Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          bdne+Jl6lXseajLy/8b8ovpK641WtKX/AhbzkJIlp/g=
Subject key identifier:   96:E4:23:71:78:60:23:11:8A:F5:6A:85:53:0D:B4:56:56:45:E1:AB
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       30627D7AED9CA3C4C7E2B9E24A52FBA056B62B2E
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:29:02 +0000
ROA not before:           Sun 08 Jun 2025 11:24:02 +0000
ROA not after:            Sun 07 Jun 2026 11:29:02 +0000
asID:                     262293
IP address blocks:        138.94.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:62:7d:7a:ed:9c:a3:c4:c7:e2:b9:e2:4a:52:fb:a0:56:b6:2b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:24:02 2025 GMT
            Not After : Jun  7 11:29:02 2026 GMT
        Subject: CN=96E42371786023118AF56A85530DB4565645E1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:8e:4c:5a:9c:09:ac:69:22:1c:e6:16:55:
                    bd:4f:97:0f:09:e1:7a:5b:ab:2f:92:c7:01:46:54:
                    6f:78:7c:4b:9b:cb:dd:b9:f4:d1:9b:f5:17:d2:37:
                    3f:5f:20:f6:1d:74:0d:84:43:47:62:0e:b6:5c:de:
                    7a:3b:9d:7c:5d:62:87:1b:56:12:d7:75:ec:60:ee:
                    b6:d7:04:4b:0a:96:69:c9:4f:c8:ff:1c:2c:27:ec:
                    fb:c1:2d:bb:1c:01:ca:d6:a8:90:e0:55:d7:69:ff:
                    34:c8:b4:83:27:64:5d:8b:04:71:db:75:31:96:88:
                    18:80:fe:e5:bc:4f:93:a1:7a:0a:2b:cf:04:1d:ef:
                    73:10:d0:4e:20:81:4b:9f:3b:b1:ff:c5:fb:90:77:
                    e6:e3:d4:94:49:50:93:c9:2f:b8:f3:d0:1f:6c:c8:
                    97:76:72:03:84:ea:37:98:47:22:f5:48:06:ec:fb:
                    65:ec:21:97:8d:ed:c8:65:c8:4a:71:d6:88:a1:c5:
                    82:ef:91:be:76:d9:1b:27:31:89:88:ff:e1:49:ce:
                    cc:34:eb:10:73:0d:24:e2:73:04:51:23:12:d9:53:
                    83:97:f7:1f:13:c4:40:27:ce:a8:20:39:92:22:7d:
                    60:a2:eb:d9:bd:a8:2a:54:6b:1d:1c:0f:e2:55:11:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:23:71:78:60:23:11:8A:F5:6A:85:53:0D:B4:56:56:45:E1:AB
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:f3:8f:f9:a3:d0:d6:82:2b:9b:df:a8:3e:e2:9e:f9:cb:b8:
         4d:c1:f3:e0:c9:f0:56:17:62:c1:4b:c5:ea:cb:16:ac:7d:73:
         97:bc:97:3f:39:d9:2d:b2:2a:84:9b:ac:e7:70:1c:76:cb:20:
         5d:df:69:4a:e0:0a:90:df:4e:cb:c7:9b:82:ff:8b:44:a9:af:
         dd:3d:da:00:c5:ee:cf:56:01:9f:dd:45:51:b2:4b:f6:8a:45:
         fb:6d:4d:0c:14:c5:12:04:a1:06:eb:3b:a2:12:8b:1b:2f:a1:
         cd:6d:d2:c4:34:97:b0:c1:db:b5:c2:fc:5c:e2:69:5d:3d:4a:
         31:d7:12:b4:92:0a:18:60:91:a3:7c:ae:5b:40:48:3c:83:8b:
         99:37:d3:21:6e:31:c1:ec:46:fd:36:d7:84:7c:fc:72:bc:42:
         31:e3:b8:8b:8f:75:1f:d6:01:7d:83:77:8e:d7:56:35:d3:76:
         ee:ae:4e:98:d5:35:44:44:69:6b:df:8f:ca:00:60:f6:8f:99:
         45:cf:ab:67:9c:aa:8a:14:d9:fa:3b:c6:5a:ec:25:e0:d6:cf:
         5d:6e:f8:38:73:06:47:ef:a9:17:20:19:0f:94:32:a3:79:3b:
         a4:3a:71:2a:11:7d:0e:36:6d:29:3c:93:3d:21:a5:d0:be:4a:
         9f:45:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:26:08 2025 by rpki-client