Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234322e302f32332d3233203d3e20323632323933.roa
File:                     3134332e3230322e3234322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          sgf2T/z8AlPvD6Kjv/iqS5R67+fT/Wds5gADgWcgAKk=
Subject key identifier:   8A:C9:A1:F5:1E:75:57:BE:A9:B3:2B:C4:9C:51:3C:7A:01:68:96:24
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       67B2F4506BB49816599141DD8E9864E848B3BFF8
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234322e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:46 +0000
ROA not before:           Sun 08 Jun 2025 11:19:46 +0000
ROA not after:            Sun 07 Jun 2026 11:24:46 +0000
asID:                     262293
IP address blocks:        143.202.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 14:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b2:f4:50:6b:b4:98:16:59:91:41:dd:8e:98:64:e8:48:b3:bf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:46 2025 GMT
            Not After : Jun  7 11:24:46 2026 GMT
        Subject: CN=8AC9A1F51E7557BEA9B32BC49C513C7A01689624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:a8:37:7b:e5:87:61:d8:b1:de:e0:98:2a:
                    f5:ff:e0:a5:36:77:0d:77:06:a9:bb:0a:9b:cd:18:
                    6b:e2:7e:48:e5:45:f2:87:af:42:99:62:bd:30:41:
                    ac:fd:d1:f6:bb:9c:73:36:79:9b:25:10:e1:93:ff:
                    6d:8c:bb:70:67:92:f7:90:a0:56:ac:f2:8a:4f:10:
                    a5:4f:08:be:13:c5:5c:66:89:6c:e5:92:e1:f4:59:
                    c5:3f:bb:e9:50:26:33:28:6d:4b:e6:78:b7:eb:a4:
                    97:e2:93:c8:31:3f:e9:96:b8:eb:f9:83:be:03:46:
                    df:4a:cb:4a:3d:3e:c6:e4:d7:e5:e8:09:b0:96:6c:
                    6a:a5:db:79:79:5c:a6:05:e7:ff:1b:8c:a3:39:1f:
                    0a:b9:97:c6:74:84:93:7b:bf:74:3d:39:28:25:5e:
                    b5:a4:5d:2f:ce:16:df:dc:00:ed:28:ca:91:9c:9a:
                    ff:7a:8f:44:f1:8d:9b:3b:2d:fd:92:bd:ef:30:9d:
                    e9:06:ac:0b:39:c4:26:3d:68:4e:9b:63:26:d3:dd:
                    c6:7b:85:e4:4e:55:2b:db:e5:7f:62:9f:b2:e4:ce:
                    0e:47:df:f3:4b:61:bb:a5:3f:1e:6e:3a:2b:2e:24:
                    38:b4:48:eb:f7:a3:78:e6:b6:3b:64:ab:12:a8:0a:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C9:A1:F5:1E:75:57:BE:A9:B3:2B:C4:9C:51:3C:7A:01:68:96:24
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:1d:a9:bf:af:60:07:8e:43:75:21:56:c3:81:4b:33:bb:
         d9:ef:0c:ad:f5:e8:c9:1d:07:5d:81:54:1c:50:c1:1d:22:cc:
         9f:4c:f6:ac:b3:1f:3f:5b:17:fb:51:ec:ab:de:dc:3c:2b:7a:
         fa:a3:6a:34:c3:9d:2c:d9:77:f3:b2:46:13:17:cc:4f:8d:b2:
         ab:8f:68:a6:d3:64:01:22:e3:71:b9:a0:a6:81:49:d4:02:26:
         bc:c3:b5:4a:f8:69:78:e4:b2:ce:22:67:48:b5:81:de:fc:ee:
         93:6e:5c:e9:14:f8:c1:ba:c1:19:5b:97:09:85:ed:f3:3b:31:
         31:99:c7:38:f0:ff:5d:3a:64:6e:70:1a:32:01:a8:c6:7a:30:
         fd:ac:f4:24:b8:e5:3f:4e:23:69:8e:6a:c8:a8:6a:2d:46:8f:
         32:8f:f4:d6:4f:38:17:2d:03:76:7e:b9:06:0c:19:93:69:77:
         01:1b:a6:d8:d0:25:b5:2b:50:32:83:c3:34:39:88:98:a4:45:
         f4:95:a4:96:7d:44:76:e0:6e:89:58:52:6f:16:b9:7d:78:cd:
         55:41:f4:26:4e:e2:2f:aa:5c:87:0d:d9:6e:3b:c9:6e:75:6c:
         7c:30:ec:87:d4:fe:ce:08:d4:0e:d3:a7:32:3b:68:17:24:ad:
         3c:d7:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:10:20 2025 by rpki-client