Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa
File:                     3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa (raw, json)
Hash identifier:          +9t1FXSUW0CUxorY0ZcXKZvpvZajR2Y5P2X7evFF1n8=
Subject key identifier:   A2:51:F6:D3:2B:DE:57:3C:37:5A:27:EA:21:8A:31:B3:02:AE:95:F1
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       2C215CC05D82406AD3CE5B969ECB887797343387
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa
Signing time:             Sat 13 Sep 2025 15:09:13 +0000
ROA not before:           Sat 13 Sep 2025 15:04:13 +0000
ROA not after:            Sat 12 Sep 2026 15:09:13 +0000
asID:                     271448
IP address blocks:        181.174.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl
                          rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:21:5c:c0:5d:82:40:6a:d3:ce:5b:96:9e:cb:88:77:97:34:33:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Sep 13 15:04:13 2025 GMT
            Not After : Sep 12 15:09:13 2026 GMT
        Subject: CN=A251F6D32BDE573C375A27EA218A31B302AE95F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:0d:0e:f6:18:f5:9b:af:8d:f8:3e:84:29:
                    1c:0d:87:4d:bd:79:b2:b9:e8:95:84:bd:b4:69:62:
                    a7:a5:b2:f9:04:e0:e0:65:a1:fe:52:2b:d3:a1:b1:
                    4f:a0:42:4f:78:ff:ea:5f:3a:c9:06:d8:92:b1:b1:
                    96:36:f2:ad:28:e5:ad:7e:69:61:59:5d:fb:53:81:
                    00:bd:7f:be:73:11:6c:8a:b8:22:ae:a8:78:53:98:
                    bb:4c:56:e6:0f:29:a0:1a:d3:b2:8b:68:7f:3d:08:
                    31:97:fd:38:0a:2f:eb:8a:a7:aa:5e:22:bf:f8:c8:
                    d9:39:9f:3b:c0:8e:15:3b:07:a5:b6:e9:4d:bf:77:
                    16:71:88:14:7a:e3:27:b6:7f:8e:1b:f6:6f:d4:60:
                    7a:1e:36:81:b6:3b:6a:4a:38:a8:19:c7:1d:78:f4:
                    10:b4:f5:1a:7c:d6:25:80:be:44:47:c6:70:fb:6a:
                    1d:8f:53:a7:d5:13:a2:50:98:39:1c:93:5d:bc:4a:
                    30:82:c9:7e:04:c9:b8:b9:bf:9b:44:13:1f:ba:28:
                    22:a6:8b:08:68:be:e1:5e:54:ef:bf:2f:94:ba:65:
                    9e:a1:a1:91:da:63:4e:d8:14:6f:3d:3e:32:40:63:
                    6f:2f:45:36:69:67:7b:e3:bd:ee:2b:5a:9f:2f:64:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:F6:D3:2B:DE:57:3C:37:5A:27:EA:21:8A:31:B3:02:AE:95:F1
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/3138312e3137342e3235342e302f32342d3234203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:78:a6:73:e1:f6:e1:db:d8:55:e4:80:86:46:e0:3f:b5:
         9c:73:16:99:0e:38:b2:41:89:1a:cd:f3:7b:48:89:c8:fb:87:
         24:57:6f:e9:04:1e:a2:9e:91:de:3c:91:33:24:4f:70:de:0e:
         5b:7d:90:f2:73:f5:66:80:57:d3:7f:40:b3:02:a0:3a:04:d2:
         b7:9a:b1:c6:14:39:0d:62:a8:f4:80:54:8d:b0:6d:10:30:a7:
         f2:c4:d1:54:8d:6b:16:d9:5f:e3:c0:20:d2:62:09:f1:18:86:
         7f:2b:1a:b6:5d:43:39:4c:d7:23:9c:82:3d:e2:b7:5c:50:12:
         dd:6b:ac:27:97:2c:e6:e3:e5:fb:b5:81:83:95:a2:f1:0d:b1:
         d4:4f:d2:e7:ab:b5:73:55:1b:7b:85:ce:09:30:e1:2f:a7:f3:
         97:24:86:9d:56:7e:f9:73:71:ac:99:12:d5:0f:64:28:85:c3:
         98:b1:19:3c:e7:b2:c6:56:07:b0:93:17:f0:dd:9f:6c:be:84:
         1e:ce:c1:cd:72:7d:a4:46:85:97:e0:14:4c:eb:21:48:27:81:
         5c:01:e7:db:94:ca:1d:94:ee:65:81:72:a5:cd:a4:f4:98:13:
         f6:f5:d0:c4:87:18:bf:d5:64:33:1c:84:e5:77:74:6b:2a:6c:
         79:9d:3f:0e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULCFcwF2CQGrTzluWnsuId5c0M4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4RDE3NDE2QjczRTZFMjBENTk0MkU1MTBGMTEyNTRF
QjIwNTZBMTAeFw0yNTA5MTMxNTA0MTNaFw0yNjA5MTIxNTA5MTNaMDMxMTAvBgNV
BAMTKEEyNTFGNkQzMkJERTU3M0MzNzVBMjdFQTIxOEEzMUIzMDJBRTk1RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5Q0O9hj1m6+N+D6EKRwNh029
ebK56JWEvbRpYqelsvkE4OBlof5SK9OhsU+gQk94/+pfOskG2JKxsZY28q0o5a1+
aWFZXftTgQC9f75zEWyKuCKuqHhTmLtMVuYPKaAa07KLaH89CDGX/TgKL+uKp6pe
Ir/4yNk5nzvAjhU7B6W26U2/dxZxiBR64ye2f44b9m/UYHoeNoG2O2pKOKgZxx14
9BC09Rp81iWAvkRHxnD7ah2PU6fVE6JQmDkck128SjCCyX4Eybi5v5tEEx+6KCKm
iwhovuFeVO+/L5S6ZZ6hoZHaY07YFG89PjJAY28vRTZpZ3vjve4rWp8vZHTDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUolH20yveVzw3WifqIYoxswKulfEwHwYDVR0j
BBgwFoAUVY0XQWtz5uINWULlEPESVOsgVqEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ241anBXZ1U3TmZCYXplWlBFTDNweUxnVWhrQUVQQldHaFA2dXRuaUVo
WE4vMS81NThEMTc0MTZCNzNFNkUyMEQ1OTQyRTUxMEYxMTI1NEVCMjA1NkExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1OEQxNzQxNkI3M0U2RTIw
RDU5NDJFNTEwRjExMjU0RUIyMDU2QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NuNWpwV2dVN05mQmF6ZVpQRUwzcHlMZ1Voa0FFUEJXR2hQNnV0bmlFaFhOLzEv
MzEzODMxMmUzMTM3MzQyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALWu/jANBgkqhkiG9w0BAQsFAAOCAQEAf4J4
pnPh9uHb2FXkgIZG4D+1nHMWmQ44skGJGs3ze0iJyPuHJFdv6QQeop6R3jyRMyRP
cN4OW32Q8nP1ZoBX039AswKgOgTSt5qxxhQ5DWKo9IBUjbBtEDCn8sTRVI1rFtlf
48Ag0mIJ8RiGfysatl1DOUzXI5yCPeK3XFAS3WusJ5cs5uPl+7WBg5Wi8Q2x1E/S
56u1c1Ube4XOCTDhL6fzlySGnVZ++XNxrJkS1Q9kKIXDmLEZPOeyxlYHsJMX8N2f
bL6EHs7BzXJ9pEaFl+AUTOshSCeBXAHn25TKHZTuZYFypc2k9JgT9vXQxIcYv9Vk
MxyE5Xd0aypseZ0/Dg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:46:53 2025 by rpki-client