Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa
File:                     3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa (raw, json)
Hash identifier:          tozjc0AjKPH0b2/JpEeMmPjEk5NFtMjruMVkDJSgJXo=
Subject key identifier:   39:66:7C:DD:FB:84:A1:C3:30:9B:1B:0E:F7:62:4D:91:75:56:13:CF
Certificate issuer:       /CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
Certificate serial:       0801C3AE1196A3E2ACDD3308FA2E81C07984B982
Authority key identifier: 4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa
Signing time:             Sat 08 Aug 2026 02:27:16 +0000
ROA not before:           Sat 08 Aug 2026 02:22:16 +0000
ROA not after:            Sat 07 Aug 2027 02:27:16 +0000
asID:                     53140
IP address blocks:        187.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl
                          rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:01:c3:ae:11:96:a3:e2:ac:dd:33:08:fa:2e:81:c0:79:84:b9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F
        Validity
            Not Before: Aug  8 02:22:16 2026 GMT
            Not After : Aug  7 02:27:16 2027 GMT
        Subject: CN=39667CDDFB84A1C3309B1B0EF7624D91755613CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:21:73:1f:d4:b3:dd:07:2d:d7:c4:e1:2b:
                    b1:08:fe:1f:9c:64:2d:68:f5:0b:8a:9e:96:e4:9c:
                    86:52:d2:6b:d1:46:af:71:87:f7:14:1b:26:7d:38:
                    84:12:2b:2a:8b:6c:f8:af:33:a4:70:24:13:7f:6b:
                    29:68:c8:cd:6a:8e:24:10:04:47:e0:20:5b:7f:12:
                    03:ca:b7:39:06:92:97:2d:62:cf:fe:9d:82:ea:63:
                    e5:d0:ba:0a:27:b2:62:2b:fd:66:a0:7e:ae:84:ca:
                    69:24:01:fc:ec:1f:a5:ca:30:d8:87:05:22:bb:9a:
                    dc:fc:78:bb:d5:52:19:7f:a8:fb:e9:f7:37:60:de:
                    bb:67:82:70:43:81:e3:c4:98:38:a3:bd:57:86:f3:
                    b0:43:44:cd:b1:7d:97:1c:a6:dd:4c:05:d1:f3:d8:
                    e8:ef:fd:4b:96:40:4e:fd:ee:ec:bc:a9:d6:db:b5:
                    9f:ee:ab:49:41:4e:2f:d2:2a:36:96:3d:0b:e6:3c:
                    9f:5b:c6:04:c8:df:18:16:20:24:46:b7:bd:f6:ef:
                    71:35:14:c8:5a:15:3a:8b:b4:97:7e:9e:e0:ef:3a:
                    36:3f:05:18:6d:86:b9:e3:65:f4:5f:58:5a:58:40:
                    74:50:2b:84:20:9b:ca:38:58:99:68:c7:f6:49:4f:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:7C:DD:FB:84:A1:C3:30:9B:1B:0E:F7:62:4D:91:75:56:13:CF
            X509v3 Authority Key Identifier:
                keyid:4A:42:6A:3C:61:74:9D:0C:FF:F7:A3:C3:55:D0:68:54:ED:5C:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A426A3C61749D0CFFF7A3C355D06854ED5C1B0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GfMYtGYBWzgpEktFesCvYaH3etSBRjCEDekyUps2sQhY/0/3138372e3132302e3230342e302f32342d3234203d3e203533313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:56:dd:a3:f8:3e:59:0c:ff:c1:73:0d:cd:15:35:1c:c9:6c:
         13:3f:58:fe:24:2e:6d:a5:ab:76:dd:c4:fb:0d:e5:f4:5d:5b:
         e0:47:41:f3:26:bc:4b:21:8e:00:4f:39:fb:0e:33:7a:e2:8f:
         65:84:d9:ae:79:03:39:b5:b6:73:d0:5e:a2:ec:94:da:96:85:
         74:b9:ba:5e:52:b5:16:1a:82:1a:c7:2c:43:c6:7d:fc:d6:98:
         43:28:d0:79:2f:c6:b6:d8:00:83:48:f2:77:f8:73:ee:b7:f0:
         cd:26:ab:ab:03:c0:0e:d4:3c:69:57:b7:9d:a5:a6:2d:4b:d4:
         d9:d4:61:f6:41:5b:03:17:1a:97:c3:9a:b6:0d:b6:5f:07:28:
         87:49:79:d6:70:57:d9:d8:6f:70:4a:5d:16:3d:d8:e1:24:67:
         84:6a:dd:b3:65:18:e0:af:15:3f:5d:6a:b1:20:46:1e:bb:67:
         ce:90:2b:2b:d8:6f:47:bc:59:85:bd:1b:dc:30:2f:ed:59:a5:
         34:a1:5f:93:33:1e:cb:5c:de:c2:04:a4:f1:de:38:55:75:ae:
         83:88:64:26:6b:91:d9:c8:e3:bf:f5:e8:a5:e5:96:ed:8e:48:
         bc:cd:9f:35:fb:98:3c:01:fc:4a:44:ad:5f:85:a9:ed:8a:e6:
         fb:33:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:40:37 2026 by rpki-client