Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS272541.roa
File:                     AS272541.roa (raw, json)
Hash identifier:          V22Gh1TVtrNX9+17jmLesBqivb61sg4dECzobHizBy8=
Subject key identifier:   20:54:00:81:1B:69:C9:EA:5B:33:E7:33:E4:79:FC:82:53:C2:4B:C7
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       16E3A14675F3D476F9172599274D75D9EC7E4DF9
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS272541.roa
Signing time:             Wed 17 Sep 2025 14:48:12 +0000
ROA not before:           Wed 17 Sep 2025 14:43:12 +0000
ROA not after:            Wed 16 Sep 2026 14:48:12 +0000
asID:                     272541
IP address blocks:        186.216.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e3:a1:46:75:f3:d4:76:f9:17:25:99:27:4d:75:d9:ec:7e:4d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Sep 17 14:43:12 2025 GMT
            Not After : Sep 16 14:48:12 2026 GMT
        Subject: CN=205400811B69C9EA5B33E733E479FC8253C24BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:ba:8b:e1:02:e1:92:8d:7f:c4:db:40:88:
                    ba:7e:52:82:dd:86:60:ae:15:6e:cd:14:28:f8:34:
                    6f:7f:58:2b:6d:22:82:52:ac:e8:6a:a2:0c:6f:ed:
                    ea:6e:0a:bd:1c:44:a0:21:4d:7c:26:28:74:9b:2e:
                    d3:a7:b3:37:54:d1:0a:e2:63:5d:0c:8e:25:95:a8:
                    3f:0f:81:20:ce:89:78:23:71:6a:b4:1e:a4:0a:df:
                    3c:ef:50:5b:d4:e5:f9:64:c3:12:4d:86:cc:30:aa:
                    40:45:dd:19:d2:ee:94:e5:0d:c1:50:e9:59:88:39:
                    6f:88:ef:a5:e0:93:05:cf:34:3b:2f:f9:30:f3:4f:
                    af:2e:76:9c:48:d0:09:39:d2:d0:9b:f9:63:8d:1f:
                    37:f0:f9:cb:f4:c8:f4:54:f5:94:d7:72:cb:c8:43:
                    8b:ff:77:ca:9a:2a:ef:5b:a8:58:51:a5:1c:42:6f:
                    43:89:c6:d8:2b:5f:0a:66:55:ef:f8:bc:02:2e:db:
                    94:a4:53:09:57:61:b9:b1:ab:b5:55:2f:1e:87:68:
                    be:ed:db:ff:be:a9:b9:23:06:1f:bc:e4:fc:cb:38:
                    f4:53:97:e6:2e:a1:d9:f5:d7:36:e0:63:6d:31:a3:
                    03:d9:5a:91:e0:42:aa:9e:f5:e7:5a:13:d9:6d:30:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:00:81:1B:69:C9:EA:5B:33:E7:33:E4:79:FC:82:53:C2:4B:C7
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS272541.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:98:8a:6f:3f:98:87:57:33:03:d7:e5:39:91:40:ba:90:6f:
         cb:9c:1d:72:f7:43:90:19:21:d3:3a:56:14:20:59:3a:c5:6f:
         45:72:8c:95:d9:f1:e6:12:28:43:7a:08:84:a9:c7:81:96:08:
         4f:ac:b0:f5:d5:34:d9:c2:56:ce:07:b1:a0:12:7e:83:68:48:
         e7:d7:20:7b:d7:ef:23:ce:cf:ad:33:c0:77:f6:d3:80:cf:54:
         f3:de:cf:8b:bf:23:2a:b5:53:8c:48:54:1b:57:06:f9:e3:e3:
         ba:9f:4d:a2:bb:fb:1c:cf:f6:a3:39:6e:98:7a:35:8a:19:8d:
         8c:e1:cc:47:58:7f:0c:b6:cd:85:58:ef:26:f2:0c:61:8a:77:
         12:f9:ab:54:32:a1:05:a3:45:05:fb:04:fa:be:da:c0:66:29:
         ff:48:b8:6b:db:39:29:14:c6:f3:69:2d:e0:2a:e9:75:ab:ff:
         eb:ca:f3:9a:1e:3f:10:49:92:0f:fa:47:1e:82:9c:c2:13:bb:
         dd:1d:75:2c:11:ee:ac:b5:9d:ad:11:e2:cc:c5:48:01:69:d1:
         af:9b:a5:7e:31:af:f2:fe:0e:3b:a1:79:e4:80:92:9a:01:43:
         14:27:ca:52:ef:7f:fb:71:c4:69:c2:12:cc:ae:b3:92:36:fa:
         a3:86:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:54:51 2025 by rpki-client