Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230382e302f32342d3234203d3e20323731343733.roa
File:                     3138312e3137342e3230382e302f32342d3234203d3e20323731343733.roa (raw, json)
Hash identifier:          h/QhLCdfMHrVr0HDlIyR2x1NOppqVqGIk9s2BqJtlSI=
Subject key identifier:   60:56:6E:37:1F:D4:AA:C7:DA:D3:F4:2A:55:55:74:3A:A8:36:E6:CB
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       2E8AE3163C70FEECA80639E165D42A827355860D
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230382e302f32342d3234203d3e20323731343733.roa
Signing time:             Mon 25 Aug 2025 15:01:21 +0000
ROA not before:           Mon 25 Aug 2025 14:56:21 +0000
ROA not after:            Mon 24 Aug 2026 15:01:21 +0000
asID:                     271473
IP address blocks:        181.174.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8a:e3:16:3c:70:fe:ec:a8:06:39:e1:65:d4:2a:82:73:55:86:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Aug 25 14:56:21 2025 GMT
            Not After : Aug 24 15:01:21 2026 GMT
        Subject: CN=60566E371FD4AAC7DAD3F42A5555743AA836E6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:3f:6a:ac:28:94:c2:76:43:c5:41:d9:ec:
                    fd:2d:11:25:f0:af:91:e3:ac:e0:b0:f7:4a:4a:e0:
                    44:16:c1:0c:40:f5:fb:6d:0b:8e:e2:17:53:5a:30:
                    ea:df:17:83:fd:d4:a9:a6:07:95:12:0c:ab:cc:e7:
                    c6:89:43:a4:60:20:d5:28:f5:d7:e8:04:1f:ab:cb:
                    4e:a2:2f:c7:62:b4:f7:06:bc:8a:be:e6:3d:1c:10:
                    2c:85:55:d4:07:0a:65:e5:ce:06:ae:48:62:94:fc:
                    be:e8:ee:a1:cf:c5:ff:da:62:53:c9:2c:d8:3e:ca:
                    e9:74:31:9a:7c:31:25:9b:8e:cb:b4:4e:3f:1d:ed:
                    20:a0:8b:5d:32:19:dc:1e:3a:18:d5:03:62:54:c3:
                    2a:56:a6:d2:b6:41:74:31:25:e5:4b:8c:14:45:ff:
                    07:e4:9b:ed:dc:5c:6c:fe:0f:a9:11:69:9e:71:1c:
                    68:d3:be:ea:55:52:fa:a5:89:be:3e:b5:f2:51:40:
                    97:eb:93:22:8e:5b:41:64:22:77:93:bf:11:3b:43:
                    19:b6:18:9a:41:ba:e4:a2:0c:12:63:dc:55:57:5a:
                    62:98:5e:84:c7:96:37:0b:36:31:4a:27:17:5d:7a:
                    31:f7:36:23:48:93:b2:f7:9b:44:b0:78:88:ec:7d:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:56:6E:37:1F:D4:AA:C7:DA:D3:F4:2A:55:55:74:3A:A8:36:E6:CB
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230382e302f32342d3234203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4c:0f:20:98:f3:b2:af:23:fe:c8:1a:45:88:d8:24:60:5c:
         20:ca:2b:2f:06:0a:ec:d4:86:16:90:1b:6f:2b:aa:37:1d:c4:
         95:79:a3:d7:87:29:54:ad:8b:d2:92:01:44:9e:88:ec:ef:58:
         1a:9e:25:20:40:98:36:16:b2:28:5b:65:13:da:93:71:17:2f:
         29:ca:72:5a:39:09:84:8c:e9:5d:c1:fd:a3:fb:c6:ad:6d:4d:
         a0:86:17:e6:6e:5c:c6:10:41:e5:84:ab:11:1e:6f:ca:25:77:
         2b:64:4d:76:fd:5b:d4:e5:83:f8:6b:2b:9c:96:f2:0c:bd:c9:
         e2:6a:5a:5b:ce:68:90:c6:95:1c:42:25:ac:95:57:f3:2c:10:
         c1:8b:c2:ed:da:6b:bb:3a:af:49:a1:af:b2:c7:ef:e8:21:a4:
         f6:45:e5:e5:49:1c:03:aa:61:0a:ec:d1:57:03:59:ee:e0:82:
         46:76:d4:69:f4:72:62:6f:1e:d9:9b:0d:d0:76:33:74:32:9e:
         96:eb:c5:20:49:01:46:fb:eb:59:64:25:0c:df:8c:ee:68:0a:
         c1:1b:e1:93:67:c6:6f:49:c5:31:a7:37:6f:30:c0:5b:cf:e8:
         c0:14:da:00:c7:ea:24:f8:57:a9:2c:61:c9:13:91:29:2f:0d:
         b5:3d:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:58:46 2025 by rpki-client