Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132302e302f32322d3232203d3e20323633363335.roa
File:                     3137392e3132352e3132302e302f32322d3232203d3e20323633363335.roa (raw, json)
Hash identifier:          UvFbkEoEOmIMAqdSZ4Sn8uxM+U8T8PpcCK+xnq0G8WM=
Subject key identifier:   1B:21:62:47:63:56:25:BF:16:5E:1C:99:C2:1B:E3:7C:02:5C:AA:64
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       36C6A6B1AABEED6D8F9D5781FB69797AE042D371
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132302e302f32322d3232203d3e20323633363335.roa
Signing time:             Wed 01 Oct 2025 01:56:56 +0000
ROA not before:           Wed 01 Oct 2025 01:51:56 +0000
ROA not after:            Wed 30 Sep 2026 01:56:56 +0000
asID:                     263635
IP address blocks:        179.125.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c6:a6:b1:aa:be:ed:6d:8f:9d:57:81:fb:69:79:7a:e0:42:d3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct  1 01:51:56 2025 GMT
            Not After : Sep 30 01:56:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:3c:e2:68:11:e1:52:c7:30:61:5e:78:43:
                    ea:f7:ff:70:6b:65:95:8c:fe:31:bc:f8:8d:2b:fe:
                    ba:31:9a:55:ed:27:b9:f7:08:cf:fa:3f:0a:4b:36:
                    fe:60:35:59:2e:47:20:b6:e7:e4:b9:5a:90:99:a2:
                    d7:5b:92:5d:85:6e:92:b6:62:8e:91:cf:02:5c:23:
                    47:cb:c9:da:6c:d1:bf:2a:21:f6:8e:7a:f2:b8:5c:
                    cc:77:a0:15:82:df:d5:2e:86:2e:0b:56:c5:4b:7a:
                    49:d4:a5:99:38:fe:b4:09:e5:34:59:67:a6:0f:c8:
                    97:2d:26:59:45:7a:6a:28:7d:7d:54:61:a4:f7:c3:
                    28:7d:1a:1d:ce:42:a2:2e:89:46:3e:bd:74:8b:4e:
                    bb:95:8a:d9:6d:95:13:d5:04:7a:41:6b:c4:58:c5:
                    33:31:e7:fc:67:51:33:44:96:26:89:66:6e:e3:31:
                    1b:0f:ec:03:39:b1:bf:41:75:40:87:c6:36:0a:50:
                    00:72:ce:eb:b5:34:cf:68:32:c8:3d:50:59:ae:7d:
                    c6:c9:88:5f:76:27:6e:a2:78:15:91:7a:ce:c0:02:
                    58:30:6b:2a:c8:c9:48:7e:c6:30:f3:35:86:d6:bd:
                    e4:c1:9b:1c:d5:a8:c1:0b:3a:8f:94:24:5d:07:7a:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:21:62:47:63:56:25:BF:16:5E:1C:99:C2:1B:E3:7C:02:5C:AA:64
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132302e302f32322d3232203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:00:8c:58:24:ee:91:e2:79:5f:b9:c3:2d:3a:0e:6a:66:
         f3:1b:7d:87:cf:3b:ac:a4:0a:3f:be:32:87:46:77:33:c6:d8:
         1b:a8:a4:1a:8e:25:6c:3c:ad:41:d0:08:16:9a:9c:4b:e8:95:
         c1:fe:a7:17:0f:cc:17:56:7c:cc:ca:3a:f0:a9:4a:e5:df:d9:
         a7:ae:7e:96:94:d7:dc:9b:04:d0:a2:bc:f4:ef:1a:d3:a0:e9:
         0a:9b:c2:b7:ca:7a:e7:0b:d2:5b:49:c9:49:57:d1:0a:fb:94:
         07:25:b1:88:06:af:5d:84:9b:0a:e9:46:43:19:41:47:60:30:
         7f:91:e0:14:93:1b:01:c7:fe:50:9b:84:98:51:a3:07:f4:68:
         af:89:9a:b3:65:31:62:5b:06:ce:8c:81:68:13:39:ed:a3:44:
         0d:8a:86:9c:ab:39:82:a5:29:08:25:65:3f:cd:7d:e4:b2:7d:
         46:95:3c:ef:6c:6b:19:83:87:3d:40:28:98:2c:25:3f:69:7d:
         98:a7:b9:47:d2:49:83:47:72:f5:35:59:4a:33:74:ad:03:bd:
         65:04:62:76:b0:11:ae:8d:fc:f2:f8:44:32:bb:c9:86:e2:a3:
         95:19:17:43:fc:89:66:16:88:b9:b3:ab:4f:e8:ff:8d:ce:bd:
         23:03:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:16:33 2025 by rpki-client