Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa
File:                     3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa (raw, json)
Hash identifier:          T2QVpnYElRH1llTNZB/a11f2abGkME+m6CSuNc6v9kc=
Subject key identifier:   BD:94:59:8B:B9:48:F3:3E:FC:84:B8:48:F2:0D:85:A6:6C:0F:99:36
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       575096C76228EDB2F23E6AB60CF151726E69D825
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa
Signing time:             Sat 06 Sep 2025 01:30:11 +0000
ROA not before:           Sat 06 Sep 2025 01:25:11 +0000
ROA not after:            Sat 05 Sep 2026 01:30:11 +0000
asID:                     53140
IP address blocks:        187.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:50:96:c7:62:28:ed:b2:f2:3e:6a:b6:0c:f1:51:72:6e:69:d8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Sep  6 01:25:11 2025 GMT
            Not After : Sep  5 01:30:11 2026 GMT
        Subject: CN=BD94598BB948F33EFC84B848F20D85A66C0F9936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:5a:fa:39:50:a8:7c:43:01:9b:3a:9b:2b:
                    e7:d0:bc:58:f3:a4:ab:5c:a3:25:6a:a1:b5:9a:af:
                    e3:e3:8f:4f:f2:1d:b0:91:84:bb:1f:6f:8f:46:9e:
                    dd:5e:ec:70:75:42:61:31:87:e8:09:7c:c9:7a:cf:
                    9d:67:48:58:97:fa:f1:1c:3d:e6:be:6a:25:29:bd:
                    08:d4:de:9b:86:45:94:46:29:a5:a4:de:5d:93:48:
                    50:6b:94:5d:b4:6d:f5:c8:5d:7a:85:8b:bf:9d:e4:
                    63:62:c7:f7:9c:57:23:88:ec:ab:77:91:39:5c:30:
                    46:22:a0:42:07:6b:f9:72:a0:0f:d7:c0:6a:d8:32:
                    96:f4:a0:5d:b9:ce:b3:e4:4e:eb:40:b9:b7:c0:8f:
                    88:6e:d2:64:b6:7b:40:1d:ee:27:82:6a:1d:52:31:
                    a8:92:09:6d:aa:7c:9c:fc:eb:65:dc:a7:5b:a0:b9:
                    60:85:4f:2a:bb:88:de:30:e8:70:f9:48:70:1f:25:
                    7c:c0:84:5f:4e:02:58:6b:be:fb:32:2a:95:95:73:
                    b5:22:c8:ce:e1:44:ff:de:d7:94:22:6d:76:e6:d9:
                    78:2f:94:21:0f:63:74:59:6e:72:66:2e:4a:5f:15:
                    4f:20:4d:ea:36:5e:9a:da:07:e7:d7:e4:b8:22:3a:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:94:59:8B:B9:48:F3:3E:FC:84:B8:48:F2:0D:85:A6:6C:0F:99:36
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:0d:8f:48:01:33:2e:0a:87:50:7c:f8:8a:db:2a:b1:2a:
         fa:cc:a6:85:25:04:f8:0d:fb:63:72:d7:d4:d5:c4:df:1a:28:
         6c:52:b5:2d:e2:c7:a4:12:08:73:91:65:8b:1d:eb:fd:73:1e:
         f7:b5:c6:22:c9:d0:69:cb:d7:37:5e:cd:b5:48:bf:ed:97:58:
         df:a3:11:2b:e6:2d:b5:8b:0c:a4:9b:a4:19:a5:e1:21:ec:fd:
         0a:c9:22:13:42:0b:6e:ed:1c:55:f4:61:e4:47:75:be:c7:2f:
         e2:c2:b9:2c:85:12:1b:e2:48:8c:53:18:d6:3c:38:24:c1:f3:
         01:c5:ad:14:d4:52:c9:d7:b4:51:8c:a0:60:00:ab:fe:f9:bc:
         06:00:65:18:82:d9:48:b0:8c:ed:95:ef:94:49:60:26:5a:47:
         25:f7:fa:12:8c:1a:a5:37:1c:d9:e4:58:91:ba:62:8d:ce:2f:
         ce:a2:a9:ab:42:c5:25:73:9e:38:6a:4f:38:9c:51:e6:80:a5:
         1a:65:b8:e0:15:64:74:47:ad:71:13:33:c1:08:f0:bc:3a:42:
         6e:11:4d:76:12:d2:cd:59:b8:2e:22:60:87:04:49:22:40:60:
         3c:88:e5:66:8b:76:cf:56:48:d2:4e:0a:b6:06:d5:b2:3b:50:
         ba:22:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:47:50 2025 by rpki-client