Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3231302e302f32342d3234203d3e20323731343733.roa
File:                     3138312e3137342e3231302e302f32342d3234203d3e20323731343733.roa (raw, json)
Hash identifier:          1G2AwhAAr8crK11lLrLIvv4Lm8WvXW6Ftlo4gQV1ov8=
Subject key identifier:   EE:DC:14:35:6E:75:10:CF:2E:61:F8:8B:D6:CC:81:F9:40:0F:38:D8
Certificate issuer:       /CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
Certificate serial:       6EDF5092D6C55223C3B28C5D5DE31F88A439BFFC
Authority key identifier: C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3231302e302f32342d3234203d3e20323731343733.roa
Signing time:             Mon 27 Jul 2026 16:00:37 +0000
ROA not before:           Mon 27 Jul 2026 15:55:37 +0000
ROA not after:            Mon 26 Jul 2027 16:00:37 +0000
asID:                     271473
IP address blocks:        181.174.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:df:50:92:d6:c5:52:23:c3:b2:8c:5d:5d:e3:1f:88:a4:39:bf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12615551D8B6DF06EE8F85380F82C88C6AD135F
        Validity
            Not Before: Jul 27 15:55:37 2026 GMT
            Not After : Jul 26 16:00:37 2027 GMT
        Subject: CN=EEDC14356E7510CF2E61F88BD6CC81F9400F38D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:15:c4:f6:c5:4e:67:07:7a:9e:21:24:96:
                    bc:96:23:52:37:f9:1a:7e:80:20:d1:d5:e3:82:19:
                    b8:ea:38:f8:bf:d9:be:db:35:25:1b:b1:66:03:ab:
                    80:f3:47:c1:da:fc:e8:c5:e5:85:2f:a9:3c:af:12:
                    71:83:b0:f2:8f:0a:1b:7c:5d:4d:83:ea:b2:32:aa:
                    17:fb:bb:5c:28:1c:08:6b:fc:40:f2:47:c0:2c:6c:
                    5d:c8:4d:de:ab:6e:0c:d1:3d:33:af:83:82:ee:a5:
                    70:09:49:65:22:3c:42:65:5c:e9:b1:22:55:b8:36:
                    42:67:b2:00:04:41:1c:90:4f:93:4b:69:14:36:a9:
                    85:de:ca:99:ff:d3:0c:b8:f2:d1:a5:5b:d7:17:77:
                    05:a9:c2:b3:bf:02:80:80:fd:9d:a6:a4:16:6b:7b:
                    4f:29:30:9d:30:5d:9b:2e:9c:74:b2:04:48:d2:99:
                    94:00:2e:b5:c2:c7:3a:02:b7:f9:71:bd:2c:38:96:
                    2d:8d:cf:c9:c6:10:37:6f:f6:44:47:e8:8f:97:ec:
                    f9:45:bf:fa:22:96:b7:12:c4:bf:ff:81:85:8f:04:
                    fb:3f:83:66:84:b0:85:31:d3:2f:09:9e:c7:50:3e:
                    90:8c:f4:a3:41:a2:91:f0:8f:25:f5:94:34:0e:95:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:14:35:6E:75:10:CF:2E:61:F8:8B:D6:CC:81:F9:40:0F:38:D8
            X509v3 Authority Key Identifier:
                keyid:C1:26:15:55:1D:8B:6D:F0:6E:E8:F8:53:80:F8:2C:88:C6:AD:13:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/C12615551D8B6DF06EE8F85380F82C88C6AD135F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C12615551D8B6DF06EE8F85380F82C88C6AD135F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/3138312e3137342e3231302e302f32342d3234203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:9d:b4:81:c8:12:ec:38:49:02:63:e4:92:d0:94:85:95:
         94:5d:ee:05:d0:2a:0c:21:57:55:f4:c4:c0:a5:63:df:c0:fe:
         b8:64:0e:9b:a0:c2:fe:48:b0:99:3f:04:31:08:d4:22:3d:eb:
         64:c9:7b:4f:5f:8d:d9:b9:2a:c2:b1:83:4a:5d:b4:9a:72:93:
         07:78:f4:06:8c:6b:cb:06:b3:6e:d6:84:c9:19:37:ad:ba:16:
         f7:5c:9e:1c:67:91:4d:f1:f6:90:0a:d1:8b:26:6b:11:41:dd:
         97:20:d0:b5:50:5e:54:eb:89:8f:b8:68:df:65:fb:da:83:d4:
         b8:9d:dd:7a:f6:13:73:48:8f:66:69:40:3c:67:ec:9f:f1:25:
         3b:c7:63:21:68:f2:af:66:39:8c:9c:9d:41:d1:82:df:33:33:
         ea:af:e4:c9:69:8d:71:bb:99:87:57:a5:8b:4b:b3:bc:cd:5b:
         a6:93:c1:bb:c8:4a:3c:83:19:1f:d1:c1:28:d4:ca:7d:79:6f:
         c7:f6:cc:3b:87:a2:82:8e:2e:27:1d:c6:47:6c:01:d0:1a:17:
         4e:f1:9a:43:44:64:88:6d:30:00:33:b1:1f:3c:2d:fc:4d:a2:
         5d:0c:06:db:d2:60:4a:2e:20:f6:b3:34:8c:a2:32:f5:06:23:
         26:40:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:39:48 2026 by rpki-client