Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
File:                     3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa (raw, json)
Hash identifier:          EC3ZCLS/9RQRfrc/yrCA5cwVZbS+HPi5gBR/uhmZIIc=
Subject key identifier:   64:5E:DA:E8:16:0C:CF:BC:02:A8:31:C4:4D:A8:B1:91:D0:27:66:53
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       153F2DBF61D9C101B89B5821E7305797771C1BE5
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa
Signing time:             Sat 13 Sep 2025 15:09:13 +0000
ROA not before:           Sat 13 Sep 2025 15:04:13 +0000
ROA not after:            Sat 12 Sep 2026 15:09:13 +0000
asID:                     271448
IP address blocks:        181.174.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl
                          rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:3f:2d:bf:61:d9:c1:01:b8:9b:58:21:e7:30:57:97:77:1c:1b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Sep 13 15:04:13 2025 GMT
            Not After : Sep 12 15:09:13 2026 GMT
        Subject: CN=645EDAE8160CCFBC02A831C44DA8B191D0276653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:5d:0e:a7:35:4e:3c:d1:1a:8c:b2:13:15:
                    b9:c1:b9:2a:07:1d:91:8b:05:5f:36:f5:3b:76:c2:
                    b6:04:12:9b:a3:e9:94:d5:ad:11:2c:18:37:72:ec:
                    27:73:ac:e0:28:b6:6c:fc:4f:92:0b:25:26:4d:7e:
                    09:84:61:30:8b:8b:75:e3:ed:d1:8d:2b:0d:82:5a:
                    df:7e:e2:a5:a3:8d:96:d9:05:1a:b3:e5:21:68:1a:
                    af:f3:20:e0:b0:0a:fe:06:a2:8c:9e:8b:58:fb:57:
                    51:44:7c:b5:6a:ec:68:a7:17:3b:ec:38:90:07:3d:
                    dd:c1:2d:5c:c4:37:b0:79:b8:ae:b3:00:88:05:fe:
                    c4:af:a6:32:49:aa:be:03:07:26:30:54:91:37:fa:
                    f1:73:18:b0:6a:1f:a5:7a:89:07:f7:8f:23:6e:15:
                    41:cb:fa:d0:3d:a9:4b:25:89:a9:0f:c9:c9:9d:cd:
                    2a:d2:1c:02:e7:41:fc:7b:36:51:04:c5:67:40:71:
                    70:38:3a:c1:6a:0d:46:c9:ae:57:31:31:98:a8:7e:
                    19:88:71:ae:a2:28:78:dd:f9:23:72:9b:06:4d:6d:
                    cb:7c:42:27:ee:e4:80:37:1e:48:c6:71:08:91:56:
                    26:dd:1b:3b:50:fd:fa:2e:21:9d:58:8f:60:6a:c6:
                    38:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5E:DA:E8:16:0C:CF:BC:02:A8:31:C4:4D:A8:B1:91:D0:27:66:53
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235322e302f32322d3232203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:bd:e0:61:e6:a2:a0:ce:49:5b:b1:db:fb:53:50:4a:48:
         13:5f:18:ed:e4:26:f1:8e:f9:74:a8:bc:1a:37:91:a0:38:32:
         f9:31:51:82:e7:a5:b7:59:af:43:36:c9:38:57:2b:c2:0d:6c:
         5c:38:62:5d:45:09:8c:72:bf:9f:f7:8b:a9:c0:d8:0c:0b:71:
         b8:f3:f0:00:59:95:97:ec:9a:f7:5e:b9:b1:be:9e:bc:23:cb:
         82:5f:80:b3:5f:10:68:e5:44:9f:fc:40:b0:aa:c6:c9:50:77:
         ec:02:2b:7d:46:e5:c1:69:f1:60:69:0a:12:7a:f7:da:76:d3:
         9d:38:42:93:86:33:b8:e3:d5:76:e1:a8:10:67:93:ce:4c:c7:
         bd:ee:8e:8b:ab:12:cb:69:7a:8b:0a:38:15:6f:1a:48:12:f3:
         29:45:9d:49:b4:79:46:b8:2f:c5:cb:9c:7c:29:6a:04:7b:b4:
         a9:66:1e:b8:cc:1f:9f:88:24:8f:2c:84:36:80:88:98:f2:57:
         54:93:c2:6e:0a:e6:f5:51:ee:a0:85:c8:85:bc:45:88:95:64:
         53:30:69:f8:96:fc:65:ff:24:ba:92:ab:1c:e9:be:6b:67:bd:
         2f:c1:25:6a:b3:97:6d:07:9f:39:2d:b8:af:11:13:e6:12:1f:
         26:13:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:07:39 2025 by rpki-client