Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa
File:                     3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa (raw, json)
Hash identifier:          RBRLxSqWBY8fTl0ShrFyolqZViuwStXuo5yHtg7HuZk=
Subject key identifier:   54:1D:C8:73:15:2F:A1:4E:33:7E:95:76:42:75:B0:16:08:5C:EA:26
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       0A355D87C582B98B6DA6824DC17E2D396B198636
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa
Signing time:             Mon 27 Jul 2026 15:00:37 +0000
ROA not before:           Mon 27 Jul 2026 14:55:37 +0000
ROA not after:            Mon 26 Jul 2027 15:00:37 +0000
asID:                     271473
IP address blocks:        181.174.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 08:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:35:5d:87:c5:82:b9:8b:6d:a6:82:4d:c1:7e:2d:39:6b:19:86:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Jul 27 14:55:37 2026 GMT
            Not After : Jul 26 15:00:37 2027 GMT
        Subject: CN=541DC873152FA14E337E95764275B016085CEA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:52:d5:2d:dd:d3:a2:76:dd:61:f3:f8:9d:
                    46:f8:22:83:f7:fd:f7:a4:8c:5a:ed:eb:48:ef:c5:
                    b6:dd:a6:a7:f8:01:8c:96:09:12:98:a9:59:26:04:
                    fb:28:78:0c:5a:cc:62:43:d1:31:c0:25:f7:92:0a:
                    93:5a:1e:63:36:c0:a9:ba:1a:55:2d:8d:e2:d5:29:
                    b6:1e:43:ec:aa:65:26:18:d0:38:cb:89:7d:92:f3:
                    d5:50:fe:2b:20:01:5d:54:b9:56:8d:ef:89:51:97:
                    14:0c:d3:f9:92:23:95:f9:ec:9f:d6:9f:4f:7f:21:
                    c5:a8:1f:83:68:2d:5d:63:2a:97:ae:ed:8a:15:08:
                    ce:9f:aa:af:5f:dd:36:4d:af:21:26:2e:94:bb:0d:
                    78:dd:07:a5:42:ba:53:fb:39:cc:18:33:e1:ee:ae:
                    f2:d2:2c:ca:16:14:26:67:df:07:00:ba:03:8e:5e:
                    5f:4f:44:8e:1d:fe:6d:a3:57:aa:f5:ba:3f:28:52:
                    60:14:49:0d:08:ce:57:5a:ce:bc:2b:7f:f8:c4:ae:
                    f8:67:ea:9b:40:5d:37:f9:04:6c:22:dc:2b:ea:05:
                    c3:7e:29:4a:36:2e:22:78:ad:dd:04:dd:52:fe:5e:
                    4c:ae:85:3e:e7:a3:d1:7e:aa:e3:8a:04:3e:32:c8:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1D:C8:73:15:2F:A1:4E:33:7E:95:76:42:75:B0:16:08:5C:EA:26
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3230392e302f32342d3234203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:33:ee:9b:e3:8d:f9:8a:11:59:0e:00:a0:86:22:86:96:
         e9:10:6d:d3:9d:69:8d:27:d8:07:34:15:77:b7:b7:23:7c:0c:
         13:67:98:fa:39:9b:7d:19:84:1a:46:80:8b:81:60:da:18:a8:
         1e:19:05:24:c5:87:43:48:da:0e:f4:58:cb:3e:45:53:5d:1a:
         06:79:84:dd:92:e7:56:a4:3a:da:26:1e:05:33:27:07:09:58:
         65:65:8a:6c:6e:3b:ad:eb:a3:9a:94:7c:c6:80:86:f9:a0:f1:
         7e:86:f7:a0:e6:bb:c8:ff:95:8c:6a:62:d7:4e:59:f3:2b:5a:
         59:1a:7a:0c:05:21:91:56:1e:bb:b4:49:41:22:bf:c7:4d:f9:
         33:d6:0f:76:cb:8f:46:be:2a:53:de:7e:e8:e9:2c:e8:75:94:
         3a:11:9a:c9:43:d4:28:85:35:4c:43:98:72:74:57:2b:00:94:
         76:5e:25:c2:21:44:d1:2f:4d:a6:8d:77:50:e7:62:de:67:93:
         fc:c0:7e:da:d9:15:53:36:6f:b2:0f:31:2f:ea:8b:38:1b:f0:
         42:a7:b6:9a:13:b8:c5:53:b4:bb:4e:49:29:94:5e:a7:e2:b1:
         3b:ba:88:ba:36:07:e8:71:81:49:b8:e6:02:23:7f:5b:88:87:
         c7:18:e2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:44:18 2026 by rpki-client