Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139392e302f32342d3234203d3e203533313430.roa
File:                     3138372e3132302e3139392e302f32342d3234203d3e203533313430.roa (raw, json)
Hash identifier:          8IRTqyOUL+/DGTVWqYWw5LwY1tS2xuQSv1exEzH+H80=
Subject key identifier:   37:D7:DD:84:8A:96:45:86:50:E3:8F:0C:12:DA:C7:5C:18:8E:65:04
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       0F7C969A7992A47E90B5A28A5B0CC66834259607
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139392e302f32342d3234203d3e203533313430.roa
Signing time:             Sat 06 Sep 2025 01:30:12 +0000
ROA not before:           Sat 06 Sep 2025 01:25:12 +0000
ROA not after:            Sat 05 Sep 2026 01:30:12 +0000
asID:                     53140
IP address blocks:        187.120.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7c:96:9a:79:92:a4:7e:90:b5:a2:8a:5b:0c:c6:68:34:25:96:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Sep  6 01:25:12 2025 GMT
            Not After : Sep  5 01:30:12 2026 GMT
        Subject: CN=37D7DD848A96458650E38F0C12DAC75C188E6504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:c0:81:16:12:be:e7:61:03:03:ee:32:62:
                    93:2f:99:5a:62:5f:57:26:66:03:9b:0f:e2:e6:ba:
                    17:02:01:a3:3c:c1:c7:e0:89:63:7b:4b:b4:f2:fd:
                    4e:f9:10:68:ff:db:e5:d2:42:e8:bd:c7:60:93:d6:
                    35:3b:85:34:d3:ff:c1:ac:67:a7:cf:c9:53:67:fe:
                    1f:28:9c:1c:52:2d:c7:05:f5:12:66:37:6e:19:a9:
                    5f:be:1e:b2:60:72:e7:82:aa:8d:cb:d5:e6:97:4a:
                    93:9e:fc:a5:11:be:44:aa:4a:0e:86:01:6d:a3:1f:
                    13:e1:24:56:82:ba:d9:db:06:c0:61:c4:19:7c:af:
                    4a:1a:04:1b:99:eb:bc:c5:1d:58:35:16:56:f7:43:
                    1f:d3:6d:25:99:2b:d9:17:51:28:f4:19:a5:7d:0b:
                    a8:2c:1c:6a:b2:74:0d:d2:b8:e4:c5:15:3a:6f:63:
                    34:25:b9:f1:50:d1:78:e2:ef:e6:4d:df:8b:13:3c:
                    e2:18:b4:6e:49:9e:61:f7:5b:b9:e9:3c:80:2f:72:
                    6e:b9:f0:6f:c1:59:03:48:fd:20:a4:67:6c:42:51:
                    5a:f2:69:fa:ac:8c:d5:b8:11:85:44:41:03:1e:18:
                    c7:30:e0:b3:31:d6:a1:78:0e:a6:c1:c7:2b:6d:02:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D7:DD:84:8A:96:45:86:50:E3:8F:0C:12:DA:C7:5C:18:8E:65:04
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3139392e302f32342d3234203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:87:35:c6:b6:d6:77:6b:e8:24:63:10:2b:3e:0f:35:65:b9:
         58:64:d6:58:2a:05:ba:c3:20:e8:c8:fb:72:06:2e:c5:6c:7c:
         69:3e:bd:98:e8:3b:cf:8c:e4:88:fb:b4:ad:a3:d8:d9:de:f9:
         7d:d4:22:a5:27:53:bd:1e:e6:fe:9f:6f:ad:12:bc:62:3f:2a:
         6b:e5:32:61:c3:0b:5f:a4:d7:a4:ec:1b:24:fd:ea:66:28:ed:
         1c:0f:38:71:4c:72:c3:db:39:c6:0d:70:20:10:98:0a:05:02:
         9d:2f:76:48:70:77:75:fd:a9:fd:62:08:1f:a2:22:91:7e:ea:
         36:f0:58:ff:66:10:8e:43:6c:c2:34:f7:69:47:cd:f2:56:fb:
         f7:c4:8f:b3:8f:ab:5a:12:a4:d0:9b:f6:b1:3a:2f:ff:ca:6b:
         06:5d:a2:51:52:91:6c:50:95:63:99:6f:7a:54:89:36:13:d0:
         e3:d9:e4:a2:54:d1:76:5e:1f:29:da:c4:da:e8:51:75:84:9b:
         4e:d4:46:be:9c:c3:b2:d6:c2:21:66:81:e9:90:65:a4:8b:fe:
         32:91:7c:b7:b4:10:7c:5c:8e:f5:6e:ec:4d:46:e3:15:e9:69:
         97:35:b2:59:c8:98:1d:b3:39:d3:3f:ad:3a:86:37:22:49:d2:
         c0:0a:9c:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD3yWmnmSpH6QtaKKWwzGaDQllgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0MjZBM0M2MTc0OUQwQ0ZGRjdBM0MzNTVEMDY4NTRF
RDVDMUIwRjAeFw0yNTA5MDYwMTI1MTJaFw0yNjA5MDUwMTMwMTJaMDMxMTAvBgNV
BAMTKDM3RDdERDg0OEE5NjQ1ODY1MEUzOEYwQzEyREFDNzVDMTg4RTY1MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyMCBFhK+52EDA+4yYpMvmVpi
X1cmZgObD+LmuhcCAaM8wcfgiWN7S7Ty/U75EGj/2+XSQui9x2CT1jU7hTTT/8Gs
Z6fPyVNn/h8onBxSLccF9RJmN24ZqV++HrJgcueCqo3L1eaXSpOe/KURvkSqSg6G
AW2jHxPhJFaCutnbBsBhxBl8r0oaBBuZ67zFHVg1Flb3Qx/TbSWZK9kXUSj0GaV9
C6gsHGqydA3SuOTFFTpvYzQlufFQ0Xji7+ZN34sTPOIYtG5JnmH3W7npPIAvcm65
8G/BWQNI/SCkZ2xCUVryafqsjNW4EYVEQQMeGMcw4LMx1qF4DqbBxyttAsdfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN9fdhIqWRYZQ448MEtrHXBiOZQQwHwYDVR0j
BBgwFoAUSkJqPGF0nQz/96PDVdBoVO1cGw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2ZNWXRHWUJXemdwRWt0RmVzQ3ZZYUgzZXRTQlJqQ0VEZWt5VXBzMnNR
aFkvMC80QTQyNkEzQzYxNzQ5RDBDRkZGN0EzQzM1NUQwNjg1NEVENUMxQjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNDI2QTNDNjE3NDlEMENG
RkY3QTNDMzU1RDA2ODU0RUQ1QzFCMEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dmTVl0R1lCV3pncEVrdEZlc0N2WWFIM2V0U0JSakNFRGVreVVwczJzUWhZLzAv
MzEzODM3MmUzMTMyMzAyZTMxMzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7eMcwDQYJKoZIhvcNAQELBQADggEBAFSHNca2
1ndr6CRjECs+DzVluVhk1lgqBbrDIOjI+3IGLsVsfGk+vZjoO8+M5Ij7tK2j2Nne
+X3UIqUnU70e5v6fb60SvGI/KmvlMmHDC1+k16TsGyT96mYo7RwPOHFMcsPbOcYN
cCAQmAoFAp0vdkhwd3X9qf1iCB+iIpF+6jbwWP9mEI5DbMI092lHzfJW+/fEj7OP
q1oSpNCb9rE6L//KawZdolFSkWxQlWOZb3pUiTYT0OPZ5KJU0XZeHynaxNroUXWE
m07URr6cw7LWwiFmgemQZaSL/jKRfLe0EHxcjvVu7E1G4xXpaZc1slnImB2zOdM/
rTqGNyJJ0sAKnOk=
-----END CERTIFICATE-----
Generated at Fri Sep 19 01:38:22 2025 by rpki-client