Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa
File:                     3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          vUO56kIQOtrK/nodfNF10oHwFEQISbdkGVXjaL1cFuA=
Subject key identifier:   C4:8D:D3:D0:5D:23:60:D8:30:97:38:E0:48:F0:B9:9C:C3:B5:FF:87
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       1B137B951F2797CD7BF2755D0248CD9B514F3420
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa
Signing time:             Mon 27 Oct 2025 17:06:45 +0000
ROA not before:           Mon 27 Oct 2025 17:01:45 +0000
ROA not after:            Mon 26 Oct 2026 17:06:45 +0000
asID:                     270814
IP address blocks:        187.121.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:13:7b:95:1f:27:97:cd:7b:f2:75:5d:02:48:cd:9b:51:4f:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Oct 27 17:01:45 2025 GMT
            Not After : Oct 26 17:06:45 2026 GMT
        Subject: CN=C48DD3D05D2360D8309738E048F0B99CC3B5FF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:0f:af:e3:8d:4a:47:2f:78:1b:b7:f9:ae:
                    79:27:07:62:bd:36:22:8d:c9:a5:4a:87:a5:03:eb:
                    3c:89:25:1f:1b:11:81:17:74:a8:fe:eb:f9:4c:0e:
                    bc:61:3a:93:0d:de:4b:4c:41:79:04:8d:d8:1b:70:
                    dd:3c:51:0b:09:89:84:1c:a3:d4:e2:39:25:4d:8f:
                    d5:61:f4:33:fe:b6:b4:ce:96:f0:46:86:11:25:09:
                    90:50:b2:f0:3b:fd:b5:9d:30:d0:c8:9e:cf:0c:3a:
                    0a:1b:0c:d0:a7:77:d6:51:92:fa:63:eb:98:ca:c3:
                    e9:ed:4b:4b:ed:a1:bf:02:f5:20:55:a2:66:e6:63:
                    f5:82:d9:7f:84:a7:37:9f:38:78:34:95:39:aa:07:
                    a9:19:34:39:54:94:1a:b0:f6:ee:ea:8c:49:09:a8:
                    c4:f0:52:cb:46:15:5b:17:bf:26:8d:7c:c7:b7:e0:
                    36:b7:9f:df:02:15:3e:1f:4f:d2:58:fc:d8:8d:48:
                    3e:85:26:bc:bd:c2:4f:dd:08:98:30:9b:2f:a8:b8:
                    a5:c4:4b:1d:b9:e0:bc:de:34:26:0b:59:f3:e0:ef:
                    a2:ed:a4:9e:d5:69:91:f4:fa:32:c0:69:b1:6f:da:
                    06:cc:d3:cf:6f:8c:47:7c:2c:b9:3e:d4:b5:49:4c:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8D:D3:D0:5D:23:60:D8:30:97:38:E0:48:F0:B9:9C:C3:B5:FF:87
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e3132312e3136302e302f32302d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:aa:e9:ee:56:26:be:62:7c:ae:9a:15:69:7a:22:7b:19:
         1e:b5:ea:78:68:b3:5c:ae:b5:88:b0:41:31:90:21:77:a2:c3:
         49:ad:5b:ac:ad:60:ce:ba:9c:b6:70:9d:88:4c:9c:4f:20:d2:
         09:18:92:75:3a:85:e5:5e:74:6f:3f:a3:e5:29:94:20:d6:97:
         99:bf:73:8c:6e:34:b0:11:74:cd:d0:5b:77:c2:49:c7:e2:37:
         87:f7:53:e0:da:9e:89:f4:e3:8a:99:1e:00:6e:c1:87:80:64:
         a5:57:a1:4b:38:47:30:b2:76:89:14:55:7b:3f:46:c9:cb:71:
         07:1c:64:16:09:56:50:76:58:e7:6f:7b:6e:2d:da:cf:45:ad:
         ac:63:e6:75:13:bc:1e:02:01:41:51:f1:26:54:8c:8f:03:42:
         54:ef:a2:88:e8:75:98:1a:28:35:c8:2b:08:2c:0c:d3:74:60:
         4d:5c:a2:3f:86:35:24:6f:63:14:c5:a4:6f:d0:2e:75:07:ed:
         59:40:d4:f8:12:a2:7a:be:c1:87:8c:bf:b7:17:19:f5:85:d1:
         c7:48:99:cd:5e:03:13:a0:6a:c8:8e:3b:f1:12:8c:48:bc:6d:
         ba:d7:c3:69:27:51:ac:8e:4c:22:12:ae:c3:a8:dc:71:a4:df:
         b4:b5:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:31:57 2025 by rpki-client