Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa
File:                     3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          WlwvY1QiY3S5pVOgDdHgrap8tPkyhd7mtngNDXgG2LQ=
Subject key identifier:   FB:C6:98:FA:C8:99:48:50:8A:08:62:5C:97:06:DB:96:29:51:80:5B
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       7D566E120D5B3501D26E3969D876559184BE3D6E
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 01 Oct 2025 01:56:55 +0000
ROA not before:           Wed 01 Oct 2025 01:51:55 +0000
ROA not after:            Wed 30 Sep 2026 01:56:55 +0000
asID:                     263635
IP address blocks:        179.125.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:6e:12:0d:5b:35:01:d2:6e:39:69:d8:76:55:91:84:be:3d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct  1 01:51:55 2025 GMT
            Not After : Sep 30 01:56:55 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:4d:80:bf:46:f5:43:41:6a:45:0d:be:21:
                    6a:0d:8b:ed:c7:87:42:35:dc:0e:a7:c4:99:90:5e:
                    87:c7:ae:2f:79:88:7c:fb:d4:73:42:9c:de:10:ea:
                    a6:35:ae:ac:ba:67:44:ca:69:42:51:1d:43:dc:46:
                    9b:fd:bb:6e:cd:e8:29:fa:a5:62:94:57:aa:f9:01:
                    8d:75:46:f7:d2:9a:3c:cc:c8:16:4a:24:20:c8:37:
                    a8:82:1b:73:03:ad:75:8f:1e:f6:9f:1e:cb:68:90:
                    40:3e:84:fa:04:b9:17:18:ec:e9:23:33:db:24:a1:
                    37:fb:07:8b:a2:e5:2b:bb:03:65:44:8d:88:cc:7a:
                    0d:5a:2b:06:c9:89:2c:ef:01:d4:5d:fe:6e:e1:a3:
                    d0:f1:d4:36:22:46:f8:fa:9b:69:94:e0:e2:25:2f:
                    45:f0:d3:a9:22:1b:56:87:36:da:63:a2:62:c4:6f:
                    c8:8c:fb:09:39:15:76:c9:0d:a4:9a:2f:6d:5f:c9:
                    4d:4b:fe:59:86:e0:35:5f:0e:b0:e2:96:6d:67:7e:
                    95:0c:ab:37:89:97:50:8f:92:29:bd:16:d9:61:4a:
                    cc:b2:d1:42:d6:3e:55:e7:a0:2d:81:42:d6:53:a2:
                    f8:63:f9:8f:13:c6:6c:d9:23:b3:2a:b2:91:e9:9d:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C6:98:FA:C8:99:48:50:8A:08:62:5C:97:06:DB:96:29:51:80:5B
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132312e302f32342d3234203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1f:fa:45:c3:19:c0:52:89:5b:ad:a1:a0:d5:1a:17:a5:bc:
         e0:e7:4c:64:ec:4e:ec:44:23:78:77:c7:23:62:c7:03:c3:86:
         5f:7a:64:c5:c2:05:24:d8:d5:06:fc:3d:ac:8e:ad:31:c5:a7:
         8e:73:26:8c:cb:fb:76:c9:4a:63:e6:c0:87:69:e8:67:2e:0f:
         6c:a1:33:fb:a6:9b:93:ad:6b:0a:c8:a0:e9:2a:a2:1e:7d:84:
         6e:95:88:56:06:f0:56:6a:07:89:48:94:55:f5:cf:95:8a:14:
         cc:58:93:53:de:05:38:3e:7b:a8:24:0d:3f:43:7e:c2:34:bc:
         3a:f5:b6:16:db:dc:dd:6f:76:68:89:37:e2:87:54:20:9e:a3:
         13:b1:9d:52:33:10:29:18:73:91:16:ab:c1:28:5a:1b:5a:65:
         32:5e:e5:08:1e:e4:ee:f0:c1:05:b7:24:e0:eb:0d:e7:ab:ed:
         40:50:1a:3a:a0:95:56:17:93:5c:89:34:12:cc:75:78:4a:0a:
         fb:13:b3:22:66:fe:af:0e:e2:1f:01:78:4d:37:86:fd:fb:2d:
         dd:d4:d9:23:69:04:93:03:00:22:c7:22:03:ab:a1:e4:7e:b3:
         48:95:74:da:88:c0:7e:fe:da:0e:b2:57:a0:b5:ee:ce:76:d8:
         3c:7d:c0:5e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUfVZuEg1bNQHSbjlp2HZVkYS+PW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4MTQ4RkMwRkYwMTA0NjYyMDZGMTFENkFDMUM1OEE3
Q0JEM0FFOTAeFw0yNTEwMDEwMTUxNTVaFw0yNjA5MzAwMTU2NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJCQzREODBCRjQ2RjU0MzQx
NkE0NTBEQkUyMTZBMEQ4QkVEQzc4NzQyMzVEQzBFQTdDNDk5OTA1RTg3QzdBRTJG
Nzk4ODdDRkJENDczNDI5Q0RFMTBFQUE2MzVBRUFDQkE2NzQ0Q0E2OTQyNTExRDQz
REM0NjlCRkRCQjZFQ0RFODI5RkFBNTYyOTQ1N0FBRjkwMThENzU0NkY3RDI5QTND
Q0NDODE2NEEyNDIwQzgzN0E4ODIxQjczMDNBRDc1OEYxRUY2OUYxRUNCNjg5MDQw
M0U4NEZBMDRCOTE3MThFQ0U5MjMzM0RCMjRBMTM3RkIwNzhCQTJFNTJCQkIwMzY1
NDQ4RDg4Q0M3QTBENUEyQjA2Qzk4OTJDRUYwMUQ0NURGRTZFRTFBM0QwRjFENDM2
MjI0NkY4RkE5QjY5OTRFMEUyMjUyRjQ1RjBEM0E5MjIxQjU2ODczNkRBNjNBMjYy
QzQ2RkM4OENGQjA5MzkxNTc2QzkwREE0OUEyRjZENUZDOTRENEJGRTU5ODZFMDM1
NUYwRUIwRTI5NjZENjc3RTk1MENBQjM3ODk5NzUwOEY5MjI5QkQxNkQ5NjE0QUND
QjJEMTQyRDYzRTU1RTdBMDJEODE0MkQ2NTNBMkY4NjNGOThGMTNDNjZDRDkyM0Iz
MkFCMjkxRTk5RDAwNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwrxNgL9G9UNBakUNviFqDYvtx4dCNdwOp8SZkF6Hx64veYh8+9Rz
QpzeEOqmNa6sumdEymlCUR1D3Eab/btuzegp+qVilFeq+QGNdUb30po8zMgWSiQg
yDeoghtzA611jx72nx7LaJBAPoT6BLkXGOzpIzPbJKE3+weLouUruwNlRI2IzHoN
WisGyYks7wHUXf5u4aPQ8dQ2Ikb4+ptplODiJS9F8NOpIhtWhzbaY6JixG/IjPsJ
ORV2yQ2kmi9tX8lNS/5ZhuA1Xw6w4pZtZ36VDKs3iZdQj5IpvRbZYUrMstFC1j5V
56AtgULWU6L4Y/mPE8Zs2SOzKrKR6Z0AcwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPvGmPrImUhQighiXJcG25YpUYBbMB8GA1UdIwQYMBaAFDaBSPwP8BBGYgbxHWrB
xYp8vTrpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFr
R2dFcnc4M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0
NjYyMDZGMTFENkFDMUM1OEE3Q0JEM0FFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zNjgxNDhGQzBGRjAxMDQ2NjIwNkYxMUQ2QUMxQzU4QTdDQkQz
QUU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERW16dFpNQ1NMTHBxa0dnRXJ3
ODNvUG9jUU5EZDhkTlFUYXR4NjFacWhEMy8xLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNjMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfXkwDQYJKoZIhvcNAQELBQADggEBAIEf+kXDGcBSiVutoaDVGhelvODnTGTs
TuxEI3h3xyNixwPDhl96ZMXCBSTY1Qb8PayOrTHFp45zJozL+3bJSmPmwIdp6Gcu
D2yhM/umm5OtawrIoOkqoh59hG6ViFYG8FZqB4lIlFX1z5WKFMxYk1PeBTg+e6gk
DT9DfsI0vDr1thbb3N1vdmiJN+KHVCCeoxOxnVIzECkYc5EWq8EoWhtaZTJe5Qge
5O7wwQW3JODrDeer7UBQGjqglVYXk1yJNBLMdXhKCvsTsyJm/q8O4h8BeE03hv37
Ld3U2SNpBJMDACLHIgOroeR+s0iVdNqIwH7+2g6yV6C17s522Dx9wF4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:22:59 2025 by rpki-client