Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          ur2VbjqQ2IHchnDUIvtE7oz9ZxUHlj64LDLlaCSZrtU=
Subject key identifier:   6F:01:A6:CA:3D:0E:80:E8:89:8D:02:9B:94:55:39:89:16:71:65:62
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       3999FFBD7EEB586E7E9D86787FC8C94F11CD467E
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:44 +0000
ROA not before:           Sun 08 Jun 2025 11:19:44 +0000
ROA not after:            Sun 07 Jun 2026 11:24:44 +0000
asID:                     262293
IP address blocks:        177.154.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:99:ff:bd:7e:eb:58:6e:7e:9d:86:78:7f:c8:c9:4f:11:cd:46:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:44 2025 GMT
            Not After : Jun  7 11:24:44 2026 GMT
        Subject: CN=6F01A6CA3D0E80E8898D029B9455398916716562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:8a:a6:00:77:f3:11:08:70:7b:6d:a9:b0:
                    29:a3:a2:66:7e:26:1c:e6:08:b7:e7:7f:02:b4:da:
                    5e:70:e0:36:c6:8b:3f:d4:85:82:5e:d7:0e:6a:e1:
                    42:66:79:e9:bd:09:5f:51:d9:4f:d5:a1:0c:61:a4:
                    0e:0e:b5:4e:61:91:63:5c:13:38:0b:85:83:e4:cd:
                    cd:87:b1:3d:d2:be:f8:6d:3d:25:75:cf:e2:08:fe:
                    f6:6a:81:25:d9:8f:ca:73:a5:b4:76:eb:7e:e1:37:
                    32:30:4a:2d:e7:3a:a1:28:38:f1:09:ed:66:f3:54:
                    71:04:c0:ad:cf:6e:a1:33:fe:f9:12:19:50:2f:fb:
                    bf:e8:0c:78:9f:4e:58:e0:e5:c6:4f:89:d9:85:a8:
                    4e:ea:32:38:e8:8d:27:9c:c3:f2:9a:73:b2:87:24:
                    26:c3:78:4f:0e:80:62:32:bc:f1:6d:05:24:c5:08:
                    ad:a1:11:2c:65:c1:97:35:aa:20:6c:b4:d7:47:9b:
                    e5:88:36:c9:68:5a:dc:5c:83:23:f1:6f:f4:10:51:
                    a1:df:23:76:b3:47:13:77:01:cb:32:9f:1e:7c:c3:
                    8d:57:fd:ba:e7:13:6d:b8:02:90:8f:25:c9:39:8a:
                    cf:8f:df:dd:86:54:fc:1d:33:ac:eb:59:fe:18:88:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:A6:CA:3D:0E:80:E8:89:8D:02:9B:94:55:39:89:16:71:65:62
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139362e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:94:c7:34:fe:d1:0d:ba:02:0b:2d:6a:33:c2:66:84:c8:26:
         8e:0f:94:70:3a:a6:f6:62:a3:6d:f4:ee:f6:9a:87:d4:78:a0:
         7c:58:c6:09:1b:dc:2b:3e:28:cc:57:62:95:7e:ac:68:a5:96:
         19:d4:e8:40:f0:01:94:3b:f2:49:eb:07:be:a1:d4:df:64:77:
         3c:3f:f6:f1:ae:b1:9f:c2:d8:b0:3f:42:e6:27:a4:99:b1:e9:
         9a:2f:15:60:f2:66:00:4f:2b:50:1e:d7:fe:7b:57:ab:38:f5:
         ed:6e:ad:96:73:fb:09:f5:9f:e5:ba:a1:7c:12:da:21:a4:91:
         de:51:18:16:9a:a7:40:16:24:f8:9c:49:e3:28:7a:c3:79:95:
         09:a0:9a:65:b3:34:a2:f6:46:94:d1:35:b6:53:d4:85:85:93:
         97:85:36:99:0c:5b:d0:d5:4a:98:56:9a:59:a1:70:c9:a7:e6:
         9c:77:2c:11:ad:bf:9e:85:b4:4d:13:d3:d0:c9:7c:5f:05:86:
         d1:2a:a7:0b:f6:53:76:93:26:43:50:9c:97:e1:59:66:8b:e3:
         a2:94:fd:23:84:1f:0b:a9:63:0d:68:af:7d:54:a1:86:76:42:
         c7:35:b3:c3:34:e9:25:30:13:10:ae:e6:fe:86:0b:94:63:45:
         0b:24:50:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOZn/vX7rWG5+nYZ4f8jJTxHNRn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDRaFw0yNjA2MDcxMTI0NDRaMDMxMTAvBgNV
BAMTKDZGMDFBNkNBM0QwRTgwRTg4OThEMDI5Qjk0NTUzOTg5MTY3MTY1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpcYqmAHfzEQhwe22psCmjomZ+
JhzmCLfnfwK02l5w4DbGiz/UhYJe1w5q4UJmeem9CV9R2U/VoQxhpA4OtU5hkWNc
EzgLhYPkzc2HsT3SvvhtPSV1z+II/vZqgSXZj8pzpbR2637hNzIwSi3nOqEoOPEJ
7WbzVHEEwK3PbqEz/vkSGVAv+7/oDHifTljg5cZPidmFqE7qMjjojSecw/Kac7KH
JCbDeE8OgGIyvPFtBSTFCK2hESxlwZc1qiBstNdHm+WINsloWtxcgyPxb/QQUaHf
I3azRxN3Acsynx58w41X/brnE224ApCPJck5is+P392GVPwdM6zrWf4YiOFXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbwGmyj0OgOiJjQKblFU5iRZxZWIwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGaxDANBgkqhkiG9w0BAQsFAAOCAQEAmpTH
NP7RDboCCy1qM8JmhMgmjg+UcDqm9mKjbfTu9pqH1HigfFjGCRvcKz4ozFdilX6s
aKWWGdToQPABlDvySesHvqHU32R3PD/28a6xn8LYsD9C5iekmbHpmi8VYPJmAE8r
UB7X/ntXqzj17W6tlnP7CfWf5bqhfBLaIaSR3lEYFpqnQBYk+JxJ4yh6w3mVCaCa
ZbM0ovZGlNE1tlPUhYWTl4U2mQxb0NVKmFaaWaFwyafmnHcsEa2/noW0TRPT0Ml8
XwWG0SqnC/ZTdpMmQ1Ccl+FZZovjopT9I4QfC6ljDWivfVShhnZCxzWzwzTpJTAT
EK7m/oYLlGNFCyRQvA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:08:36 2025 by rpki-client