Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa
File:                     3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          Xycc0v77uDFFxCl3fW8QZdrPqmpWroJefmv061/0blY=
Subject key identifier:   05:EB:E9:4B:03:2E:69:89:68:8D:E0:9A:86:BD:65:A6:FF:D3:E7:5C
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       5F7673A224E6D9F9930699F579B28EE172BA9B73
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 01 Oct 2025 01:56:55 +0000
ROA not before:           Wed 01 Oct 2025 01:51:55 +0000
ROA not after:            Wed 30 Sep 2026 01:56:55 +0000
asID:                     263635
IP address blocks:        170.254.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:73:a2:24:e6:d9:f9:93:06:99:f5:79:b2:8e:e1:72:ba:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct  1 01:51:55 2025 GMT
            Not After : Sep 30 01:56:55 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:82:61:5e:5b:f7:2e:dc:6c:94:1c:31:ef:
                    6e:e4:b3:f3:41:e6:d1:e6:1a:df:ba:d2:43:d6:ec:
                    1f:3b:49:29:b2:08:15:e7:e7:da:ef:5d:c0:34:08:
                    f8:62:d5:b6:7a:36:34:e6:84:a6:6a:ec:33:aa:f7:
                    cc:8b:ff:09:32:66:20:5d:0e:ee:f2:18:e8:bd:f7:
                    a0:bb:64:42:22:5b:11:8e:c2:8c:d3:e7:95:7c:ce:
                    3b:ff:b2:0d:db:6a:b9:54:2c:f8:ff:dd:be:8a:21:
                    58:d6:35:b9:83:18:da:e2:9a:c9:87:96:8a:58:37:
                    38:0e:31:de:a9:e8:61:00:7e:23:f9:2d:a8:5f:84:
                    9b:02:4d:7a:5a:5f:7b:bd:4f:a4:9e:be:c5:54:56:
                    66:84:87:61:89:8e:d3:10:d5:df:6c:20:5d:be:96:
                    23:32:0d:ad:80:fb:f7:cb:11:7a:51:2e:a3:77:0b:
                    0e:b2:61:a6:21:c2:6d:82:ff:e4:12:35:d7:dd:8b:
                    ad:cc:e5:01:4f:0c:e7:8a:b5:19:ee:bd:37:f9:e8:
                    b6:c8:d3:9a:d4:40:6b:7c:5d:f7:e7:c9:7f:e4:8f:
                    93:3f:e7:f5:7b:c8:13:62:4c:27:a1:c6:33:d3:b3:
                    41:06:ce:ce:16:c8:b8:a7:5a:a4:af:1b:da:c4:a5:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:E9:4B:03:2E:69:89:68:8D:E0:9A:86:BD:65:A6:FF:D3:E7:5C
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138302e302f32342d3234203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:ff:29:3e:4e:7f:4d:ff:cc:1b:2c:06:4b:34:be:ee:70:
         78:dc:ec:b4:49:b9:df:83:cb:bd:ee:5a:a4:ae:70:f7:67:2d:
         92:c2:2e:ae:ee:75:27:79:1c:c3:4f:99:b5:e3:cf:03:90:45:
         12:d3:5b:22:1d:01:7d:c2:82:51:96:96:f1:41:97:90:ca:b2:
         31:a7:8b:19:21:62:be:a7:3f:2e:7a:63:03:c2:b3:cc:34:ea:
         d3:59:c7:b9:97:37:4c:04:cd:1c:75:ba:06:b7:63:15:4a:ea:
         be:f5:d5:a1:6d:da:08:66:7a:f6:21:62:7e:bd:8b:4b:3b:62:
         c7:f2:39:06:b8:ca:38:2a:17:9d:14:78:ef:3b:8a:bc:4e:08:
         b8:26:cb:0f:cf:8c:b4:c1:08:fe:b8:70:1d:a5:f1:a5:2a:f4:
         63:31:2b:c9:3b:d9:4f:59:60:6b:b4:06:1b:5b:1f:8b:a8:0c:
         43:38:f2:b4:1d:ee:33:cc:38:bb:10:43:4a:57:95:e5:0d:cd:
         31:33:42:58:00:e4:4a:8a:e6:c0:60:07:37:28:fb:2e:83:73:
         40:3f:2e:cc:fa:17:00:db:5c:3c:6c:c1:13:42:4d:64:3e:94:
         8c:01:c6:6d:4f:63:6b:5b:64:0a:12:92:0b:a2:d7:2c:08:76:
         92:98:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:23:03 2025 by rpki-client