Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa
File:                     3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          jkamVfu3EFQfHuu3LFcxsIa0a/7a7WNJC9z/JsHIncw=
Subject key identifier:   C4:43:E3:9D:33:F2:13:88:5F:90:A6:9A:D7:61:29:93:B7:B0:2B:51
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       4F90B2E67665BDA51775773E89112D0FB9B5B04D
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:29:47 +0000
ROA not before:           Sun 08 Jun 2025 11:24:47 +0000
ROA not after:            Sun 07 Jun 2026 11:29:47 +0000
asID:                     262293
IP address blocks:        168.232.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:90:b2:e6:76:65:bd:a5:17:75:77:3e:89:11:2d:0f:b9:b5:b0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:24:47 2025 GMT
            Not After : Jun  7 11:29:47 2026 GMT
        Subject: CN=C443E39D33F213885F90A69AD7612993B7B02B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:67:70:47:cf:be:e9:f0:7f:71:38:0e:28:
                    f4:c6:cd:fe:50:a6:69:5e:e4:a9:f0:11:04:3b:0d:
                    7f:43:7f:bc:17:32:86:e9:b8:63:e2:43:c8:74:c6:
                    64:95:6f:b0:69:5f:62:ca:68:48:e8:e0:65:06:60:
                    69:f3:0b:ca:80:84:4b:bb:ec:c5:48:05:f9:59:c3:
                    71:b1:8f:09:3f:65:f3:e7:cc:1a:44:ec:4b:c6:a3:
                    92:16:e0:a3:ab:a1:2b:6b:99:9d:fd:1a:13:fd:28:
                    dc:2f:41:45:a9:24:74:ff:f9:4a:d3:42:b5:dc:74:
                    6c:62:2e:f1:d4:19:78:61:8c:ac:1b:70:db:80:ad:
                    86:39:bd:ca:5f:7c:1a:cb:30:cc:62:ea:79:fc:da:
                    b7:4c:c0:ac:60:11:82:c9:9b:68:0b:72:5a:f3:ba:
                    57:62:ff:16:88:66:bf:1c:37:58:d9:ff:e8:c1:df:
                    ed:27:34:06:65:0d:5f:33:84:0a:26:d5:90:54:69:
                    fe:ad:74:2c:ba:c8:1d:3c:1b:36:17:a2:ed:43:25:
                    82:b3:9a:f0:33:7d:5c:71:5e:f4:3d:30:6f:a5:d8:
                    38:32:c5:70:b2:b2:f7:0c:68:c5:e3:e4:51:55:54:
                    7b:a9:5e:12:7a:7a:f0:b5:b6:d8:b0:88:7e:4f:a5:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:E3:9D:33:F2:13:88:5F:90:A6:9A:D7:61:29:93:B7:B0:2B:51
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135322e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:5a:e0:07:7c:0b:dc:3c:e4:65:1b:8d:39:be:47:9c:0d:19:
         58:78:1d:15:4c:32:91:a8:b6:55:7e:c4:a5:8b:71:ca:6f:d3:
         c1:2c:06:95:d2:55:56:58:fa:d6:41:55:9d:e1:ca:9c:9a:a8:
         fa:c7:59:f1:02:33:5d:72:d7:0a:8b:ac:73:bd:ec:ae:8f:56:
         82:a0:52:20:2d:7a:50:10:f2:10:10:cc:e5:88:a1:17:20:2d:
         5a:67:fb:49:8b:a3:ed:ed:e0:8e:17:f7:26:d5:3c:b9:9d:73:
         78:4c:78:bf:68:3a:0a:d8:b6:1b:c6:3b:76:e1:f3:38:0d:cf:
         d8:ac:00:6a:99:30:28:bc:3b:6c:d0:a8:41:72:0c:9a:84:98:
         a2:8b:79:b6:b7:07:a0:84:f4:32:36:28:5e:10:21:d8:4a:2d:
         8c:b9:88:a0:1e:89:13:6b:7c:94:30:d6:6e:dc:b5:05:9a:f3:
         e3:68:a3:bc:e5:1b:ce:24:7d:f8:d3:bf:21:6c:b9:5a:01:05:
         eb:4f:3c:de:c5:20:db:a4:5e:39:6e:4c:08:98:85:c9:74:aa:
         03:60:f8:47:e6:05:c1:38:3f:06:5f:a7:2a:9f:f3:72:20:d9:
         51:12:58:82:a9:d1:db:40:94:a4:45:cc:6f:26:9f:f0:b0:65:
         ce:9e:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:56:39 2025 by rpki-client