Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139382e302f32342d3234203d3e203533313430.roa
File:                     3138372e3132302e3139382e302f32342d3234203d3e203533313430.roa (raw, json)
Hash identifier:          w0gBbn+Foe2TirhlukawSA+ei/UaN9pM1eSJ+lxff9o=
Subject key identifier:   D7:77:39:BC:64:E5:5A:FA:71:22:61:F5:D3:BE:D8:0C:E4:38:18:FC
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       69957D80D9D2CC0C7F5D1F39974F3A5312605AE5
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139382e302f32342d3234203d3e203533313430.roa
Signing time:             Sat 08 Aug 2026 02:27:18 +0000
ROA not before:           Sat 08 Aug 2026 02:22:18 +0000
ROA not after:            Sat 07 Aug 2027 02:27:18 +0000
asID:                     53140
IP address blocks:        187.120.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:95:7d:80:d9:d2:cc:0c:7f:5d:1f:39:97:4f:3a:53:12:60:5a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Aug  8 02:22:18 2026 GMT
            Not After : Aug  7 02:27:18 2027 GMT
        Subject: CN=D77739BC64E55AFA712261F5D3BED80CE43818FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:db:27:bf:fc:4f:3a:20:0e:14:fe:79:62:
                    48:98:8b:c6:4e:a0:4e:8c:e2:99:c5:44:bf:75:97:
                    12:10:4e:d8:a4:b9:7c:ee:70:7d:0a:61:3a:6e:8c:
                    be:58:67:af:7e:a2:bf:81:97:ec:f4:6b:a9:60:eb:
                    9a:f0:8e:aa:b7:49:dd:1f:e7:5e:c0:0d:13:ad:c9:
                    d8:3f:d8:5e:30:83:6e:85:b4:98:fb:06:47:5e:bb:
                    c9:03:ab:c9:2c:eb:3d:67:ee:bf:27:04:11:93:74:
                    4f:27:cd:09:e2:ad:24:5b:8d:21:66:8a:69:83:78:
                    90:5c:e4:3f:02:b1:30:cb:aa:08:56:0b:c7:1e:85:
                    e2:09:59:91:74:a0:62:3a:59:14:18:5d:53:f8:b8:
                    e9:a8:45:17:74:69:c5:f0:4b:6e:81:ae:9b:39:ad:
                    bb:13:92:d0:9a:b6:a8:e0:c9:0f:f1:12:dd:12:de:
                    60:8d:49:9c:2f:37:d5:25:2a:bc:bd:48:49:d7:84:
                    90:03:0d:be:e3:ba:1f:4e:9c:e4:e3:99:05:63:9f:
                    12:56:88:88:b6:dc:4e:f5:f3:1b:49:89:7c:54:ee:
                    0e:e5:4f:1e:f4:69:a3:80:92:a5:e3:6d:c3:e4:b7:
                    d9:8c:21:41:ab:db:55:c7:42:87:c6:84:2e:bf:84:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:39:BC:64:E5:5A:FA:71:22:61:F5:D3:BE:D8:0C:E4:38:18:FC
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139382e302f32342d3234203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:23:03:21:27:4f:0e:ab:37:be:ae:81:f2:00:7b:6e:05:
         31:36:9d:e2:ee:48:b0:df:58:86:2a:8e:24:82:3e:3f:1e:de:
         e5:84:49:be:8b:17:ad:60:58:cd:a8:c4:c7:e6:df:d0:7e:52:
         1f:ec:32:67:c5:5e:bc:76:1c:91:52:de:4e:2f:56:f9:cb:85:
         98:0e:db:5d:ff:5c:54:71:40:0d:6e:70:6c:ec:c8:6c:23:a4:
         25:da:00:d2:bd:a9:be:3c:5f:2a:e7:89:82:55:8d:37:6d:ec:
         0f:b3:54:6e:e3:b5:51:1c:eb:bb:64:20:fe:46:16:cd:98:e1:
         be:cc:2a:4b:25:3a:a1:58:9a:22:dc:b2:b7:65:39:cd:62:94:
         7c:a1:b7:f3:19:43:93:68:a2:73:5c:7c:60:41:a0:ca:a1:04:
         09:12:84:57:ea:51:ff:a6:59:4c:c3:ba:6b:67:a7:09:bd:60:
         23:a3:c0:48:78:cb:5d:b2:88:c7:e0:1f:55:b5:d8:a7:89:70:
         e7:53:b0:cd:30:06:53:82:70:15:3d:fa:32:fc:8c:6a:ea:de:
         cc:5a:47:9b:a7:25:c2:1b:45:03:eb:08:c5:f6:54:55:b7:0d:
         e2:03:ab:cf:0b:c7:39:15:e3:02:cc:f4:fb:8d:55:54:a0:2c:
         7f:8a:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:30:16 2026 by rpki-client