Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa
File:                     3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          jPR31rkDg4e1Xwg30IMlQ68iuGIfTilB8K+R4fLDskg=
Subject key identifier:   B3:0E:93:F3:7E:F8:AF:27:4A:2C:7D:82:45:5A:AA:5A:13:6D:EF:AB
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       22A01672380BDAD7C390125A098729AA78A03B9F
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:48 +0000
ROA not before:           Sun 08 Jun 2025 11:19:48 +0000
ROA not after:            Sun 07 Jun 2026 11:24:48 +0000
asID:                     262293
IP address blocks:        143.202.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:16:72:38:0b:da:d7:c3:90:12:5a:09:87:29:aa:78:a0:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:48 2025 GMT
            Not After : Jun  7 11:24:48 2026 GMT
        Subject: CN=B30E93F37EF8AF274A2C7D82455AAA5A136DEFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:35:79:2c:98:0d:b0:4b:22:c3:84:a1:f0:
                    95:6a:0f:e7:41:36:f2:de:38:08:ef:b1:4d:56:a6:
                    ac:99:25:0e:2c:2b:f4:1a:f4:3a:26:88:8f:e0:fd:
                    f8:32:9b:b8:ec:40:6c:6c:49:13:c5:69:63:3c:2d:
                    f8:cc:8b:2a:90:ad:0d:25:42:66:3f:b4:22:1c:10:
                    50:0a:45:58:47:12:58:68:6d:6e:ed:bb:2a:4b:86:
                    8a:5f:db:28:b2:eb:17:59:9e:87:6e:1a:88:a3:24:
                    6a:d4:f3:a2:0c:8d:c8:75:13:af:aa:00:6d:77:8e:
                    9f:f2:a3:1f:c8:5f:d8:a5:f4:9e:7c:41:d0:cf:5e:
                    95:aa:fd:c0:a1:59:56:c4:57:9e:be:45:dc:30:12:
                    8f:5e:38:71:1e:2a:4f:13:ff:b0:e2:6b:f1:1e:70:
                    af:8b:37:94:b2:b2:6c:1c:5b:4b:f0:8a:96:30:22:
                    cc:26:6e:4c:f8:b6:19:43:54:57:d7:90:7e:40:0a:
                    d0:d6:14:b9:74:22:71:f3:4f:86:2f:b3:fc:67:d7:
                    02:27:44:10:8a:ee:2e:5d:72:0d:d1:bb:c5:a0:16:
                    1a:fa:50:9f:ca:9c:10:3b:88:d2:7f:95:ed:8a:2f:
                    1a:79:fc:90:2d:e8:d6:ba:ba:3b:cb:ca:30:ba:ec:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:93:F3:7E:F8:AF:27:4A:2C:7D:82:45:5A:AA:5A:13:6D:EF:AB
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:d8:48:37:4a:d4:b6:96:6b:7c:30:dc:25:16:99:53:f3:
         51:bd:bb:03:9f:37:3c:cf:1a:65:1d:ba:e9:c2:b1:98:97:8e:
         f9:5d:4d:c9:7f:c9:d3:c3:35:0d:06:83:d4:5c:3b:56:d3:a3:
         05:07:ac:19:ae:bd:90:79:1e:24:dc:99:40:52:0c:e2:4c:a5:
         93:b5:b0:09:27:5e:cf:92:76:ed:57:f8:ea:63:5c:59:df:d4:
         58:e4:2f:6e:7b:24:51:67:05:f5:44:a7:e4:21:76:24:3f:0a:
         17:e9:2e:ff:4a:6e:94:b7:22:3e:a2:95:6e:c3:97:5f:c8:f0:
         67:d0:76:c3:8f:18:a5:e1:91:63:76:56:00:e2:ca:59:a1:13:
         d9:e8:59:37:9a:f2:ad:26:31:10:af:75:11:bc:86:03:f1:71:
         f1:61:4a:6d:2d:3f:f3:11:8f:1e:a6:82:f6:fe:6b:6a:5c:cd:
         a5:0f:05:61:f6:e3:88:98:5e:2e:73:62:23:78:0d:02:dc:8b:
         54:57:93:ed:5d:2b:bc:30:eb:34:d9:89:13:14:55:47:fe:f9:
         64:a4:e0:37:36:3c:e3:10:49:42:41:50:69:4e:07:8e:0f:26:
         d3:9b:ea:b7:fd:22:78:b9:3b:2f:63:2a:fa:57:3f:e8:d3:3a:
         aa:a3:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:10:00 2025 by rpki-client