Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa
File:                     3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa (raw, json)
Hash identifier:          iMWVEG6OBJjkOtNX0CLjmHCGkhhk8gvefdJFfVfa2Z0=
Subject key identifier:   1F:C7:37:69:4F:BF:15:B0:1F:DD:85:5D:2E:DC:ED:C8:A9:EE:C8:CE
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       55A128417075EE945E79747CD0EE28077570E111
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa
Signing time:             Sat 06 Sep 2025 11:05:19 +0000
ROA not before:           Sat 06 Sep 2025 11:00:19 +0000
ROA not after:            Sat 05 Sep 2026 11:05:19 +0000
asID:                     53140
IP address blocks:        187.120.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a1:28:41:70:75:ee:94:5e:79:74:7c:d0:ee:28:07:75:70:e1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Sep  6 11:00:19 2025 GMT
            Not After : Sep  5 11:05:19 2026 GMT
        Subject: CN=1FC737694FBF15B01FDD855D2EDCEDC8A9EEC8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:0b:5c:df:ef:fb:85:42:70:1f:6b:f7:30:
                    6c:bb:fd:4e:15:6f:08:a9:6a:e5:58:17:ca:54:d7:
                    53:c5:6d:6f:de:b3:03:6c:4e:c1:af:54:68:5d:df:
                    49:bf:65:1f:b6:fa:93:e3:f7:d5:3c:09:5b:e1:4f:
                    1b:71:a9:7e:c8:4b:63:81:bc:b1:48:74:f5:f6:98:
                    78:17:59:a5:5f:f8:0f:ad:02:71:17:57:bc:e7:13:
                    82:5a:5f:7f:af:09:4f:d2:c2:07:91:af:c7:c0:3e:
                    5b:05:df:cd:3b:37:5f:b5:b6:2a:68:36:a7:df:db:
                    10:ef:d9:89:13:a5:97:ae:aa:b8:8b:5c:68:63:da:
                    93:1b:33:82:d2:fa:2c:66:af:23:fb:10:ea:9f:c6:
                    c4:21:7c:3a:ac:26:43:6d:1b:43:b2:42:7c:fc:ca:
                    a7:aa:6c:c4:89:06:25:67:cb:a4:b1:f2:e5:83:29:
                    c7:4e:96:52:ea:c1:61:dc:37:47:21:6a:4c:6c:df:
                    af:dd:70:7f:81:90:73:57:60:fd:3c:04:bc:63:23:
                    98:00:39:70:82:a6:87:54:4d:fc:be:3b:b5:3e:99:
                    89:53:49:a5:35:14:db:37:aa:c1:c6:9e:5a:9a:75:
                    1b:14:8b:92:ff:ee:78:68:07:d5:22:62:3a:d8:38:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:37:69:4F:BF:15:B0:1F:DD:85:5D:2E:DC:ED:C8:A9:EE:C8:CE
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32312d3231203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:76:a4:af:a3:91:02:cd:c1:c6:41:c8:d6:05:96:b3:68:81:
         e8:11:28:0f:38:6d:50:d1:a4:3b:31:ca:ce:f1:b1:b0:2a:31:
         12:81:70:c8:46:2a:56:3f:46:92:5b:53:79:43:48:48:47:66:
         fd:9e:a9:a5:af:69:c4:dd:3b:d7:18:72:45:0e:99:a5:5e:8f:
         58:d3:e9:3f:a3:cc:d0:b7:9b:c7:65:6b:2d:c8:a8:a3:d5:2d:
         24:29:d0:46:ce:55:b5:c2:42:3f:4b:8e:e1:72:09:7f:b6:2a:
         07:9d:90:b2:0f:59:60:8b:f2:b8:09:e4:05:f1:33:78:f7:61:
         40:e4:ab:c7:34:6b:9e:39:43:73:20:18:66:89:ca:67:ea:a3:
         95:e4:e8:81:67:da:8a:1c:86:5e:d0:a1:e7:6a:e7:b3:9d:a5:
         77:81:74:57:f3:6d:8d:b5:ee:5e:70:4a:1a:b2:98:47:5f:3c:
         5d:22:b5:53:7e:aa:af:7b:49:91:b3:db:a9:42:43:25:ed:7a:
         86:b8:df:7f:4c:eb:4e:15:c4:59:97:3f:f9:66:09:f3:5a:9d:
         28:67:22:05:33:4a:7c:d3:2a:23:ea:d9:40:0e:a0:a3:da:8e:
         b6:2d:68:0a:74:fc:d7:df:15:a9:32:f9:48:af:11:51:4f:91:
         d7:4b:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:49:22 2025 by rpki-client