Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa
File:                     3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          v+7WalEOFC1dTaQYmG6Bp9C6wiuNFuVy548lZgBvU0w=
Subject key identifier:   83:53:B3:50:50:1E:5A:EE:1E:71:20:26:80:FD:B2:2B:63:C9:C4:BC
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       6A2F5823520CE83F8E7B75C7D77D387D4F7DD596
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 01 Oct 2025 01:56:56 +0000
ROA not before:           Wed 01 Oct 2025 01:51:56 +0000
ROA not after:            Wed 30 Sep 2026 01:56:56 +0000
asID:                     263635
IP address blocks:        170.254.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2f:58:23:52:0c:e8:3f:8e:7b:75:c7:d7:7d:38:7d:4f:7d:d5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct  1 01:51:56 2025 GMT
            Not After : Sep 30 01:56:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:96:01:b1:de:db:55:b6:0b:eb:71:d3:14:
                    36:fc:dd:22:63:3f:38:23:d0:3a:93:ec:51:23:12:
                    0f:9b:db:64:35:8e:c0:86:86:8a:9c:e6:c7:83:48:
                    ab:a5:b6:92:f4:8e:fa:76:db:6d:3d:69:df:f3:ae:
                    48:aa:fd:6a:d4:c4:dd:39:6d:c2:51:bb:35:12:14:
                    f9:a3:71:45:6f:11:35:b2:0d:fc:99:e1:8c:38:a3:
                    28:56:f6:99:06:c5:a8:12:dc:32:67:e0:87:e6:c1:
                    e6:8a:3c:6e:c9:9b:f0:63:f3:ee:24:9b:1c:d3:2c:
                    55:6b:25:44:5e:07:f5:9c:46:11:67:b9:cf:08:a4:
                    60:ad:3c:97:32:5d:5b:18:24:8a:2f:ef:d3:bb:90:
                    ca:6e:19:5d:de:63:3b:b1:76:f3:09:ea:ee:b9:44:
                    f0:35:1b:d8:34:3d:8e:52:0c:25:96:6f:b3:07:7e:
                    66:94:01:f7:c9:31:5f:5e:48:54:2b:3b:15:fa:85:
                    4e:69:ab:ea:66:2d:db:40:2e:eb:ff:d1:b5:f1:6c:
                    1d:1a:5a:52:de:99:5d:0a:68:9a:1d:08:c9:77:bb:
                    32:68:10:af:80:52:38:b9:69:e3:e5:88:47:6a:5c:
                    b6:b6:d3:d4:ac:35:dd:f4:93:26:02:5b:e1:14:7b:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:53:B3:50:50:1E:5A:EE:1E:71:20:26:80:FD:B2:2B:63:C9:C4:BC
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:50:09:ce:9c:88:f0:06:f5:8a:b0:20:70:8c:f8:cd:43:
         f3:0b:bd:a2:e9:61:fd:dc:18:cc:ba:e4:f7:fa:f9:c4:95:e8:
         0c:1d:5e:7e:54:2f:4a:04:c8:fc:ae:b6:54:2f:b9:3b:79:ed:
         1e:39:f6:94:30:8c:07:0c:29:25:ca:78:e4:40:98:d7:d0:4f:
         c3:4a:e6:1b:0a:dc:8a:51:c9:66:47:7a:c8:16:d5:c0:c1:f0:
         f2:b2:db:65:f8:f5:53:0e:b3:8b:3e:bb:b2:25:94:a4:aa:6e:
         7e:fd:8c:55:9f:8f:04:d4:b4:f4:69:5c:8f:97:d8:b4:d3:13:
         38:a8:2c:01:4c:4a:22:fd:bf:5b:f1:36:ca:df:90:dc:0d:42:
         b5:b7:67:c3:13:07:b4:a7:b1:19:c5:41:c1:e9:cf:88:93:d2:
         7d:2d:cd:e0:35:19:bf:be:8d:06:cd:7c:73:8a:3d:b7:1b:7f:
         74:87:97:40:91:7c:eb:02:4c:b9:25:e5:7d:07:04:44:72:b5:
         fa:58:63:f4:30:b5:97:72:e2:61:1c:ae:d0:79:5c:2b:21:d7:
         a8:dc:85:de:12:a4:38:53:ba:ab:a3:59:f2:4f:24:86:dc:96:
         df:32:50:e2:6d:64:4d:fd:e3:7a:38:a1:bd:64:45:4d:72:5c:
         d7:33:f6:91
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUai9YI1IM6D+Oe3XH1304fU991ZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4MTQ4RkMwRkYwMTA0NjYyMDZGMTFENkFDMUM1OEE3
Q0JEM0FFOTAeFw0yNTEwMDEwMTUxNTZaFw0yNjA5MzAwMTU2NTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRBRjk2MDFCMURFREI1NUI2
MEJFQjcxRDMxNDM2RkNERDIyNjMzRjM4MjNEMDNBOTNFQzUxMjMxMjBGOUJEQjY0
MzU4RUMwODY4NjhBOUNFNkM3ODM0OEFCQTVCNjkyRjQ4RUZBNzZEQjZEM0Q2OURG
RjNBRTQ4QUFGRDZBRDRDNEREMzk2REMyNTFCQjM1MTIxNEY5QTM3MTQ1NkYxMTM1
QjIwREZDOTlFMThDMzhBMzI4NTZGNjk5MDZDNUE4MTJEQzMyNjdFMDg3RTZDMUU2
OEEzQzZFQzk5QkYwNjNGM0VFMjQ5QjFDRDMyQzU1NkIyNTQ0NUUwN0Y1OUM0NjEx
NjdCOUNGMDhBNDYwQUQzQzk3MzI1RDVCMTgyNDhBMkZFRkQzQkI5MENBNkUxOTVE
REU2MzNCQjE3NkYzMDlFQUVFQjk0NEYwMzUxQkQ4MzQzRDhFNTIwQzI1OTY2RkIz
MDc3RTY2OTQwMUY3QzkzMTVGNUU0ODU0MkIzQjE1RkE4NTRFNjlBQkVBNjYyRERC
NDAyRUVCRkZEMUI1RjE2QzFEMUE1QTUyREU5OTVEMEE2ODlBMUQwOEM5NzdCQjMy
NjgxMEFGODA1MjM4Qjk2OUUzRTU4ODQ3NkE1Q0I2QjZEM0Q0QUMzNURERjQ5MzI2
MDI1QkUxMTQ3QjQ0RTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1K+WAbHe21W2C+tx0xQ2/N0iYz84I9A6k+xRIxIPm9tkNY7AhoaK
nObHg0irpbaS9I76dtttPWnf865Iqv1q1MTdOW3CUbs1EhT5o3FFbxE1sg38meGM
OKMoVvaZBsWoEtwyZ+CH5sHmijxuyZvwY/PuJJsc0yxVayVEXgf1nEYRZ7nPCKRg
rTyXMl1bGCSKL+/Tu5DKbhld3mM7sXbzCeruuUTwNRvYND2OUgwllm+zB35mlAH3
yTFfXkhUKzsV+oVOaavqZi3bQC7r/9G18WwdGlpS3pldCmiaHQjJd7syaBCvgFI4
uWnj5YhHaly2ttPUrDXd9JMmAlvhFHtE5wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FINTs1BQHlruHnEgJoD9sitjycS8MB8GA1UdIwQYMBaAFDaBSPwP8BBGYgbxHWrB
xYp8vTrpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFr
R2dFcnc4M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0
NjYyMDZGMTFENkFDMUM1OEE3Q0JEM0FFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zNjgxNDhGQzBGRjAxMDQ2NjIwNkYxMUQ2QUMxQzU4QTdDQkQz
QUU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERW16dFpNQ1NMTHBxa0dnRXJ3
ODNvUG9jUU5EZDhkTlFUYXR4NjFacWhEMy8xLzMxMzczMDJlMzIzNTM0MmUzMTM4
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNjMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACq/rYwDQYJKoZIhvcNAQELBQADggEBAI1PUAnOnIjwBvWKsCBwjPjNQ/MLvaLp
Yf3cGMy65Pf6+cSV6AwdXn5UL0oEyPyutlQvuTt57R459pQwjAcMKSXKeORAmNfQ
T8NK5hsK3IpRyWZHesgW1cDB8PKy22X49VMOs4s+u7IllKSqbn79jFWfjwTUtPRp
XI+X2LTTEzioLAFMSiL9v1vxNsrfkNwNQrW3Z8MTB7SnsRnFQcHpz4iT0n0tzeA1
Gb++jQbNfHOKPbcbf3SHl0CRfOsCTLkl5X0HBERytfpYY/QwtZdy4mEcrtB5XCsh
16jchd4SpDhTuqujWfJPJIbclt8yUOJtZE3943o4ob1kRU1yXNcz9pE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:23:31 2025 by rpki-client