Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa
File:                     3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa (raw, json)
Hash identifier:          2Cre0KABK0W8NVNBrUAbZosqorQPvF1HvLKY7xYZ0pE=
Subject key identifier:   1B:93:A7:F8:FB:7C:AC:22:58:8D:84:E7:C7:ED:CA:01:16:95:FD:6B
Certificate issuer:       /CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
Certificate serial:       38BF037DA3E5A557DAB4992CF128CCFF30BBBA06
Authority key identifier: CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa
Signing time:             Mon 13 Oct 2025 17:00:24 +0000
ROA not before:           Mon 13 Oct 2025 16:55:24 +0000
ROA not after:            Mon 12 Oct 2026 17:00:24 +0000
asID:                     271405
IP address blocks:        181.224.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl
                          rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bf:03:7d:a3:e5:a5:57:da:b4:99:2c:f1:28:cc:ff:30:bb:ba:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
        Validity
            Not Before: Oct 13 16:55:24 2025 GMT
            Not After : Oct 12 17:00:24 2026 GMT
        Subject: CN=1B93A7F8FB7CAC22588D84E7C7EDCA011695FD6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:1c:67:bb:d2:52:0d:77:47:ec:44:29:72:
                    f6:05:4c:84:d3:cc:2a:c3:3d:4f:b6:04:3b:58:73:
                    43:71:90:8c:7b:d5:9e:52:b6:f6:4d:a3:50:24:6c:
                    09:4b:0d:f2:61:0f:7c:46:94:5e:d9:34:66:79:5a:
                    c2:99:28:dd:f4:5b:13:55:b5:a4:06:c6:e8:fc:34:
                    5f:75:f6:c1:2f:bb:8f:1b:7d:40:31:06:96:de:1e:
                    ab:57:86:3b:41:9c:f1:10:26:34:4e:f8:87:b3:d9:
                    2f:8d:fd:c5:4e:39:d1:32:b0:f5:8a:6a:3c:ab:bd:
                    93:ad:df:4f:ab:16:d4:ad:a1:ca:9a:a7:e3:37:66:
                    c7:2b:9d:dd:4d:d6:f4:c3:e5:a6:10:a9:68:26:9d:
                    2b:04:07:b8:5c:09:48:d0:94:26:d3:b0:1d:05:30:
                    f7:4a:0d:79:1a:19:10:90:41:74:f3:15:9a:89:56:
                    c8:77:4d:f3:ff:34:17:fd:31:78:48:c5:5f:fd:f6:
                    bb:a7:93:fe:2b:89:7c:65:cc:73:4c:96:1d:9c:7b:
                    69:a3:92:b4:20:b5:75:2b:08:ba:3f:b5:fb:55:9b:
                    6a:c4:a5:9d:b7:69:e7:f0:7b:6b:63:93:28:07:11:
                    ed:58:cc:d3:04:96:9f:ab:c7:81:61:3c:cc:fd:11:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:93:A7:F8:FB:7C:AC:22:58:8D:84:E7:C7:ED:CA:01:16:95:FD:6B
            X509v3 Authority Key Identifier:
                keyid:CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/3138312e3232342e36302e302f32322d3234203d3e20323731343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:63:07:c2:2a:3e:8a:30:f9:22:de:46:07:50:be:ee:fa:07:
         42:c4:15:b8:75:fe:6a:51:59:b9:f2:78:1a:7b:13:cb:41:d3:
         49:9d:33:ed:10:d6:68:f0:e1:02:6e:f0:49:1d:f8:bf:4b:40:
         a0:a9:34:3d:fb:07:29:e5:83:26:e0:ae:88:8f:7d:f0:15:a8:
         8f:1a:f9:f5:75:db:64:ba:b8:b8:4c:1b:71:02:7d:7e:84:70:
         de:06:d9:b9:b6:10:5a:f6:c7:0f:d7:47:72:bf:ba:ba:1d:19:
         ba:ae:8c:e8:2d:8e:c8:11:9c:f0:d7:79:4f:cd:89:23:18:35:
         2e:46:97:4d:93:9d:de:d7:85:52:93:98:58:b8:81:20:e5:84:
         42:ad:28:87:3d:c7:87:da:6b:a3:83:08:6c:3e:5c:ae:f1:4a:
         db:88:2a:bf:49:fd:a5:f0:84:17:b4:80:5c:fc:27:60:c6:74:
         9e:ec:92:c3:82:38:6d:a1:ed:ad:f2:98:a3:0d:52:80:6c:e3:
         28:0f:e3:b1:0f:43:ba:74:86:75:c0:ac:eb:aa:ea:f8:a4:f3:
         cf:da:ec:89:9a:92:08:7a:4e:99:bc:98:b5:a7:4c:71:88:e6:
         3c:ff:6a:26:63:5d:0a:5c:3f:91:be:a5:e2:0d:51:52:24:94:
         db:04:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:56:12 2025 by rpki-client