Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132322e302f32342d3234203d3e20323633363335.roa
File:                     3137392e3132352e3132322e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          MC2ojCAez6I+RLzc+BwcwMOnVS+diXPFzwqavfs7VLw=
Subject key identifier:   85:22:9A:47:6B:5D:E7:77:62:D8:D1:E2:EE:13:10:FA:09:2D:9E:BF
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       266E6FA96AE387135434A384EDB4A52EA8359B2A
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132322e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 01 Oct 2025 01:56:56 +0000
ROA not before:           Wed 01 Oct 2025 01:51:56 +0000
ROA not after:            Wed 30 Sep 2026 01:56:56 +0000
asID:                     263635
IP address blocks:        179.125.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:6f:a9:6a:e3:87:13:54:34:a3:84:ed:b4:a5:2e:a8:35:9b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Oct  1 01:51:56 2025 GMT
            Not After : Sep 30 01:56:56 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:62:e3:4c:49:c7:ff:83:2a:98:e7:0d:6a:
                    e6:d9:66:de:bc:30:c0:32:15:b5:64:27:85:a7:64:
                    64:7b:c5:c4:d8:9a:cd:0b:58:ab:7d:2b:f9:21:9a:
                    29:33:51:e8:3b:b7:b4:df:77:c4:92:6f:33:8d:ea:
                    6a:ee:32:ce:19:08:c1:53:7c:57:62:c0:82:e8:f8:
                    42:61:25:56:eb:99:55:5a:28:29:2a:4a:8e:67:56:
                    d5:53:9b:f6:39:83:1b:d3:f9:51:d0:91:55:56:23:
                    0b:78:37:6c:2c:02:79:a3:2e:23:e2:9f:9b:6f:1a:
                    cc:55:01:9e:47:8a:2f:11:59:3d:49:c1:74:8e:aa:
                    10:e8:03:2c:fc:3b:00:62:58:e4:e0:33:3d:1c:df:
                    98:6e:75:f7:6f:28:a4:77:b7:03:6a:e7:e0:ec:95:
                    92:c7:f8:90:17:1a:47:d7:73:f6:4a:8c:c5:00:d7:
                    d4:9c:15:0d:f0:ea:47:81:7b:33:7b:04:40:02:f7:
                    28:70:2c:bf:ba:c1:51:f4:91:f6:ca:e7:30:d7:bd:
                    8d:8f:3a:9e:05:78:53:20:e5:f0:27:fd:4f:82:50:
                    b9:13:00:22:92:f8:7b:4d:ee:b1:59:0d:56:ac:c0:
                    2a:8e:fc:91:8b:72:14:6a:b2:44:74:e4:3f:fa:03:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:22:9A:47:6B:5D:E7:77:62:D8:D1:E2:EE:13:10:FA:09:2D:9E:BF
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137392e3132352e3132322e302f32342d3234203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:c7:57:16:12:f3:d4:06:16:ec:59:0e:32:c0:08:f8:71:76:
         c8:bd:04:04:2b:fe:7b:b7:fb:d9:2f:81:dd:56:71:68:46:d7:
         e9:72:40:6a:d9:66:dc:f5:e9:d5:c2:1a:fc:a5:3c:a9:a1:ce:
         77:1e:de:1a:5c:ea:25:5d:2c:5a:22:2f:fa:26:f1:cc:5b:96:
         57:0b:ab:64:5b:f7:6f:5c:01:be:2f:ff:d9:28:6f:3f:08:c3:
         9f:da:1a:ea:8c:8f:bc:b6:57:cb:92:18:ea:38:f7:5b:e0:ee:
         0c:48:c0:7a:44:a7:4c:ba:94:c5:24:c6:66:ba:a4:19:78:93:
         36:62:57:6e:51:51:6b:62:0d:54:c6:98:2e:d1:c4:f3:cc:77:
         8a:50:12:67:6a:70:99:37:a9:d9:76:5f:c2:7a:2c:10:86:d8:
         a1:51:c9:5b:33:a8:01:00:d2:c6:ff:75:56:73:bd:4b:b1:0d:
         37:4a:34:ae:af:e7:78:a1:97:fc:6c:37:7b:31:63:6c:ca:45:
         16:2b:d1:51:39:05:c9:10:ab:3e:4f:45:cf:fd:4b:d1:db:82:
         ff:2d:0c:3b:5e:e2:5e:0e:5e:0d:bf:c3:d4:06:ea:c1:4f:dd:
         07:84:b1:24:12:6e:b2:fc:49:ad:fe:1d:d5:cf:9c:1f:b8:83:
         91:1e:2c:95
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUJm5vqWrjhxNUNKOE7bSlLqg1myowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4MTQ4RkMwRkYwMTA0NjYyMDZGMTFENkFDMUM1OEE3
Q0JEM0FFOTAeFw0yNTEwMDEwMTUxNTZaFw0yNjA5MzAwMTU2NTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTA1NjYyRTM0QzQ5QzdGRjgz
MkE5OEU3MEQ2QUU2RDk2NkRFQkMzMEMwMzIxNUI1NjQyNzg1QTc2NDY0N0JDNUM0
RDg5QUNEMEI1OEFCN0QyQkY5MjE5QTI5MzM1MUU4M0JCN0I0REY3N0M0OTI2RjMz
OERFQTZBRUUzMkNFMTkwOEMxNTM3QzU3NjJDMDgyRThGODQyNjEyNTU2RUI5OTU1
NUEyODI5MkE0QThFNjc1NkQ1NTM5QkY2Mzk4MzFCRDNGOTUxRDA5MTU1NTYyMzBC
NzgzNzZDMkMwMjc5QTMyRTIzRTI5RjlCNkYxQUNDNTUwMTlFNDc4QTJGMTE1OTNE
NDlDMTc0OEVBQTEwRTgwMzJDRkMzQjAwNjI1OEU0RTAzMzNEMUNERjk4NkU3NUY3
NkYyOEE0NzdCNzAzNkFFN0UwRUM5NTkyQzdGODkwMTcxQTQ3RDc3M0Y2NEE4Q0M1
MDBEN0Q0OUMxNTBERjBFQTQ3ODE3QjMzN0IwNDQwMDJGNzI4NzAyQ0JGQkFDMTUx
RjQ5MUY2Q0FFNzMwRDdCRDhEOEYzQTlFMDU3ODUzMjBFNUYwMjdGRDRGODI1MEI5
MTMwMDIyOTJGODdCNERFRUIxNTkwRDU2QUNDMDJBOEVGQzkxOEI3MjE0NkFCMjQ0
NzRFNDNGRkEwMzFFMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoFZi40xJx/+DKpjnDWrm2WbevDDAMhW1ZCeFp2Rke8XE2JrNC1ir
fSv5IZopM1HoO7e033fEkm8zjepq7jLOGQjBU3xXYsCC6PhCYSVW65lVWigpKkqO
Z1bVU5v2OYMb0/lR0JFVViMLeDdsLAJ5oy4j4p+bbxrMVQGeR4ovEVk9ScF0jqoQ
6AMs/DsAYljk4DM9HN+YbnX3byikd7cDaufg7JWSx/iQFxpH13P2SozFANfUnBUN
8OpHgXszewRAAvcocCy/usFR9JH2yucw172NjzqeBXhTIOXwJ/1PglC5EwAikvh7
Te6xWQ1WrMAqjvyRi3IUarJEdOQ/+gMeJwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FIUimkdrXed3YtjR4u4TEPoJLZ6/MB8GA1UdIwQYMBaAFDaBSPwP8BBGYgbxHWrB
xYp8vTrpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0RFbXp0Wk1DU0xMcHFr
R2dFcnc4M29Qb2NRTkRkOGROUVRhdHg2MVpxaEQzLzEvMzY4MTQ4RkMwRkYwMTA0
NjYyMDZGMTFENkFDMUM1OEE3Q0JEM0FFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zNjgxNDhGQzBGRjAxMDQ2NjIwNkYxMUQ2QUMxQzU4QTdDQkQz
QUU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9ERW16dFpNQ1NMTHBxa0dnRXJ3
ODNvUG9jUU5EZDhkTlFUYXR4NjFacWhEMy8xLzMxMzczOTJlMzEzMjM1MmUzMTMy
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNjMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACzfXowDQYJKoZIhvcNAQELBQADggEBAL/HVxYS89QGFuxZDjLACPhxdsi9BAQr
/nu3+9kvgd1WcWhG1+lyQGrZZtz16dXCGvylPKmhznce3hpc6iVdLFoiL/om8cxb
llcLq2Rb929cAb4v/9kobz8Iw5/aGuqMj7y2V8uSGOo491vg7gxIwHpEp0y6lMUk
xma6pBl4kzZiV25RUWtiDVTGmC7RxPPMd4pQEmdqcJk3qdl2X8J6LBCG2KFRyVsz
qAEA0sb/dVZzvUuxDTdKNK6v53ihl/xsN3sxY2zKRRYr0VE5BckQqz5PRc/9S9Hb
gv8tDDte4l4OXg2/w9QG6sFP3QeEsSQSbrL8Sa3+HdXPnB+4g5EeLJU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:23:55 2025 by rpki-client