcE+q8BOeaPEL56a2ayvbA8/PN36BnNlCPWdnyX4aAv45+P8Q
FX/d1ZkIYk7aE7Q=
-----END CERTIFICATE-----
Generated at Mon Aug 24 07:28:54 2026 by rpki-client