Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa
File:                     3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa (raw, json)
Hash identifier:          bOn5yoKPVyPTqkvpYQrgB8tO8BaVUtnJ5e3tfwijQuQ=
Subject key identifier:   5F:F3:78:F4:B2:96:4D:78:2B:62:E2:28:B6:5F:4C:82:D2:5A:71:B1
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       2771FB4665CCDC156847F07C037F241A6BAD6989
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa
Signing time:             Mon 25 Aug 2025 15:00:17 +0000
ROA not before:           Mon 25 Aug 2025 14:55:17 +0000
ROA not after:            Mon 24 Aug 2026 15:00:17 +0000
asID:                     271473
IP address blocks:        181.174.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:fb:46:65:cc:dc:15:68:47:f0:7c:03:7f:24:1a:6b:ad:69:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Aug 25 14:55:17 2025 GMT
            Not After : Aug 24 15:00:17 2026 GMT
        Subject: CN=5FF378F4B2964D782B62E228B65F4C82D25A71B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:59:60:73:3d:49:77:29:c5:62:a5:47:83:
                    4c:6b:5b:3d:28:c8:a0:13:be:88:ba:cf:e7:77:63:
                    e1:61:9e:7e:5d:cc:11:01:39:a2:03:ac:09:3e:c5:
                    71:da:1b:93:10:a0:12:55:e3:7b:25:74:8d:6e:9f:
                    65:63:22:44:e7:af:c7:1d:20:a1:ab:88:b0:70:42:
                    48:e3:bb:e3:04:cd:7d:62:22:8a:93:b9:6a:1e:d4:
                    90:65:5d:6a:73:83:5a:54:ac:0f:9f:53:0c:2b:73:
                    2e:4f:f8:94:99:fd:5a:24:fd:3f:86:a9:8a:3c:12:
                    88:51:c3:62:41:47:20:c0:a4:05:04:c4:eb:2e:dc:
                    dd:54:5e:e3:66:1c:7d:cc:fa:66:13:c7:eb:71:4b:
                    12:c7:0c:52:72:62:9f:44:c4:27:0d:b4:8e:3f:06:
                    cd:95:08:c5:b4:30:9a:f2:9d:1a:1c:1c:9c:fb:95:
                    c3:e6:33:f0:ab:89:89:c1:9b:29:c7:3a:3c:bd:ea:
                    a3:c6:8f:61:a4:87:e1:92:b7:33:c4:29:91:4d:31:
                    c3:50:80:e3:5a:cd:01:89:b4:6f:8c:6a:8b:50:92:
                    19:3c:2f:e7:4a:38:75:38:74:b1:3b:77:e7:3e:41:
                    97:22:46:35:04:fa:b5:6a:04:f6:b9:99:b2:27:14:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:78:F4:B2:96:4D:78:2B:62:E2:28:B6:5F:4C:82:D2:5A:71:B1
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:79:3c:98:0f:09:91:77:41:ef:f8:b2:36:b6:2e:27:6f:
         f3:ef:b2:a8:f1:74:0f:b6:42:61:c9:85:4a:44:9d:03:43:3b:
         45:2d:b6:47:6b:77:27:68:0a:99:9e:fb:23:3c:6f:47:35:31:
         28:e4:f6:37:30:7a:d4:66:c6:15:5f:e1:cc:82:c9:a3:2a:4c:
         12:7e:71:82:ea:f1:72:5b:99:a7:66:19:dd:a6:56:02:eb:3f:
         78:1b:21:e8:42:d0:36:2b:25:17:ea:55:46:ff:c4:46:9d:2f:
         27:db:a3:ee:24:db:52:c0:27:3d:83:8e:5c:44:58:2b:3b:79:
         f0:9e:25:fc:76:14:99:0a:be:75:ed:e7:a2:03:93:f2:66:34:
         3e:02:78:bb:0e:13:96:74:b9:94:37:40:c2:b1:5b:c7:b4:7b:
         b1:64:b4:0f:91:bd:e0:4d:38:e4:de:0a:7d:f9:d5:d2:87:43:
         e5:ae:43:2a:72:cd:a4:f0:42:86:a7:22:41:a3:32:ae:32:fd:
         5f:88:6f:c8:a3:48:41:b4:d9:8d:4a:24:7b:1a:69:0e:3e:37:
         61:5a:43:a2:1d:a8:e7:29:8f:4c:0b:a1:8c:3f:3b:bc:19:21:
         53:ae:91:ee:97:d9:48:52:c9:d5:25:ac:97:19:ab:02:60:a8:
         c8:e1:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:27:00 2025 by rpki-client