Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131322e302f32312d3234203d3e20323633363334.roa
File:                     3137392e3132352e3131322e302f32312d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          Yqm6CpsL2iuaHpcrZ1KvlET9dbhYV3Ri+rKhrOZbRds=
Subject key identifier:   15:7D:CF:2F:8D:AD:C9:35:25:1C:E9:E9:93:A1:0D:86:2D:69:0E:10
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       620F2A1867302924930EB819C41BA4A1CE33B560
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131322e302f32312d3234203d3e20323633363334.roa
Signing time:             Thu 23 Oct 2025 14:48:18 +0000
ROA not before:           Thu 23 Oct 2025 14:43:18 +0000
ROA not after:            Thu 22 Oct 2026 14:48:18 +0000
asID:                     263634
IP address blocks:        179.125.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0f:2a:18:67:30:29:24:93:0e:b8:19:c4:1b:a4:a1:ce:33:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Oct 23 14:43:18 2025 GMT
            Not After : Oct 22 14:48:18 2026 GMT
        Subject: CN=157DCF2F8DADC935251CE9E993A10D862D690E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:2c:b1:0e:1c:b2:82:c5:9b:c0:4a:e0:25:
                    6b:00:f7:2e:a7:1a:d6:da:10:85:60:e5:3a:33:5d:
                    e2:82:87:8f:41:4c:1a:4a:06:78:c4:73:18:91:e1:
                    0a:b8:10:18:67:7e:62:89:9b:48:1a:de:fa:ec:58:
                    b1:3d:d5:28:7b:c3:95:82:20:fc:bc:57:8e:4f:a3:
                    8a:1a:13:e6:2b:81:df:94:5b:68:2f:5a:c4:ab:c6:
                    57:3b:4c:30:2d:f8:f0:bc:25:28:af:ba:e8:ff:f1:
                    86:6a:66:4d:9e:4f:6a:35:a5:4b:e9:30:9f:9f:e8:
                    50:12:86:f7:45:fe:8e:7b:43:07:fd:0b:ba:ba:e2:
                    de:0f:42:aa:92:d6:df:e5:08:e3:b1:01:87:dc:ab:
                    90:45:bd:cb:82:4a:e0:a4:b0:93:fa:cf:22:0e:7c:
                    a5:1d:b6:12:8a:d8:03:7f:54:44:f9:81:7a:a4:38:
                    9c:e4:a3:bf:4c:00:fd:1f:76:01:09:70:dc:e0:1a:
                    a2:05:13:f4:0f:9a:01:81:e9:ef:81:91:0f:20:2f:
                    a0:a1:12:ea:74:c8:d0:84:a8:e7:85:1b:46:f0:b8:
                    88:94:d5:7f:b6:66:a7:24:f0:9f:23:67:1d:9b:88:
                    e0:41:10:2d:d3:d1:e4:29:5e:02:2e:18:d7:e8:55:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:CF:2F:8D:AD:C9:35:25:1C:E9:E9:93:A1:0D:86:2D:69:0E:10
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131322e302f32312d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:83:4d:e2:4c:56:1f:1d:90:1b:d1:8f:b3:09:6b:27:50:4f:
         0a:41:2d:cb:b6:ac:bc:c1:d1:d3:c7:c9:dc:aa:ce:1f:e0:41:
         a6:c4:e7:c1:35:20:27:2c:41:04:b7:6c:3f:bc:d3:24:3d:48:
         ee:31:1a:40:fc:5a:c1:7d:e4:da:f9:6a:40:64:76:b2:b5:e8:
         53:61:00:1d:ea:58:d0:cb:7e:65:fd:ee:27:fd:be:4e:c5:42:
         c2:7d:e1:2f:5e:66:f9:73:89:7d:35:24:4a:1c:da:33:bd:d0:
         fb:36:10:ee:af:f1:83:47:1a:25:d3:04:01:04:01:95:46:5f:
         4d:8d:be:22:c8:db:28:10:4d:52:f8:3f:da:40:78:f9:ae:01:
         59:f4:72:54:b3:f0:48:05:54:9f:be:57:67:7c:19:6b:90:00:
         11:af:e9:cd:29:fd:0b:3b:95:d5:44:6d:6c:8f:65:06:d7:36:
         c3:ca:c3:b7:25:65:19:07:5a:7e:19:76:74:05:b0:7a:b1:a5:
         34:3e:93:0d:a5:df:43:7a:eb:4c:16:91:eb:df:57:71:b7:61:
         23:ca:5a:d7:96:84:3a:06:94:19:f3:b2:ed:20:9b:a8:96:7f:
         a5:36:72:0c:4f:58:1a:ec:7b:4e:38:ec:0a:c4:a9:29:7a:f9:
         77:a8:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:46:24 2025 by rpki-client