Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa
File:                     3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa (raw, json)
Hash identifier:          zd8NwB/UtbPQpnB6B30I3Gx8vmn/wLMfRPzvZPS7Zm0=
Subject key identifier:   1C:29:15:4B:0D:DD:9C:AC:35:95:A2:86:49:60:CB:99:31:6D:1F:13
Certificate issuer:       /CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
Certificate serial:       5ED28337700967E4E55B15C15643596FBF820C14
Authority key identifier: CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa
Signing time:             Mon 14 Sep 2026 17:11:46 +0000
ROA not before:           Mon 14 Sep 2026 17:06:46 +0000
ROA not after:            Mon 13 Sep 2027 17:11:46 +0000
asID:                     271405
IP address blocks:        181.224.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl
                          rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 22:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:83:37:70:09:67:e4:e5:5b:15:c1:56:43:59:6f:bf:82:0c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
        Validity
            Not Before: Sep 14 17:06:46 2026 GMT
            Not After : Sep 13 17:11:46 2027 GMT
        Subject: CN=1C29154B0DDD9CAC3595A2864960CB99316D1F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:91:a8:c3:fb:e2:c2:70:f2:ce:76:96:9b:
                    ce:a6:31:8e:90:b7:69:6f:cc:0a:0b:c8:78:2c:78:
                    bc:cd:0b:4d:fc:81:50:aa:2d:b4:f4:95:a5:ca:51:
                    57:99:87:42:62:25:56:67:8f:c5:3d:fe:67:50:b9:
                    a9:c7:7c:d8:a3:95:f6:ea:11:84:89:15:2f:be:7b:
                    e9:a1:b6:06:78:ee:ff:b4:96:a1:14:da:6a:4a:4f:
                    55:77:39:ab:93:45:32:ff:67:85:c1:6b:31:e6:87:
                    02:c0:bf:76:86:9a:ec:f3:a4:91:41:94:eb:3e:43:
                    59:e5:c9:5e:17:d3:06:28:90:87:15:7e:40:89:9b:
                    91:9f:15:7f:41:14:1c:e3:7d:4b:53:6a:68:7a:2e:
                    92:bb:58:fd:b9:f2:87:5b:1c:b3:b6:31:30:40:7d:
                    75:7c:33:e6:84:96:fd:24:3d:51:07:83:e7:a1:f9:
                    a1:d6:14:95:07:bd:d0:44:c2:fa:38:bb:7c:84:76:
                    55:5f:8f:49:60:26:a2:35:ea:6d:55:b7:59:ed:81:
                    6e:8a:2f:0d:a0:4f:a4:bc:05:fe:ef:34:4d:ba:e2:
                    c8:e3:6b:26:8d:1c:9a:a5:eb:e1:8b:68:7c:b8:3d:
                    19:d5:07:2c:a8:f9:f6:92:a1:46:9d:90:aa:be:6d:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:15:4B:0D:DD:9C:AC:35:95:A2:86:49:60:CB:99:31:6D:1F:13
            X509v3 Authority Key Identifier:
                keyid:CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:1e:39:a6:42:3b:41:f5:0e:b9:b0:3c:d1:d6:58:f1:06:68:
         28:c9:dc:33:e3:f5:99:61:41:f8:7d:cc:d8:20:7d:d9:b6:dd:
         bb:be:e9:6b:08:a7:20:ff:c3:8a:6c:3f:6b:13:87:ec:fe:db:
         33:98:11:03:f5:fa:97:d3:c3:e8:32:5a:64:dd:5a:9c:ab:2a:
         fb:a7:72:2e:d0:fe:99:ba:79:42:8c:df:eb:a5:2e:4e:7a:67:
         a0:ce:29:d3:ef:23:60:db:bd:47:2a:1c:6f:7f:2f:11:0d:7e:
         06:55:a1:bb:a8:76:e2:f0:c0:4c:93:db:9a:5b:70:46:fc:ce:
         44:90:6c:07:e2:0e:41:3f:0c:f5:1a:c0:04:c4:65:5a:48:e9:
         20:cd:0b:b4:8b:4b:28:f8:06:33:ca:ae:1c:71:cf:47:18:70:
         35:34:66:85:23:10:ec:2e:a8:da:8e:ad:e6:d5:19:a1:22:e7:
         d7:37:9e:e0:69:49:32:cd:0f:50:0e:46:2a:db:59:fd:f1:10:
         bf:1f:97:eb:4e:07:e1:49:ed:17:fc:86:4f:42:80:31:8b:49:
         92:5d:38:a2:6a:46:b0:07:e0:7c:93:86:de:d8:52:ae:3a:8d:
         c5:13:f2:fe:1c:c1:6e:10:b3:b8:6c:31:84:b6:27:73:bb:af:
         21:5c:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:40:34 2026 by rpki-client