Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa
File:                     3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          EPJEiqkeHeJI8dREAOvVUnemxSdcGv5va4z1XJ0mSUQ=
Subject key identifier:   77:72:B6:2C:C0:8B:DD:3A:DB:C4:3F:92:80:03:E2:AD:6F:EA:1E:C9
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       22059AED7484698DC67115B7720EBF6686EBCA6A
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:46 +0000
ROA not before:           Sun 08 Jun 2025 11:19:46 +0000
ROA not after:            Sun 07 Jun 2026 11:24:46 +0000
asID:                     262293
IP address blocks:        177.154.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:05:9a:ed:74:84:69:8d:c6:71:15:b7:72:0e:bf:66:86:eb:ca:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:46 2025 GMT
            Not After : Jun  7 11:24:46 2026 GMT
        Subject: CN=7772B62CC08BDD3ADBC43F928003E2AD6FEA1EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:26:21:2d:90:d4:30:89:47:7b:92:08:9f:
                    2e:ac:44:94:51:c4:97:a5:95:5f:3a:48:16:43:12:
                    d8:a3:52:57:59:54:10:e8:62:35:d8:73:d2:22:47:
                    64:80:97:d1:19:68:1d:9b:09:c4:af:0d:2b:2d:cf:
                    b0:90:b3:cc:54:c9:69:52:31:ef:b8:54:12:07:25:
                    27:9c:4e:47:fd:38:85:65:a2:fe:f4:d9:62:82:ba:
                    ef:99:cd:d4:16:0f:fd:c8:4a:f7:2a:50:00:02:51:
                    28:f0:c0:2a:32:83:79:f5:2a:49:56:a0:27:e2:0d:
                    c0:cf:72:0e:2a:a1:4a:93:3d:69:ee:22:48:d9:a6:
                    f7:c4:0d:50:d5:8b:e4:65:fd:91:d8:ab:aa:82:ba:
                    4a:cb:f0:c5:87:f0:69:74:00:11:d1:95:2f:e7:b8:
                    69:c6:81:32:5d:4c:02:cc:cf:e1:c0:b6:0d:1b:20:
                    5c:f5:83:f0:67:50:5d:2f:a7:c6:64:63:4b:86:fe:
                    a1:a0:64:25:97:aa:69:1e:19:87:09:c7:c9:3b:ff:
                    88:95:b1:d9:f4:c3:b6:c1:da:61:a9:96:37:2a:a8:
                    4f:a9:2e:f2:aa:46:e6:20:e7:f6:43:b1:0c:5a:c2:
                    5a:8a:d9:ca:cb:3f:ed:24:4d:76:c3:ef:9d:54:60:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:72:B6:2C:C0:8B:DD:3A:DB:C4:3F:92:80:03:E2:AD:6F:EA:1E:C9
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:94:ba:6c:7d:4a:00:9a:4f:90:cd:87:57:33:bd:e5:f4:60:
         2a:ad:5a:e7:09:53:08:10:41:46:95:8e:c1:90:e1:27:ca:ad:
         d0:e4:9e:9c:d9:8f:ce:37:c1:9c:4e:48:a7:2c:f0:38:f4:8c:
         f1:5a:d9:0f:93:83:20:13:25:73:28:83:dd:20:55:62:fd:e7:
         1d:6e:2c:23:c4:88:80:c4:ab:07:24:f1:c1:70:38:98:7e:a0:
         12:d0:c4:bd:de:49:84:25:b7:f7:0f:80:8b:4a:38:1d:b9:3b:
         2a:74:2c:d4:12:9c:8b:20:08:6d:49:1d:65:1c:39:1b:b8:81:
         81:93:22:bb:6d:c1:cd:7b:01:80:fd:54:9d:32:f2:2b:26:39:
         93:12:ea:cd:6e:f0:e8:39:59:07:00:e4:46:fa:5a:9d:d1:ee:
         5b:4c:89:32:7b:9d:1b:64:f8:ac:d3:89:bb:a7:3c:42:b5:a6:
         bc:eb:57:b9:06:ff:8c:29:ca:85:bf:42:47:19:af:5c:4a:16:
         b5:5a:d4:1d:4c:43:3b:51:d6:37:05:ce:f7:c2:69:72:c1:96:
         33:c0:a2:f4:65:9c:b6:a0:a7:c6:76:65:d6:7e:be:aa:85:df:
         12:35:d9:d8:46:0e:1a:33:c1:4e:97:48:37:e1:30:66:a9:b0:
         73:e7:ce:1c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIgWa7XSEaY3GcRW3cg6/ZobrymowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDZaFw0yNjA2MDcxMTI0NDZaMDMxMTAvBgNV
BAMTKDc3NzJCNjJDQzA4QkREM0FEQkM0M0Y5MjgwMDNFMkFENkZFQTFFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPiYhLZDUMIlHe5IIny6sRJRR
xJellV86SBZDEtijUldZVBDoYjXYc9IiR2SAl9EZaB2bCcSvDSstz7CQs8xUyWlS
Me+4VBIHJSecTkf9OIVlov702WKCuu+ZzdQWD/3ISvcqUAACUSjwwCoyg3n1KklW
oCfiDcDPcg4qoUqTPWnuIkjZpvfEDVDVi+Rl/ZHYq6qCukrL8MWH8Gl0ABHRlS/n
uGnGgTJdTALMz+HAtg0bIFz1g/BnUF0vp8ZkY0uG/qGgZCWXqmkeGYcJx8k7/4iV
sdn0w7bB2mGpljcqqE+pLvKqRuYg5/ZDsQxawlqK2crLP+0kTXbD751UYOR/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUd3K2LMCL3TrbxD+SgAPirW/qHskwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGawDANBgkqhkiG9w0BAQsFAAOCAQEANJS6
bH1KAJpPkM2HVzO95fRgKq1a5wlTCBBBRpWOwZDhJ8qt0OSenNmPzjfBnE5Ipyzw
OPSM8VrZD5ODIBMlcyiD3SBVYv3nHW4sI8SIgMSrByTxwXA4mH6gEtDEvd5JhCW3
9w+Ai0o4Hbk7KnQs1BKciyAIbUkdZRw5G7iBgZMiu23BzXsBgP1UnTLyKyY5kxLq
zW7w6DlZBwDkRvpandHuW0yJMnudG2T4rNOJu6c8QrWmvOtXuQb/jCnKhb9CRxmv
XEoWtVrUHUxDO1HWNwXO98JpcsGWM8Ci9GWctqCnxnZl1n6+qoXfEjXZ2EYOGjPB
TpdIN+EwZqmwc+fOHA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 21:47:55 2025 by rpki-client