Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa
File:                     3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          aaZ3mbM01cfEagjEelTnz1QNTcGzQuAhaE++hpsbD4M=
Subject key identifier:   71:A8:08:2C:EE:C1:A8:97:5D:A4:FE:C8:85:7B:2F:DD:D9:BB:6B:62
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       192CA2A5E5AC84853A5D2363019402F47534A790
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:44 +0000
ROA not before:           Sun 08 Jun 2025 11:19:44 +0000
ROA not after:            Sun 07 Jun 2026 11:24:44 +0000
asID:                     262293
IP address blocks:        138.94.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2c:a2:a5:e5:ac:84:85:3a:5d:23:63:01:94:02:f4:75:34:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:44 2025 GMT
            Not After : Jun  7 11:24:44 2026 GMT
        Subject: CN=71A8082CEEC1A8975DA4FEC8857B2FDDD9BB6B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:6d:c9:72:0f:34:3c:3b:ed:6d:c7:a9:d5:
                    34:94:ea:fa:14:ae:51:94:2a:3a:6d:6f:5a:84:1c:
                    bf:98:1e:40:dc:5c:72:e7:cb:c2:89:ed:b6:51:a0:
                    a0:cf:84:48:29:7e:61:b5:f4:39:e8:b6:fa:80:8c:
                    73:ec:10:35:6d:cd:78:e6:2a:11:ac:c6:46:a9:2e:
                    6e:82:fb:a7:98:10:11:60:92:83:46:c5:ac:86:3a:
                    c4:e0:9c:a7:85:3d:7b:fc:56:62:5f:06:6e:16:bf:
                    0e:01:a4:f5:33:ce:3b:64:f7:9a:0e:e0:39:1d:f5:
                    2f:94:0a:d8:e0:0f:77:45:1e:3a:d1:22:de:f8:ef:
                    e1:b1:af:62:bc:4c:81:bb:29:b6:b1:38:de:af:9f:
                    62:c4:21:36:ae:4c:ec:93:5f:10:9d:c8:8f:a1:6d:
                    e8:33:a5:96:b0:1a:e9:87:62:f7:6f:eb:57:5d:6b:
                    44:e5:f6:a8:44:26:ab:a2:c4:f7:a3:32:ce:96:b4:
                    71:4f:ed:82:fa:7f:37:ef:cc:5e:3c:e9:38:8c:98:
                    66:19:74:4a:81:ce:07:2f:02:3e:ee:14:07:e9:f2:
                    fa:82:c6:52:3a:1b:34:03:1d:6b:03:d8:e2:9c:b2:
                    2e:aa:f1:e7:61:6f:ce:d2:42:67:ca:40:19:8a:f0:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:08:2C:EE:C1:A8:97:5D:A4:FE:C8:85:7B:2F:DD:D9:BB:6B:62
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:5e:70:e6:76:0f:41:64:68:e4:60:eb:68:70:13:27:80:22:
         f7:ff:aa:3d:6b:5e:89:11:f1:59:de:49:4b:a5:9a:82:44:ef:
         38:de:02:5b:fb:39:92:05:82:b3:9c:63:5b:dc:f3:02:e4:2e:
         2e:06:83:7e:86:92:7c:58:b3:dc:bf:9e:dd:87:9c:80:31:9d:
         a1:5e:d5:0c:a8:f2:be:3a:18:54:d6:ef:98:2f:05:ee:a9:e1:
         0b:a4:0a:07:9b:79:47:35:af:2d:a4:4e:94:89:54:25:ee:c8:
         fe:50:51:57:2c:89:d0:d5:c4:6a:0a:fc:aa:fd:c3:d0:f0:c0:
         88:95:ff:23:e4:63:54:6d:0e:78:ab:7e:97:cf:00:43:3e:f9:
         45:6c:69:61:cf:c9:12:74:52:b6:48:7a:92:17:97:e3:ab:01:
         a0:6e:57:1d:75:5d:cf:af:0d:06:08:54:40:99:c3:e0:e7:7b:
         75:57:62:82:99:a5:f7:47:09:75:62:04:a2:f1:aa:4d:fe:ac:
         1c:e0:e9:50:13:34:7a:51:a9:8c:60:aa:d9:40:5c:92:ad:ee:
         6b:c1:8c:20:e5:ed:30:16:af:a6:87:b0:97:1a:62:f9:99:02:
         bb:a5:ef:95:8a:8b:67:00:3a:77:61:56:89:5e:e6:9e:39:07:
         d2:d2:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:19:42 2025 by rpki-client