Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139382e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3139382e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          VTVRq0FExuBHPGeqfsY/h4hR4D9XW4YaLcEoUxBQ934=
Subject key identifier:   9F:75:BA:31:66:C5:A1:89:36:A7:C8:2B:80:B6:F8:B3:4E:7D:24:78
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       2E3CD29DFB355F8E88438F95EF83BD27083EA960
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139382e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:44 +0000
ROA not before:           Sun 08 Jun 2025 11:19:44 +0000
ROA not after:            Sun 07 Jun 2026 11:24:44 +0000
asID:                     262293
IP address blocks:        177.154.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3c:d2:9d:fb:35:5f:8e:88:43:8f:95:ef:83:bd:27:08:3e:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:44 2025 GMT
            Not After : Jun  7 11:24:44 2026 GMT
        Subject: CN=9F75BA3166C5A18936A7C82B80B6F8B34E7D2478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:72:01:fa:3e:9c:4a:3f:d8:ee:c1:ef:25:
                    12:6e:15:16:aa:2e:c0:af:c4:48:ab:11:d2:2a:dc:
                    e1:89:c5:ec:66:b3:28:3b:d1:7e:e0:9f:c9:1b:b1:
                    e5:09:9a:8a:3b:fb:05:55:ab:61:c5:cf:a9:82:5e:
                    f1:01:7e:7b:19:4a:98:f3:53:b6:79:5e:5b:f3:99:
                    cb:13:b1:56:67:a4:77:ed:4b:62:2d:7f:c8:dc:93:
                    34:d8:ab:79:1d:00:f4:24:ee:10:f0:ac:82:f9:87:
                    64:7e:86:95:0a:7c:8e:25:ac:b7:1c:f3:15:f6:3a:
                    b8:ff:24:ba:50:a7:90:0e:54:9a:75:08:aa:6c:f9:
                    a1:79:cd:70:d6:49:d0:52:54:dc:f7:c3:78:ee:bf:
                    72:43:e6:67:34:cd:08:b3:2a:c7:d7:ec:66:97:bc:
                    2b:3a:6b:4d:6e:17:2a:94:f1:7d:cc:8b:62:a3:26:
                    9b:dc:77:3d:6a:2f:b9:2c:ff:da:15:92:4e:c8:96:
                    c5:33:72:cd:8f:31:55:d2:19:32:02:ce:f6:65:70:
                    b9:b8:df:9d:af:53:c5:a3:0d:d6:1f:7f:f6:69:ef:
                    06:48:83:fe:4f:f0:ef:5e:ba:d3:5b:b7:4a:3b:2b:
                    7d:fc:08:e5:d4:2c:47:2b:9c:f8:43:df:c5:ed:39:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:75:BA:31:66:C5:A1:89:36:A7:C8:2B:80:B6:F8:B3:4E:7D:24:78
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139382e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:05:6d:e2:37:59:75:38:64:89:e7:73:4c:c1:e4:40:a2:8e:
         02:1b:46:6a:52:1c:f1:15:a0:9d:75:6d:df:b6:4e:c6:d2:11:
         ca:20:ab:2b:6e:ed:27:d9:8b:b7:4c:34:3d:9e:55:e2:c5:0a:
         bf:83:25:c2:be:56:0d:46:0c:52:ab:70:eb:96:3f:48:0d:e9:
         52:bf:e0:55:0e:39:14:2d:93:a4:bb:2b:64:30:46:1c:f9:f9:
         d1:44:5e:ca:97:e5:66:be:c6:9c:8a:75:81:1a:03:18:a4:b4:
         bc:a5:df:4f:3b:a7:44:2f:68:91:c1:e4:41:a8:09:6f:9d:20:
         d2:0f:09:18:2c:8f:59:ed:49:82:63:30:d6:4d:21:2a:a6:ca:
         aa:04:b5:29:76:2e:59:fd:9a:7c:ae:79:a2:7b:29:4a:eb:95:
         46:d5:a1:bc:7f:95:05:64:0c:00:73:74:72:07:08:3d:a1:02:
         31:50:56:21:9d:f4:36:ab:a3:25:b5:bc:57:0e:31:53:d6:44:
         1f:70:07:e8:33:ff:bd:0e:a9:da:c6:40:32:c9:30:d6:7f:e8:
         e6:5f:7d:7e:ca:8d:fc:76:65:fe:c1:51:88:a7:1b:8a:6d:94:
         b3:8d:b2:08:00:2a:91:ba:f6:b3:2a:73:3d:e6:6d:fb:23:e7:
         7c:10:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:46:09 2025 by rpki-client