Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa
File:                     3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          NKUEdoimlfiy55nTJW1f3iu2v4u4pxhc2CaNTqJgMv0=
Subject key identifier:   E3:05:97:5D:4C:91:EE:EC:D8:18:D2:1C:F6:C7:56:73:44:66:12:C4
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       681C54C5C6FB2EDD6303571CB9EEFD3F3239DEEB
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:44 +0000
ROA not before:           Sun 08 Jun 2025 11:19:44 +0000
ROA not after:            Sun 07 Jun 2026 11:24:44 +0000
asID:                     262293
IP address blocks:        170.80.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1c:54:c5:c6:fb:2e:dd:63:03:57:1c:b9:ee:fd:3f:32:39:de:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:44 2025 GMT
            Not After : Jun  7 11:24:44 2026 GMT
        Subject: CN=E305975D4C91EEECD818D21CF6C75673446612C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:10:7f:32:29:27:06:87:57:ec:00:08:55:
                    b6:f6:9f:2b:cb:e0:fd:8c:c8:09:3a:24:4c:11:a8:
                    ae:e9:3e:9d:f1:3c:a9:6f:4f:6b:9a:1f:76:0d:74:
                    0b:d8:e2:79:67:17:62:15:4c:49:62:1d:bc:30:5d:
                    86:23:57:40:a3:98:c7:43:a8:ac:3e:58:37:bc:83:
                    c0:95:16:d2:68:1f:cb:d6:0d:1d:d4:b4:a2:00:ff:
                    98:bf:17:aa:ad:75:5b:40:eb:bf:e3:11:06:44:dd:
                    b4:51:4f:26:07:30:47:23:cb:0a:54:06:b5:dc:6b:
                    5a:90:4f:fb:9a:22:32:89:29:7d:46:f6:55:a7:73:
                    dd:b1:42:d5:90:68:31:a5:95:e4:a0:a7:e1:fc:a5:
                    a9:1c:02:3a:30:a5:ff:42:98:7b:4b:bb:4f:77:95:
                    fa:d8:e7:a7:3a:73:ca:d8:00:d5:6f:e2:5e:fc:0f:
                    4b:2c:0e:e1:40:f1:3e:26:60:92:3b:b5:4d:64:b5:
                    b9:49:d4:16:b5:a1:9f:9c:6b:fe:6e:af:81:44:17:
                    68:c9:f4:d8:52:ba:52:6d:3d:fd:df:9d:94:b2:e0:
                    96:e1:21:70:a2:b9:b9:1e:1a:82:28:60:e6:77:40:
                    23:6a:39:1c:e1:fa:46:c3:f8:56:45:d6:2e:e8:2d:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:05:97:5D:4C:91:EE:EC:D8:18:D2:1C:F6:C7:56:73:44:66:12:C4
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137302e38302e3137362e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:32:e6:fc:41:f1:31:71:c4:9c:2a:3b:d4:ad:ce:b0:c9:
         e3:31:58:f1:9f:7c:b7:8d:b6:53:aa:3f:82:7d:03:35:7e:2f:
         08:f6:60:ef:c8:54:e0:23:fd:fc:4e:e2:14:26:98:1e:9c:f1:
         73:78:12:17:d7:db:51:57:47:2b:94:26:40:09:5d:74:34:c7:
         9b:8a:e1:b3:7c:14:f2:d8:eb:b3:4e:f4:c3:6b:62:5a:57:4f:
         27:12:bd:ab:7c:ca:f8:19:d9:c6:82:9f:23:c3:bf:44:70:44:
         a5:4c:ed:ef:b1:0c:e8:41:c9:0c:23:30:cd:03:fa:4b:01:19:
         ac:77:b1:cc:1d:4d:21:e8:d5:6b:63:5b:ad:5b:2d:59:42:7a:
         e1:7d:5c:ba:4e:f8:5b:0f:10:6f:4d:bf:83:a7:68:0a:37:cc:
         a1:41:82:7c:9d:29:4b:dd:a8:4e:7a:5c:62:91:db:84:32:90:
         0f:69:7c:92:a1:46:ef:3b:b1:21:fb:55:89:dc:98:5b:09:1f:
         36:49:2c:81:7f:d6:f0:7f:7b:27:66:87:9c:ff:f5:e5:6c:10:
         7a:e1:f7:ee:6d:f1:3e:ce:0b:7e:d1:77:3f:51:19:af:2a:08:
         2f:6c:d9:42:3f:5c:a9:24:79:49:97:83:e1:79:38:14:4f:ea:
         f0:20:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:53:35 2025 by rpki-client