Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          25ztr8s3li73sParIDGtiPUevSufo5JA2JMikgXSP8Q=
Subject key identifier:   5D:D4:30:CD:86:A8:36:5E:60:42:F4:3C:CD:B9:6A:4D:17:A5:5B:1F
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       426DA554D745A0CB1A570D9EE1658A3978ABC234
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:46 +0000
ROA not before:           Sun 08 Jun 2025 11:19:46 +0000
ROA not after:            Sun 07 Jun 2026 11:24:46 +0000
asID:                     262293
IP address blocks:        138.94.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6d:a5:54:d7:45:a0:cb:1a:57:0d:9e:e1:65:8a:39:78:ab:c2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:46 2025 GMT
            Not After : Jun  7 11:24:46 2026 GMT
        Subject: CN=5DD430CD86A8365E6042F43CCDB96A4D17A55B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:ff:f1:e1:dd:bb:aa:b2:2f:f2:61:0f:01:
                    8b:e3:8c:9c:4c:91:db:82:56:8b:a5:e3:ec:3c:e5:
                    e0:76:a4:a7:28:46:dc:30:97:9e:0e:40:0b:7a:c4:
                    a2:8a:33:13:0f:75:41:d4:5b:9e:4a:99:80:2f:4f:
                    f4:9a:1c:f7:39:e6:1f:6c:04:fa:9d:25:c8:51:9d:
                    86:88:a8:0a:1a:ef:c4:51:6d:e3:f8:8f:1d:ef:7c:
                    c1:86:4c:0c:b7:b5:f0:5d:61:05:e5:57:86:af:de:
                    74:2a:4d:e5:ce:71:99:f6:2e:ec:2f:cb:c3:35:23:
                    79:34:8d:69:77:ce:50:25:76:8e:cb:ad:b9:e4:4d:
                    bb:6d:da:3b:3f:14:fb:31:1b:93:48:1b:02:52:94:
                    e6:d2:9b:76:ff:75:76:6a:df:fa:de:c9:b4:96:41:
                    62:70:ca:da:a9:60:ea:aa:e6:e7:22:2b:ff:2c:ff:
                    3c:19:67:d6:61:c6:ed:64:ea:44:6c:c3:01:fe:32:
                    07:c4:01:23:46:94:d3:65:f7:a2:33:50:04:1b:f3:
                    26:24:26:f9:e5:16:43:b1:31:50:95:b0:5f:3b:7e:
                    55:d3:0b:62:31:59:61:c5:dd:d9:d2:87:e6:fa:4d:
                    98:0d:bf:20:f5:54:85:5b:f0:a0:4c:c6:54:e6:36:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D4:30:CD:86:A8:36:5E:60:42:F4:3C:CD:B9:6A:4D:17:A5:5B:1F
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:07:90:ed:db:ef:5f:dd:ce:2e:23:83:02:20:06:43:15:
         59:1c:f2:d4:e8:a1:52:56:9a:bf:72:4b:c0:01:7a:14:81:74:
         1f:7f:71:65:e9:dd:cf:34:1d:93:71:18:a6:27:91:54:86:86:
         90:27:74:4c:fb:19:39:05:78:a1:bb:3b:d2:3d:5c:86:32:39:
         6b:48:f0:2f:78:53:37:a8:b6:24:8d:e3:65:9d:07:98:20:09:
         6f:9a:26:d3:a0:77:ea:23:72:07:bd:fb:03:d6:0c:00:6f:fb:
         c8:ff:8d:64:47:3c:fb:4a:ac:c5:0b:db:fd:1a:af:30:fd:e1:
         ca:fd:54:db:7d:1d:06:e0:ac:39:99:f1:fa:8c:84:06:3f:ca:
         55:ab:81:93:29:e7:e6:d8:d6:00:bd:48:b7:52:c3:b8:35:e5:
         d6:9b:d7:70:6e:ea:bb:6e:5e:00:c8:77:7b:41:c2:ab:b1:ba:
         cb:ae:6b:c8:ba:3b:fc:b8:96:30:28:77:06:13:82:4b:f4:17:
         8e:77:23:99:6f:a4:8e:0d:80:08:54:88:ea:55:22:d3:e9:2d:
         43:1a:c0:da:4f:11:2a:85:07:2d:12:f1:8d:51:c3:3e:6f:8e:
         5d:25:d0:24:f7:be:1e:b1:58:7f:62:32:a5:ef:13:32:0f:c6:
         5c:4c:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:20:28 2025 by rpki-client