Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32332d3233203d3e20323632323933.roa
File:                     3133312e3136312e3133322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          ap1sk96cNPAdy652lvcQN8B6bfdQxer0yau5n7dqHBo=
Subject key identifier:   0A:AE:FB:8E:93:AF:1B:59:79:B5:EE:0B:B7:9D:B2:60:E2:20:33:CA
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       6CDD46EC4A78537FC3DD082C37FD55840EAC5FC0
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:48 +0000
ROA not before:           Sun 08 Jun 2025 11:19:48 +0000
ROA not after:            Sun 07 Jun 2026 11:24:48 +0000
asID:                     262293
IP address blocks:        131.161.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dd:46:ec:4a:78:53:7f:c3:dd:08:2c:37:fd:55:84:0e:ac:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:48 2025 GMT
            Not After : Jun  7 11:24:48 2026 GMT
        Subject: CN=0AAEFB8E93AF1B5979B5EE0BB79DB260E22033CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:73:b9:a3:8d:aa:62:44:63:4b:f0:ff:b1:
                    4f:d0:b2:38:08:29:98:a8:df:1a:8b:1e:1e:05:30:
                    e0:3c:4f:0e:e0:ce:06:ff:1a:6d:61:54:7e:81:b3:
                    6d:c2:01:1c:fe:8c:94:26:d1:46:10:03:d5:16:2f:
                    ec:9a:1b:f9:b5:c0:72:ee:7e:71:73:65:70:83:7c:
                    4f:3b:2b:7d:a9:f4:fd:00:a1:4f:61:83:c7:8c:31:
                    17:ef:05:cc:5c:b4:0c:b4:2f:fc:88:0b:13:85:01:
                    47:ea:14:b0:5b:bb:38:46:2f:c0:24:08:8e:25:1b:
                    5f:c7:27:92:ff:80:0d:8c:a8:8d:d3:71:1d:af:d9:
                    51:2f:eb:7f:2f:92:1e:a2:aa:91:4c:48:90:59:db:
                    db:02:c0:94:ff:24:1f:be:2b:3a:5f:d9:78:77:c5:
                    82:ee:f7:f3:c2:40:90:d8:4e:59:69:34:84:49:ce:
                    c4:b5:af:45:f5:7d:52:ce:af:cd:4c:e1:ab:5f:15:
                    f4:65:f0:ce:39:94:fb:49:d5:13:4c:71:ea:f2:00:
                    fc:ed:16:6e:9d:9b:24:4c:db:70:3b:ca:5b:8a:8d:
                    40:90:f0:56:68:df:35:8d:e9:08:c4:ad:c0:de:91:
                    f6:2e:3a:a4:85:9b:48:bb:32:bf:06:f6:dd:a1:29:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AE:FB:8E:93:AF:1B:59:79:B5:EE:0B:B7:9D:B2:60:E2:20:33:CA
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133312e3136312e3133322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:c3:4e:e1:2c:87:fc:f7:fa:fc:e7:14:82:51:8a:ae:33:
         ad:86:ba:e4:59:aa:70:15:61:0a:67:3e:c7:d7:2a:7e:24:7b:
         63:e8:0d:ec:09:c7:eb:ea:28:ef:20:a4:d0:f8:dc:de:2b:91:
         1e:7b:30:f2:5e:7b:db:39:44:e7:d2:4b:b0:22:c4:d5:79:02:
         e5:0c:9d:1e:96:87:1e:5d:2d:d2:01:e8:d6:83:46:57:74:79:
         d7:6c:b8:9a:f7:2b:a7:a5:f9:ce:12:e0:21:4b:3c:7d:b7:d5:
         cc:f8:03:ee:b3:59:4a:11:27:1b:ce:aa:cd:7b:0f:8f:83:51:
         13:9a:43:c5:b4:b2:ed:4e:15:35:ba:db:33:06:07:92:42:41:
         ef:e0:ce:b4:05:1a:bb:e2:8c:a4:f3:e1:16:05:73:31:20:42:
         5f:5e:75:8a:dc:e1:7e:c6:4e:90:fb:0c:b0:73:6b:fb:e7:cf:
         8b:6c:15:ee:d7:4d:57:4a:ea:b1:20:21:7c:85:0f:60:59:b0:
         92:4c:01:52:4f:b7:96:f7:96:9a:91:42:f4:a5:41:fc:64:6d:
         11:6e:6b:15:f8:cc:eb:28:1a:ac:ee:f1:0f:44:ec:fd:db:2e:
         ad:53:5d:5a:b7:ab:0c:81:47:fb:69:1d:d5:6c:4f:f2:51:d5:
         75:3f:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:30:58 2025 by rpki-client