Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32322d3232203d3e20323633363335.roa
File:                     3137302e3235342e3138302e302f32322d3232203d3e20323633363335.roa (raw, json)
Hash identifier:          kzpv/xJpMsBGEXEaNmf/wXkC8B2uQK2v4gXwM/DhHTI=
Subject key identifier:   68:7A:C3:08:DC:A0:D4:3A:57:29:02:3F:BC:E8:D2:2A:38:3B:18:FB
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       22D0602A2A8C29F7868A37D0E258E273EF9106D0
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32322d3232203d3e20323633363335.roa
Signing time:             Wed 01 Oct 2025 01:56:56 +0000
ROA not before:           Wed 01 Oct 2025 01:51:56 +0000
ROA not after:            Wed 30 Sep 2026 01:56:56 +0000
asID:                     263635
IP address blocks:        170.254.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d0:60:2a:2a:8c:29:f7:86:8a:37:d0:e2:58:e2:73:ef:91:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct  1 01:51:56 2025 GMT
            Not After : Sep 30 01:56:56 2026 GMT
        Subject: CN=3082010A0282010100C18951E2B2C4A37CF4A46BBC4EFE006DA7668A4AB78555C81047F5B77043FED15D14F147C1194B6B73CCA7F8000B45740C7EBFE6E2A91DFEB4E7A2113285800818BCDE74ECA5E1F991B78307FE0829E23F119B79ED838B523D7FFE8440FF4AF6CEEF3693A5AF727CA52F07C658B286165BAAB7A51655BB35E6B4F72C328612E6F6C2B3A2C5540E856F0D7FEB894CDC99EE3FB764D36E599EE91BE055C1004DF4CD22802EFC4AFC702E9A16626DAF527D93B53E00FE08CCBC8BD9C756F402D6FF072675280F29EF665562AD8D798B9AD5DEA8CCA9F086B5A84ECFAF5DAB1C240566236A1D457B6339E9BFDA588744F98FD55BAD1BE2B84DC429F9AF4B435420370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:51:e2:b2:c4:a3:7c:f4:a4:6b:bc:4e:fe:
                    00:6d:a7:66:8a:4a:b7:85:55:c8:10:47:f5:b7:70:
                    43:fe:d1:5d:14:f1:47:c1:19:4b:6b:73:cc:a7:f8:
                    00:0b:45:74:0c:7e:bf:e6:e2:a9:1d:fe:b4:e7:a2:
                    11:32:85:80:08:18:bc:de:74:ec:a5:e1:f9:91:b7:
                    83:07:fe:08:29:e2:3f:11:9b:79:ed:83:8b:52:3d:
                    7f:fe:84:40:ff:4a:f6:ce:ef:36:93:a5:af:72:7c:
                    a5:2f:07:c6:58:b2:86:16:5b:aa:b7:a5:16:55:bb:
                    35:e6:b4:f7:2c:32:86:12:e6:f6:c2:b3:a2:c5:54:
                    0e:85:6f:0d:7f:eb:89:4c:dc:99:ee:3f:b7:64:d3:
                    6e:59:9e:e9:1b:e0:55:c1:00:4d:f4:cd:22:80:2e:
                    fc:4a:fc:70:2e:9a:16:62:6d:af:52:7d:93:b5:3e:
                    00:fe:08:cc:bc:8b:d9:c7:56:f4:02:d6:ff:07:26:
                    75:28:0f:29:ef:66:55:62:ad:8d:79:8b:9a:d5:de:
                    a8:cc:a9:f0:86:b5:a8:4e:cf:af:5d:ab:1c:24:05:
                    66:23:6a:1d:45:7b:63:39:e9:bf:da:58:87:44:f9:
                    8f:d5:5b:ad:1b:e2:b8:4d:c4:29:f9:af:4b:43:54:
                    20:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7A:C3:08:DC:A0:D4:3A:57:29:02:3F:BC:E8:D2:2A:38:3B:18:FB
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32322d3232203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:d5:c7:11:4c:c6:56:b2:0a:a7:9d:46:a2:08:3f:97:b2:
         75:04:ba:de:d1:e3:eb:6c:b2:d3:a5:20:57:2c:33:cd:7c:9f:
         24:8f:21:cb:64:8e:9d:35:fd:31:c0:3f:7e:82:1b:f4:5c:76:
         ca:a0:f9:3b:80:02:99:86:86:f1:18:55:da:5e:e6:db:12:64:
         60:4e:dc:4c:4d:e8:31:04:10:71:92:19:ee:f6:13:fe:62:5e:
         05:6a:da:10:6d:b8:ff:0a:ed:5e:e1:3d:d0:3e:49:20:6e:e1:
         a7:53:44:31:b3:a7:87:54:d2:de:fa:cc:f5:12:ac:b8:ce:48:
         8c:6e:58:2d:ee:26:1b:55:48:1f:ed:e8:62:77:84:50:d7:47:
         7f:78:2f:94:df:24:d8:67:52:47:8c:98:5f:9b:8a:1d:f1:69:
         e2:9f:f1:15:de:cc:d8:7f:55:41:4b:12:cf:2d:1a:97:14:30:
         ee:d3:15:d6:54:89:54:d9:59:43:d1:88:f2:e0:c1:a6:f9:3b:
         21:31:1b:70:3d:e4:d2:c3:78:41:0b:d4:20:5a:7a:d9:e2:d1:
         71:a5:2e:cd:9a:f8:78:b1:97:4d:a7:99:96:af:86:a6:84:3d:
         ce:b2:ed:cf:a6:02:45:7e:8e:7c:63:23:fd:16:0b:4d:8e:b2:
         34:cd:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:35 2025 by rpki-client