Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          wTRfcrLspHzpIVq14lrbh6NyX+sn/23iwd+Mu+fPxZs=
Subject key identifier:   39:7F:A1:04:1F:D1:E5:A5:41:B7:A7:3B:9B:EC:C6:E3:21:A3:7D:97
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       4E8BFC2743280D75A163DD50B4032DFDFDCC2048
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:43 +0000
ROA not before:           Sun 08 Jun 2025 11:19:43 +0000
ROA not after:            Sun 07 Jun 2026 11:24:43 +0000
asID:                     262293
IP address blocks:        177.154.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8b:fc:27:43:28:0d:75:a1:63:dd:50:b4:03:2d:fd:fd:cc:20:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:43 2025 GMT
            Not After : Jun  7 11:24:43 2026 GMT
        Subject: CN=397FA1041FD1E5A541B7A73B9BECC6E321A37D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:e8:d0:43:25:73:e3:d8:49:d3:35:bf:10:
                    c6:37:49:ed:39:a9:01:60:b4:11:a4:e6:bc:4b:87:
                    66:9d:67:de:d7:84:67:bc:10:2a:2f:d9:d0:0f:85:
                    f3:b3:ef:75:81:f9:64:8b:3e:33:15:04:b2:99:11:
                    b2:a9:4b:2c:0e:1a:e8:12:c2:0c:bb:e2:45:e7:8a:
                    6f:79:78:eb:f0:e2:d7:88:fb:71:67:8a:04:0c:69:
                    3b:52:1a:12:c3:f2:da:c3:ef:64:0a:97:12:c7:52:
                    d6:50:a4:aa:af:ab:85:90:1d:51:d7:f9:ce:07:db:
                    1a:e3:9d:de:0e:6f:72:c3:5f:de:d7:81:71:95:83:
                    76:a4:2c:ac:21:b5:7c:cb:fa:ff:16:06:b7:aa:59:
                    30:b6:61:52:9f:73:64:7a:b4:55:5c:f3:57:8c:09:
                    fe:33:8b:97:70:1a:b5:69:bb:8b:1e:31:80:2a:23:
                    2b:c4:26:c9:5f:11:a1:97:e0:71:87:d3:34:8d:17:
                    80:1b:f7:4e:f8:7a:fc:1b:7e:77:66:8a:b5:a4:81:
                    aa:05:4c:10:7b:ca:68:19:52:21:8b:df:75:e2:7f:
                    58:f0:2f:b1:bb:18:40:6d:46:58:b8:c0:55:c5:8f:
                    a7:4e:53:fa:60:d8:de:59:5f:7b:c1:82:a1:04:59:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:A1:04:1F:D1:E5:A5:41:B7:A7:3B:9B:EC:C6:E3:21:A3:7D:97
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230302e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:48:d6:c6:4f:b5:8e:eb:9a:e3:3c:c7:f0:db:a1:3e:2f:cb:
         63:81:95:80:51:22:5c:c5:a0:ac:c7:38:2d:de:e8:de:a6:db:
         6d:aa:b6:93:b5:db:f8:95:32:22:48:86:08:1e:50:78:f9:ad:
         1c:6a:54:2f:42:4e:f9:91:bd:6f:d3:d4:af:ff:a4:0c:db:37:
         07:77:72:cd:84:3a:2e:57:a4:45:4a:d1:a2:c5:37:63:71:ae:
         46:c7:88:71:30:a4:31:ab:00:9f:20:f3:4c:38:b5:f4:da:29:
         2e:c8:1a:7a:77:7e:62:4a:fd:59:d9:ff:f9:3d:cf:5c:3d:b2:
         f5:70:39:34:f5:82:08:88:dd:e1:cb:32:3f:bd:29:15:2d:55:
         e2:0c:fd:6d:f1:43:24:d1:74:69:d0:69:f5:bb:6d:5a:81:f4:
         1f:17:28:85:dc:4d:b9:e8:80:6e:5c:5e:ba:56:69:ad:da:2d:
         a2:a0:c9:7e:89:72:29:db:8d:9a:3c:ec:36:19:12:e6:63:ba:
         eb:54:65:3d:19:f7:b3:d4:2b:66:cd:e5:0d:5c:7c:42:9f:8b:
         89:2d:be:8c:8c:0f:a1:63:4c:0c:b1:f4:8b:63:30:d5:94:af:
         5d:23:ce:db:ab:c7:31:9f:41:dd:98:4b:9c:b1:e6:3c:82:8b:
         ae:a8:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:02:19 2025 by rpki-client