Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135342e302f32332d3233203d3e20323632323933.roa
File:                     3136382e3233322e3135342e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          C5PHlcoBv9c4VmaHddgVXdrJRBema9Q1FnyvS/AYsXE=
Subject key identifier:   6C:F1:09:CD:48:F7:D3:93:E9:C4:87:5D:38:DF:48:E0:49:65:0A:72
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       512DAFC8C7D8301227FAF4D057A3E770B0DF6F6E
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135342e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:45 +0000
ROA not before:           Sun 08 Jun 2025 11:19:45 +0000
ROA not after:            Sun 07 Jun 2026 11:24:45 +0000
asID:                     262293
IP address blocks:        168.232.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2d:af:c8:c7:d8:30:12:27:fa:f4:d0:57:a3:e7:70:b0:df:6f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:45 2025 GMT
            Not After : Jun  7 11:24:45 2026 GMT
        Subject: CN=6CF109CD48F7D393E9C4875D38DF48E049650A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:73:1d:d2:84:d4:3e:dd:09:28:67:0d:9d:
                    f6:a5:3c:05:44:b7:c6:79:39:f2:e8:4d:95:64:82:
                    a3:ae:21:b8:72:86:85:c3:df:2e:69:af:1a:09:80:
                    7f:ba:91:a2:ba:ec:94:32:93:bb:d4:6d:33:70:fd:
                    b8:74:f3:e6:f8:97:13:d3:c1:56:44:2b:f9:32:4e:
                    f9:ed:fb:da:ef:5f:bb:2a:b3:68:3a:1a:9f:1e:68:
                    35:d8:a4:0e:a4:58:d3:a2:17:dd:c3:66:69:4d:84:
                    7a:a0:cb:01:fa:5e:1b:ff:ca:cd:97:0c:bd:04:58:
                    7a:5e:91:0e:21:3e:04:d9:1d:7f:81:b7:d7:7e:74:
                    68:29:39:79:f3:8c:8a:1c:a1:74:0a:f8:5d:6a:8f:
                    80:a4:79:5c:c2:db:de:46:00:93:ad:01:55:05:65:
                    ae:62:cd:79:bb:f0:0e:ea:4e:37:16:16:85:a6:0a:
                    ae:7a:b9:f2:a6:77:e7:af:14:85:70:20:e5:fd:9a:
                    20:f9:61:fa:7d:d5:ac:9c:05:6d:b2:19:e6:6c:bf:
                    40:1a:22:b4:80:16:86:c4:5b:67:b6:9b:16:05:95:
                    b4:35:86:56:b6:ee:d2:e0:11:66:55:98:63:29:88:
                    f0:02:b1:a5:8b:fd:34:5d:ff:2c:d8:7d:20:ac:5f:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:09:CD:48:F7:D3:93:E9:C4:87:5D:38:DF:48:E0:49:65:0A:72
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3136382e3233322e3135342e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:2f:c2:a6:38:a8:89:78:2f:9a:7e:c4:a7:62:22:b1:1b:
         18:f8:63:a7:68:48:4b:f8:48:3c:11:d9:82:56:51:90:cf:5f:
         dc:5e:ec:60:a2:44:95:50:8e:a6:11:68:18:20:4b:8b:7f:df:
         3e:35:5c:c6:fa:a9:40:f3:1f:e0:3a:dd:d2:09:fe:45:22:9f:
         70:51:df:8b:28:ba:44:75:45:5e:a9:7a:0d:a2:16:1b:34:0b:
         e9:ae:5a:31:3f:45:66:95:5c:9c:4d:12:ea:b8:93:42:cd:df:
         b7:dc:74:b0:91:0b:69:ae:4a:94:19:7b:b9:59:e0:89:cd:f2:
         58:7d:2c:17:59:ce:62:7c:39:a9:f9:77:5d:79:0d:e2:83:9d:
         72:55:62:95:4f:ed:35:c9:b4:a7:e3:a8:1e:83:e4:b3:cd:d3:
         6b:3f:ec:5e:6d:e2:c0:98:3f:2c:56:aa:a2:14:e1:f1:19:cf:
         06:4a:c0:75:1b:9a:80:a9:9d:aa:7b:2f:e8:90:27:dd:78:3b:
         7e:2d:91:60:b9:52:d9:4f:99:6d:15:b3:b4:0d:4c:41:57:20:
         de:cd:0b:97:d0:ab:66:51:28:7e:ba:f3:c4:58:a3:10:57:e6:
         01:ad:c5:4d:b5:49:7e:d6:0a:2c:87:7e:da:8c:82:68:c6:ac:
         44:7e:2e:f7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUS2vyMfYMBIn+vTQV6PncLDfb24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDVaFw0yNjA2MDcxMTI0NDVaMDMxMTAvBgNV
BAMTKDZDRjEwOUNENDhGN0QzOTNFOUM0ODc1RDM4REY0OEUwNDk2NTBBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikHMd0oTUPt0JKGcNnfalPAVE
t8Z5OfLoTZVkgqOuIbhyhoXD3y5prxoJgH+6kaK67JQyk7vUbTNw/bh08+b4lxPT
wVZEK/kyTvnt+9rvX7sqs2g6Gp8eaDXYpA6kWNOiF93DZmlNhHqgywH6Xhv/ys2X
DL0EWHpekQ4hPgTZHX+Bt9d+dGgpOXnzjIocoXQK+F1qj4CkeVzC295GAJOtAVUF
Za5izXm78A7qTjcWFoWmCq56ufKmd+evFIVwIOX9miD5Yfp91aycBW2yGeZsv0Aa
IrSAFobEW2e2mxYFlbQ1hla27tLgEWZVmGMpiPACsaWL/TRd/yzYfSCsX0FDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbPEJzUj305PpxIddON9I4EllCnIwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajomjANBgkqhkiG9w0BAQsFAAOCAQEAAO4v
wqY4qIl4L5p+xKdiIrEbGPhjp2hIS/hIPBHZglZRkM9f3F7sYKJElVCOphFoGCBL
i3/fPjVcxvqpQPMf4Drd0gn+RSKfcFHfiyi6RHVFXql6DaIWGzQL6a5aMT9FZpVc
nE0S6riTQs3ft9x0sJELaa5KlBl7uVngic3yWH0sF1nOYnw5qfl3XXkN4oOdclVi
lU/tNcm0p+OoHoPks83Taz/sXm3iwJg/LFaqohTh8RnPBkrAdRuagKmdqnsv6JAn
3Xg7fi2RYLlS2U+ZbRWztA1MQVcg3s0Ll9CrZlEofrrzxFijEFfmAa3FTbVJftYK
LId+2oyCaMasRH4u9w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:50:39 2025 by rpki-client