Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f31392d3139203d3e20323632323933.roa
File:                     3137372e3135342e3139322e302f31392d3139203d3e20323632323933.roa (raw, json)
Hash identifier:          QeONyzfORMNk0rRn85uVXujM2eHSHbVDBTgLhgi0SVE=
Subject key identifier:   00:94:51:98:1A:7B:E4:41:E9:57:3F:6C:F1:7C:33:82:37:04:D7:C1
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       6CC320296386DD041C0B435E3C1327F81E06143C
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f31392d3139203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:47 +0000
ROA not before:           Sun 08 Jun 2025 11:19:47 +0000
ROA not after:            Sun 07 Jun 2026 11:24:47 +0000
asID:                     262293
IP address blocks:        177.154.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:20:29:63:86:dd:04:1c:0b:43:5e:3c:13:27:f8:1e:06:14:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:47 2025 GMT
            Not After : Jun  7 11:24:47 2026 GMT
        Subject: CN=009451981A7BE441E9573F6CF17C33823704D7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:25:9e:7c:6e:f2:7d:5d:f1:b6:82:60:7e:
                    d7:25:e8:a8:69:b8:77:c0:d2:b4:27:0f:de:6e:95:
                    ee:e4:aa:3e:71:8a:ce:d7:fd:5f:75:2a:3e:dc:de:
                    8c:23:45:b9:f0:cf:02:5a:c4:d4:f3:69:0a:2b:04:
                    9c:67:f5:8c:cf:9a:48:83:e5:0b:5e:b4:cb:a0:28:
                    4b:44:25:46:9f:57:ab:85:ec:79:9b:fb:23:56:b5:
                    cd:86:5f:f1:00:b7:60:07:e7:73:21:2d:9d:88:b7:
                    ac:7e:6f:46:f7:2e:82:9d:f3:f5:d9:62:9e:01:2a:
                    f1:2f:72:ef:4a:b6:db:f8:51:ea:59:83:aa:76:41:
                    9c:1e:8c:4c:d5:7a:22:dd:06:41:15:36:14:ca:58:
                    40:e8:54:ea:10:a8:e5:63:01:e4:b6:3e:4c:38:6c:
                    8c:cb:dd:b8:fb:07:2a:0d:8a:a0:1f:45:29:52:fe:
                    3e:b2:36:01:45:d0:f2:32:99:14:e6:fd:10:59:d4:
                    f1:80:bd:1a:2a:22:c4:04:ea:34:b9:ad:89:17:05:
                    02:6d:9c:8d:1e:6f:91:12:b9:d8:53:6b:12:5e:06:
                    64:e1:97:b4:f1:18:8c:fd:6e:7a:b2:e9:97:f1:8f:
                    b5:b6:fa:a2:45:62:63:bd:26:56:3f:a2:2b:7b:4c:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:51:98:1A:7B:E4:41:E9:57:3F:6C:F1:7C:33:82:37:04:D7:C1
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f31392d3139203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:54:49:02:ba:f6:61:0e:b1:19:03:47:c5:c5:af:8c:a7:
         67:a6:4d:ce:76:c9:cf:9b:8f:85:7c:a0:cc:72:5f:87:3f:6c:
         b6:f1:2d:c1:61:44:b7:16:1a:f7:6a:1c:4b:bb:f1:86:fd:b0:
         a9:c2:c3:6f:e6:65:fc:6b:4f:9a:3c:f0:65:f2:33:57:85:fe:
         b7:2e:1a:5b:38:e0:fe:38:47:04:38:65:b6:41:03:7a:eb:7c:
         aa:96:1b:df:c8:59:da:14:52:f5:10:60:dc:76:98:20:af:4b:
         13:22:aa:24:a0:37:83:f6:22:5c:58:f0:18:50:60:05:29:e9:
         8d:e7:70:97:02:d9:a2:66:30:5c:98:a4:bc:60:4f:17:bc:d1:
         ee:83:24:6d:48:c6:92:4d:ab:42:cc:ea:8c:c1:c4:3b:cd:f6:
         04:ee:4f:7d:16:7a:f7:a1:a2:a1:ac:25:3a:de:b8:36:ca:67:
         7f:d9:f1:61:e1:c1:20:43:8c:e4:2d:a7:fb:f9:b1:8a:b1:e6:
         9a:94:fb:99:3e:b5:4a:4f:f0:99:37:1d:7b:fd:05:a5:72:18:
         bb:6f:e9:44:eb:fa:d9:c2:91:d8:ab:ed:27:54:9b:8e:40:dc:
         5a:72:b8:6d:62:26:02:cd:a8:79:dc:21:ef:fb:ff:5b:38:6f:
         15:8d:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:39 2025 by rpki-client