Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa
File:                     3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier:          5YStmr0zVp+T4R7kA2sHKFSfka0HXLLDy4Y9iA8eF5Q=
Subject key identifier:   D0:FC:52:EE:21:B9:EF:D9:51:A6:1A:F5:B5:DD:05:AA:7C:C1:2B:CF
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       121A887C17E0F5B7D260EA76310682BCB837AEAD
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa
Signing time:             Wed 01 Oct 2025 13:11:51 +0000
ROA not before:           Wed 01 Oct 2025 13:06:51 +0000
ROA not after:            Wed 30 Sep 2026 13:11:51 +0000
asID:                     269182
IP address blocks:        179.63.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:88:7c:17:e0:f5:b7:d2:60:ea:76:31:06:82:bc:b8:37:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Oct  1 13:06:51 2025 GMT
            Not After : Sep 30 13:11:51 2026 GMT
        Subject: CN=D0FC52EE21B9EFD951A61AF5B5DD05AA7CC12BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:b2:74:d1:e3:8a:c1:21:48:5a:97:c8:7c:
                    59:17:1a:e3:c8:69:df:84:88:f5:db:d5:da:ae:ce:
                    32:a0:2d:53:bc:4f:b7:57:3c:17:3b:d4:39:30:6b:
                    57:78:2a:da:47:3f:4b:b8:3c:bc:c6:e9:99:35:76:
                    66:e5:fa:3d:92:49:ad:fe:54:43:02:ac:c8:77:54:
                    50:87:29:db:69:5f:2f:63:44:c8:24:e9:7a:5e:0e:
                    b3:f7:ed:84:6a:89:4d:3d:f6:fe:0d:2f:47:c0:67:
                    cd:9a:3d:6c:f3:e3:93:87:2f:76:4e:ea:ea:a5:12:
                    51:99:05:f7:d3:44:36:5c:fd:af:b2:f3:4d:d1:91:
                    b4:5c:e9:57:3d:5e:37:10:26:c7:a3:a1:b1:bf:e1:
                    5b:91:56:01:dd:3c:ec:0a:ab:04:a6:a4:21:6a:cb:
                    1e:35:7e:e1:a5:44:5f:60:6d:b7:0b:11:5e:40:1b:
                    ce:8e:dd:07:59:04:30:c5:84:96:35:51:fb:32:b2:
                    60:84:c8:40:63:7b:c9:7f:1c:0a:06:f4:8e:66:ab:
                    37:8b:58:42:60:20:eb:a5:27:13:42:e1:af:24:cf:
                    aa:b2:9a:da:78:0b:f7:c5:2a:00:d0:81:93:fd:d5:
                    95:64:24:08:80:ab:82:33:a4:31:1e:1f:ed:ed:99:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FC:52:EE:21:B9:EF:D9:51:A6:1A:F5:B5:DD:05:AA:7C:C1:2B:CF
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:5b:ed:4d:34:6e:f8:ad:c8:50:a9:0e:5d:e4:01:bd:27:
         8a:98:8c:28:98:96:7a:fe:9f:61:c6:6b:2e:e4:bb:88:84:0f:
         05:3e:84:c7:c7:43:f0:f8:17:f7:7c:2a:3e:46:d4:6b:2e:41:
         2b:ec:5c:13:af:69:63:1e:25:8c:c0:34:1b:d0:59:56:5a:d8:
         78:27:46:98:b4:f1:ea:54:b3:56:32:cf:86:45:e4:bd:1a:68:
         97:57:16:d1:50:54:d1:bb:6c:6c:7d:2d:14:88:05:75:f5:aa:
         93:96:ba:d2:82:cc:07:3c:57:7e:9e:7b:29:23:f4:5a:df:3c:
         e4:89:7a:95:a1:d4:d5:c8:ba:26:57:57:d4:88:24:e0:53:1f:
         e1:4e:35:a0:d2:d3:9d:76:12:ec:5a:81:15:6b:b1:bc:d6:49:
         c5:aa:57:db:a8:ce:2b:15:6b:1a:f2:7e:1a:bf:2f:b7:e9:77:
         85:5c:07:d8:97:cb:de:ac:ca:f4:97:31:44:9d:c5:fc:1c:2a:
         d1:dc:27:0e:67:c9:82:55:be:8b:bc:44:ce:d1:87:09:8b:30:
         d2:8b:9e:38:87:18:2a:66:28:54:04:76:91:ad:48:b4:c8:1d:
         15:10:1b:86:01:52:e0:e4:76:14:a7:36:94:4f:da:67:06:c5:
         06:84:e0:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEhqIfBfg9bfSYOp2MQaCvLg3rq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3MUI1MjZBNDUxRTJFRUZGMEZGQ0FDRjQ2QkJDMkJD
NzREODkwNjAeFw0yNTEwMDExMzA2NTFaFw0yNjA5MzAxMzExNTFaMDMxMTAvBgNV
BAMTKEQwRkM1MkVFMjFCOUVGRDk1MUE2MUFGNUI1REQwNUFBN0NDMTJCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC087J00eOKwSFIWpfIfFkXGuPI
ad+EiPXb1dquzjKgLVO8T7dXPBc71Dkwa1d4KtpHP0u4PLzG6Zk1dmbl+j2SSa3+
VEMCrMh3VFCHKdtpXy9jRMgk6XpeDrP37YRqiU099v4NL0fAZ82aPWzz45OHL3ZO
6uqlElGZBffTRDZc/a+y803RkbRc6Vc9XjcQJsejobG/4VuRVgHdPOwKqwSmpCFq
yx41fuGlRF9gbbcLEV5AG86O3QdZBDDFhJY1UfsysmCEyEBje8l/HAoG9I5mqzeL
WEJgIOulJxNC4a8kz6qymtp4C/fFKgDQgZP91ZVkJAiAq4IzpDEeH+3tmWVTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0PxS7iG579lRphr1td0FqnzBK88wHwYDVR0j
BBgwFoAUZXG1JqRR4u7/D/ys9Gu8K8dNiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ
cWEvMC82NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzFCNTI2QTQ1MUUyRUVG
RjBGRkNBQ0Y0NkJCQzJCQzc0RDg5MDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1eE0zZWlnNGVBY1pNaVUxazZSTWJFQmVIc1dkSGRDUWlEZVgxeGVSWXFhLzAv
MzEzNzM5MmUzNjMzMmUzMTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzP6YwDQYJKoZIhvcNAQELBQADggEBAFzQW+1N
NG74rchQqQ5d5AG9J4qYjCiYlnr+n2HGay7ku4iEDwU+hMfHQ/D4F/d8Kj5G1Gsu
QSvsXBOvaWMeJYzANBvQWVZa2HgnRpi08epUs1Yyz4ZF5L0aaJdXFtFQVNG7bGx9
LRSIBXX1qpOWutKCzAc8V36eeykj9FrfPOSJepWh1NXIuiZXV9SIJOBTH+FONaDS
0512EuxagRVrsbzWScWqV9uozisVaxryfhq/L7fpd4VcB9iXy96syvSXMUSdxfwc
KtHcJw5nyYJVvou8RM7RhwmLMNKLnjiHGCpmKFQEdpGtSLTIHRUQG4YBUuDkdhSn
NpRP2mcGxQaE4Dc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:17 2025 by rpki-client