Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3232203d3e20323632323933.roa
File:                     3134332e3230322e3234302e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          Mrwxat3ApfPLnhCEUqIYomEFNFKzfL/QrNCwepR0uVA=
Subject key identifier:   79:8B:FE:FB:42:B0:CE:EC:12:FE:92:AF:C2:86:49:D8:8C:4E:0B:92
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       2E539DA97D78A3B440E7EBC7AEFDD5E7C6D0B22A
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:48 +0000
ROA not before:           Sun 08 Jun 2025 11:19:48 +0000
ROA not after:            Sun 07 Jun 2026 11:24:48 +0000
asID:                     262293
IP address blocks:        143.202.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:53:9d:a9:7d:78:a3:b4:40:e7:eb:c7:ae:fd:d5:e7:c6:d0:b2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:48 2025 GMT
            Not After : Jun  7 11:24:48 2026 GMT
        Subject: CN=798BFEFB42B0CEEC12FE92AFC28649D88C4E0B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:86:5b:41:37:0c:ad:e5:b3:1c:d2:05:5e:
                    78:bc:6b:06:07:0d:97:ac:75:bb:1a:9b:24:75:56:
                    a1:c0:67:63:6d:66:97:03:27:63:e8:fe:3f:c7:f2:
                    50:3f:1a:3c:ac:c5:32:ee:09:2f:21:ec:91:08:dd:
                    b7:6f:6e:1b:2d:27:b9:f0:66:bc:a7:aa:19:7c:95:
                    f3:17:c0:2b:91:4c:0a:6e:ec:f1:b8:d7:35:36:9d:
                    05:66:1e:9b:a3:ac:e6:6d:5b:01:65:a2:68:42:b8:
                    c4:e2:6e:ba:a1:49:d2:14:4a:a5:2d:02:16:e9:37:
                    33:bb:f0:34:2a:ed:18:cb:82:d7:32:84:eb:29:84:
                    43:20:36:e6:b6:2c:59:c6:db:15:19:ea:c2:eb:cb:
                    86:ac:0e:47:71:78:cd:23:f2:d1:da:fa:a3:e7:b2:
                    77:1f:7a:44:f6:47:09:ef:0c:f5:a7:98:a0:81:e8:
                    89:39:37:2e:20:de:ca:79:f7:9c:b0:b7:f6:bf:f0:
                    a8:52:75:01:70:12:9e:80:a2:89:8d:96:68:9d:70:
                    e9:e7:c3:e7:22:e7:33:ce:bc:36:39:01:73:67:68:
                    3a:9b:62:b1:94:81:fa:27:64:6e:a4:c6:34:d2:f1:
                    11:8e:70:04:c2:0c:d5:d9:6b:e2:9c:ed:73:43:54:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:FE:FB:42:B0:CE:EC:12:FE:92:AF:C2:86:49:D8:8C:4E:0B:92
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:6c:23:1a:1a:94:c6:1c:52:0e:3e:3c:da:b4:78:6c:51:ca:
         e4:63:c4:be:c2:5b:41:b6:41:6f:bd:7c:c2:52:47:99:8d:2a:
         ad:29:9e:7a:fd:1f:13:36:3d:a3:1e:2f:30:93:51:7c:81:db:
         d4:1a:88:eb:2d:87:a3:39:a8:fa:d1:16:43:d1:c0:0c:16:85:
         58:82:36:78:4f:33:46:25:1c:65:d1:32:e6:2a:1e:7b:88:ed:
         a2:93:35:fe:a0:81:b6:ef:f1:7c:91:90:a7:fa:35:67:52:a3:
         45:14:19:de:6f:a7:60:5c:be:35:37:28:bf:84:b7:3e:d5:ca:
         98:b9:d5:03:1f:f2:00:f6:ec:fc:b0:84:13:ea:ef:23:5a:28:
         4f:85:a6:13:93:af:09:df:97:69:84:61:89:e6:34:89:db:7d:
         f4:d2:0f:2c:dd:14:50:41:3d:a9:79:c7:67:d3:73:7d:b9:d2:
         b6:f9:93:ff:e7:f0:dc:4a:2e:be:4f:d3:21:6a:9d:12:4a:97:
         2f:dc:07:d0:3d:cd:e1:1e:f4:ec:37:ad:88:86:bf:db:37:83:
         56:a9:76:11:1f:49:78:3a:d2:7d:b8:64:2d:79:ad:00:70:f5:
         0e:df:27:b4:a8:26:56:09:4c:f9:24:e2:94:ed:ba:23:96:2d:
         9e:7e:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:23:46 2025 by rpki-client