Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32322d3232203d3e203533313430.roa
File:                     3138372e3132302e3230302e302f32322d3232203d3e203533313430.roa (raw, json)
Hash identifier:          1UwahvzNsBKHFVuZ9Kd3YRGZV0HOrWlnfv4SKtMwz9E=
Subject key identifier:   5D:DF:98:19:B0:7D:AB:19:1B:7B:33:27:E8:01:42:F0:05:A3:A1:01
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       3C114FDD7D82383A6CA146E595627FC092337031
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32322d3232203d3e203533313430.roa
Signing time:             Sat 06 Sep 2025 01:30:15 +0000
ROA not before:           Sat 06 Sep 2025 01:25:15 +0000
ROA not after:            Sat 05 Sep 2026 01:30:15 +0000
asID:                     53140
IP address blocks:        187.120.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:11:4f:dd:7d:82:38:3a:6c:a1:46:e5:95:62:7f:c0:92:33:70:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Sep  6 01:25:15 2025 GMT
            Not After : Sep  5 01:30:15 2026 GMT
        Subject: CN=5DDF9819B07DAB191B7B3327E80142F005A3A101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:a4:5d:29:52:ef:04:a1:8d:c6:9c:c7:f4:
                    24:69:83:9e:29:59:70:86:d5:3a:14:9b:04:58:cd:
                    04:c6:82:f6:4a:4b:69:9a:9c:1d:89:f9:dd:2a:82:
                    ac:39:eb:5b:71:12:e6:13:16:e2:c1:af:21:1a:13:
                    61:29:a2:b3:e6:c6:7e:f2:80:38:6a:42:f0:35:15:
                    e5:ff:c6:e6:7a:d7:cb:65:48:a2:93:05:36:6b:75:
                    3b:68:43:ff:71:d6:5a:a3:db:74:f8:e4:f6:be:4d:
                    01:e4:dd:bf:9c:7b:cf:00:b5:6d:7c:72:be:af:70:
                    9b:3c:4a:70:57:c1:fb:e7:69:72:52:49:83:fa:2c:
                    b6:47:09:22:c0:45:7c:70:f7:3e:58:5c:84:49:50:
                    49:15:d4:f3:eb:70:9f:04:f5:35:a3:d9:97:e8:2b:
                    ad:8f:3b:0c:a7:e2:ba:6a:00:00:68:a3:db:f0:81:
                    be:a8:b2:fa:f7:72:40:ae:52:2a:24:00:22:c5:b3:
                    22:a6:be:7d:d6:4c:7f:61:ff:b1:f6:6d:ef:39:bb:
                    2a:b2:36:6e:c9:e4:d7:c7:c1:82:d8:04:df:af:30:
                    65:0b:b9:58:71:63:02:ae:46:e0:0a:34:69:97:ba:
                    e0:d9:c4:e9:21:c4:61:1b:f3:db:dd:45:c4:fc:57:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DF:98:19:B0:7D:AB:19:1B:7B:33:27:E8:01:42:F0:05:A3:A1:01
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230302e302f32322d3232203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:fe:fd:68:ad:ba:2d:e8:21:69:c9:6c:b1:b9:32:52:82:e1:
         d0:b2:6a:c7:6d:d8:34:25:68:6d:1a:78:21:e8:4e:a3:84:81:
         d0:b0:66:a1:6a:6a:6f:9d:c2:17:95:ab:c5:b6:6d:07:0b:84:
         fa:04:2e:05:7b:b0:35:46:4f:4a:94:12:6d:c7:c6:34:46:43:
         11:9b:dc:bf:7d:cc:05:f4:fa:99:76:14:90:ce:4a:bd:ed:82:
         5c:07:56:a2:34:44:ba:3e:b2:c3:3a:fb:2f:3c:f3:1d:2d:b3:
         d8:e5:37:0d:78:ef:76:86:6b:41:61:9f:14:01:6b:b8:47:d2:
         9b:d8:31:0c:22:86:42:ee:1c:33:67:31:86:17:4c:45:d0:ea:
         31:08:48:82:c1:b4:66:70:4f:cb:0f:2e:88:b6:99:06:2e:ba:
         fc:de:e8:f3:dc:f9:4a:6e:22:a0:50:1b:67:a7:ff:ab:75:a9:
         38:95:87:ea:0b:a2:17:e8:73:2a:bc:1e:d8:e6:0b:04:93:98:
         07:df:e6:64:5e:5f:22:e1:27:c5:78:8e:45:ee:d0:4d:01:ff:
         05:7d:53:1d:f3:5a:ef:11:e8:10:7b:c4:d7:d0:a1:ab:a9:fb:
         f6:18:c2:5a:d4:df:19:48:89:00:0c:f9:a6:b1:31:33:35:ba:
         15:2c:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:26:55 2025 by rpki-client