Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3231302e302f32332d3233203d3e20323731343733.roa
File:                     3138312e3137342e3231302e302f32332d3233203d3e20323731343733.roa (raw, json)
Hash identifier:          ZlYTBnJ/9+7B4anQIftkuX9/AFOfWr0dB/Id3QFNRO0=
Subject key identifier:   0A:07:0D:7F:34:6B:6E:B1:BB:94:40:AB:6C:ED:EF:F5:D4:27:0D:5C
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       73A67F294CDA1CF0A728A7BAB1F0885E305776EF
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3231302e302f32332d3233203d3e20323731343733.roa
Signing time:             Sat 23 Aug 2025 10:15:31 +0000
ROA not before:           Sat 23 Aug 2025 10:10:31 +0000
ROA not after:            Sat 22 Aug 2026 10:15:31 +0000
asID:                     271473
IP address blocks:        181.174.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a6:7f:29:4c:da:1c:f0:a7:28:a7:ba:b1:f0:88:5e:30:57:76:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Aug 23 10:10:31 2025 GMT
            Not After : Aug 22 10:15:31 2026 GMT
        Subject: CN=0A070D7F346B6EB1BB9440AB6CEDEFF5D4270D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bb:50:d8:d1:05:f8:de:1a:b5:06:d5:12:2b:
                    0b:22:ae:9e:18:b8:4f:b8:79:43:b0:ba:47:b2:df:
                    5f:4a:0b:27:24:ec:b6:e3:74:f6:cc:97:ba:ac:9c:
                    29:87:6d:38:a2:23:9d:32:92:96:bb:d2:fc:ba:ff:
                    d5:ed:bc:7e:3b:d4:e0:48:9d:37:40:0c:1d:5e:94:
                    4d:c1:b8:40:c1:85:1b:28:9b:f1:55:03:27:c8:ad:
                    8f:b6:36:4b:30:9a:8a:b9:7d:e4:bd:da:7c:a3:f5:
                    a3:a3:ea:6e:48:4e:19:a8:9f:29:f4:2c:f4:70:9a:
                    2d:35:f4:d5:b6:ec:12:d3:5d:7f:8b:15:6d:e9:6c:
                    5d:0e:76:59:0d:22:73:8c:c2:44:9c:dc:80:58:20:
                    ea:a1:b3:3c:6b:1f:b4:fb:92:c8:f6:bc:47:4b:c0:
                    e7:62:8f:9b:92:fe:ae:c5:06:26:65:78:05:63:af:
                    56:21:36:34:e3:03:60:2d:fe:32:91:ad:50:f3:67:
                    60:44:9f:56:71:fd:a6:24:51:14:af:ed:4c:81:c0:
                    24:1b:a1:07:ea:9e:0a:9b:b1:7e:d3:2c:14:21:11:
                    84:cd:c2:b6:9b:4a:ad:ce:33:8e:fd:13:fa:43:89:
                    b5:8b:ec:d0:7a:bd:b1:bf:d6:c6:20:9c:8f:de:56:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:07:0D:7F:34:6B:6E:B1:BB:94:40:AB:6C:ED:EF:F5:D4:27:0D:5C
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3231302e302f32332d3233203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:46:e6:d1:76:36:ce:3a:b3:ea:d2:9e:cd:e0:59:dc:84:1f:
         28:61:7d:e9:64:9d:e7:7b:09:92:b2:b4:24:f7:29:97:bd:54:
         12:13:e6:0f:11:67:2a:6f:69:ac:86:76:ef:5e:d3:04:e0:49:
         92:06:26:27:b4:ae:95:0c:63:1c:cc:39:b0:42:d1:3e:77:d2:
         e2:4a:8f:13:14:14:04:1d:7f:22:3e:7e:47:34:74:70:cd:fb:
         40:b2:2c:71:32:68:b4:96:2b:28:da:7d:b5:a8:e4:a6:1a:e1:
         db:88:3f:27:d9:68:36:c0:2d:b6:9a:88:13:6c:a1:c5:a6:9c:
         5e:64:73:75:c7:96:fe:a4:4c:5e:ff:fe:79:e1:3b:ec:db:b9:
         55:a2:e5:40:d5:a5:28:14:e7:8b:1a:31:63:16:ac:8b:8a:60:
         96:e8:e0:dd:b8:18:9e:f7:1a:ca:b0:b2:65:00:d5:b6:dd:41:
         a7:50:c1:ee:04:63:83:e1:56:54:e1:4b:9d:5d:5b:10:55:0c:
         18:ca:1d:f6:76:c4:8f:91:64:da:1a:09:66:90:32:95:e1:93:
         45:6e:03:14:ff:95:fa:43:ff:8b:96:94:3b:b8:b6:65:a6:15:
         07:83:f1:41:95:0a:26:e9:31:20:c5:5f:55:d1:9a:df:21:8f:
         c6:ff:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:31 2025 by rpki-client