Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3232203d3e20323632323933.roa
File:                     3136382e3233322e3135322e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          qOsJfF6zUwZooQOhEEAVD6NK7P28xotYmT2ug7ZO0gk=
Subject key identifier:   61:C0:4E:CF:89:0B:0E:A5:36:43:B6:F6:69:37:2C:EC:FE:55:AF:ED
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       08D1D0D5B329944F3382B13A26365E1337854C30
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:45 +0000
ROA not before:           Sun 08 Jun 2025 11:19:45 +0000
ROA not after:            Sun 07 Jun 2026 11:24:45 +0000
asID:                     262293
IP address blocks:        168.232.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d1:d0:d5:b3:29:94:4f:33:82:b1:3a:26:36:5e:13:37:85:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:45 2025 GMT
            Not After : Jun  7 11:24:45 2026 GMT
        Subject: CN=61C04ECF890B0EA53643B6F669372CECFE55AFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:82:0b:f6:2a:ad:e4:92:64:67:c6:5f:9a:
                    5b:75:59:9d:44:28:23:c4:0d:51:d5:98:b2:19:fe:
                    55:19:ba:49:5d:78:99:b4:74:64:86:e2:c1:b5:8b:
                    94:1c:3b:08:bb:08:13:07:e0:62:6e:e5:d8:c9:c8:
                    11:b1:0c:f9:20:aa:aa:9a:41:6e:14:97:06:d9:44:
                    d7:07:35:5d:8b:38:21:ce:89:db:ab:aa:6c:3f:90:
                    2e:a7:dd:8a:87:3f:b5:4d:36:96:21:59:27:c2:76:
                    23:f6:67:64:42:9b:1a:97:39:49:c9:95:36:23:49:
                    19:34:c0:21:45:2a:95:f7:e7:c6:2b:b8:c6:43:a7:
                    a9:75:52:8c:95:ac:e9:b9:23:79:a3:a3:4d:df:d6:
                    3e:95:36:e6:bb:1f:7f:f3:46:cb:0b:1d:30:8c:76:
                    fa:79:9d:8b:aa:b2:52:f2:40:8e:f8:0c:16:19:f0:
                    39:a8:24:85:94:df:a8:84:6f:ef:2b:a3:3d:4c:29:
                    16:8a:bc:bb:b8:c2:38:67:61:28:ba:7a:81:23:76:
                    f2:91:5b:16:83:d3:03:4a:1a:4c:5b:a8:dc:27:8c:
                    8f:70:d4:c0:8d:bc:2f:51:59:9a:c6:bd:22:92:7e:
                    9d:b9:b1:50:9d:47:4d:b9:d3:de:2b:33:37:1e:7e:
                    fc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:4E:CF:89:0B:0E:A5:36:43:B6:F6:69:37:2C:EC:FE:55:AF:ED
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:0c:ed:04:cd:83:36:7e:27:33:f5:66:16:a3:2d:7c:53:a0:
         36:dc:6b:24:dd:5b:d8:66:76:34:f3:df:32:b5:22:cc:81:47:
         f5:7c:61:5b:e9:aa:b3:1c:78:2c:ec:a9:74:f5:ac:a4:bf:db:
         d3:4e:07:41:e7:8c:52:d5:50:ea:25:94:5a:52:d6:2e:a2:2a:
         01:8d:6a:b6:aa:4f:03:47:c5:a0:c4:10:9d:8f:c5:e6:e1:5b:
         51:a1:18:86:1e:fa:e3:ff:f7:dd:0a:98:31:79:9d:74:de:78:
         e1:09:9c:76:ef:6c:41:10:93:ae:67:66:f5:15:00:06:d8:04:
         1f:f3:c2:0e:0c:6b:2f:0e:5c:14:f1:b7:ce:09:68:a6:41:9f:
         0a:c6:55:3a:9f:5f:ea:e0:17:18:9a:b8:bb:5c:ff:52:84:65:
         0a:6a:37:36:5b:16:f0:52:f0:e0:86:35:ac:cc:83:c1:34:b5:
         75:ae:41:d8:32:b8:08:01:42:be:78:8e:88:79:bb:b8:18:92:
         9b:6f:38:00:19:c6:a4:e1:df:5e:2f:6e:c8:ce:26:59:44:95:
         7a:02:9f:26:36:1e:31:3a:37:42:60:54:ae:06:e3:7f:04:a7:
         7c:3a:5f:8a:2f:c4:c2:bc:93:65:89:66:30:63:dd:5d:d0:bd:
         f6:53:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:40:55 2025 by rpki-client