Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          j8GhQxHX4aBmSzfwsuAOPfqPY//XyM458Z6ePpAi0PI=
Subject key identifier:   26:20:AC:4D:4C:5F:1E:50:DC:54:AF:0F:D2:0D:43:3A:14:3B:E8:41
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       53FDD04965EB6072A4CD37F9270BE976FA954F07
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:46 +0000
ROA not before:           Sun 08 Jun 2025 11:19:46 +0000
ROA not after:            Sun 07 Jun 2026 11:24:46 +0000
asID:                     262293
IP address blocks:        177.154.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:d0:49:65:eb:60:72:a4:cd:37:f9:27:0b:e9:76:fa:95:4f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:46 2025 GMT
            Not After : Jun  7 11:24:46 2026 GMT
        Subject: CN=2620AC4D4C5F1E50DC54AF0FD20D433A143BE841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:48:52:91:d5:78:53:e8:f6:b8:08:c5:04:
                    10:ac:53:f9:a2:e6:3e:8a:71:43:0f:1d:bd:e6:d3:
                    fa:d7:e2:e2:c2:9a:bf:79:ff:85:2d:2f:2b:0a:e8:
                    d1:7e:e9:6c:09:24:02:69:5b:54:26:03:91:78:f3:
                    a9:67:cc:1e:71:22:f3:09:02:aa:ab:08:cd:50:a3:
                    78:e3:5a:34:4e:8a:c5:f8:0e:c0:28:78:85:d3:52:
                    ed:5d:46:94:cc:dc:05:4c:30:fc:32:51:2f:6a:91:
                    9f:eb:b5:bd:26:24:cc:f2:32:77:91:85:6e:55:d0:
                    46:64:49:be:50:ee:9e:d6:64:47:ae:3d:2d:fe:d0:
                    32:d5:42:29:50:65:e3:3f:5c:7f:64:88:df:9e:c5:
                    be:eb:11:7a:4a:f1:18:6a:54:97:de:73:fc:70:eb:
                    cb:81:3b:2f:0b:b4:68:a9:1d:26:75:7f:b5:d1:74:
                    55:5d:f2:fb:ac:24:32:e5:40:08:af:cc:65:b8:e3:
                    0d:67:6d:71:50:20:d4:23:26:5b:eb:11:bd:b3:a6:
                    fa:b3:2f:bd:05:2c:64:f9:7e:e6:fa:09:82:0f:9f:
                    05:b2:25:03:fd:86:ee:09:43:bd:2d:eb:be:d6:43:
                    b2:0e:47:42:2b:fd:76:eb:3f:ef:ee:eb:11:3e:e9:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:AC:4D:4C:5F:1E:50:DC:54:AF:0F:D2:0D:43:3A:14:3B:E8:41
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:0c:d8:da:ec:a1:95:67:a5:03:90:38:12:8c:8e:63:44:
         fc:f0:c1:c6:92:06:18:6e:fb:ef:26:73:d5:f1:5e:70:5f:12:
         b1:ed:b6:85:27:90:bb:16:4f:a8:ac:4d:ee:af:6d:af:7d:6a:
         75:b6:49:95:31:2d:c1:78:32:ca:d2:68:d4:ad:8e:30:0e:eb:
         91:4a:a3:80:54:4f:71:30:8d:de:dc:b4:a0:1c:40:b4:a1:ff:
         93:77:94:76:02:4d:f2:bb:7c:1a:5d:8d:28:36:0a:66:d1:b5:
         ae:bf:7b:6b:4b:84:ce:e1:8d:50:a7:cd:d8:2b:70:43:37:2b:
         45:d3:ef:29:69:b0:22:54:d7:7b:d7:82:10:bf:f2:34:36:39:
         04:01:62:77:2f:84:10:a1:cc:d9:b8:b7:ff:92:22:1b:49:18:
         db:74:29:94:32:52:4c:b4:6f:32:14:bd:d7:de:69:47:c9:23:
         c1:e6:be:06:c3:de:df:35:e0:64:d9:e2:1f:3b:c9:2b:d7:1e:
         a4:6d:de:77:2d:c8:2f:54:18:57:4e:19:3c:7e:fd:0d:f2:5e:
         0b:e5:c6:d0:a1:38:6b:14:47:49:cc:4a:78:04:12:84:48:65:
         a5:fe:99:c0:01:ba:d1:a0:9e:6d:4b:2f:2e:1f:f9:6b:d4:55:
         e2:01:b7:c6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU/3QSWXrYHKkzTf5JwvpdvqVTwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDZaFw0yNjA2MDcxMTI0NDZaMDMxMTAvBgNV
BAMTKDI2MjBBQzRENEM1RjFFNTBEQzU0QUYwRkQyMEQ0MzNBMTQzQkU4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVyUhSkdV4U+j2uAjFBBCsU/mi
5j6KcUMPHb3m0/rX4uLCmr95/4UtLysK6NF+6WwJJAJpW1QmA5F486lnzB5xIvMJ
AqqrCM1Qo3jjWjROisX4DsAoeIXTUu1dRpTM3AVMMPwyUS9qkZ/rtb0mJMzyMneR
hW5V0EZkSb5Q7p7WZEeuPS3+0DLVQilQZeM/XH9kiN+exb7rEXpK8RhqVJfec/xw
68uBOy8LtGipHSZ1f7XRdFVd8vusJDLlQAivzGW44w1nbXFQINQjJlvrEb2zpvqz
L70FLGT5fub6CYIPnwWyJQP9hu4JQ70t677WQ7IOR0Ir/XbrP+/u6xE+6cGZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJiCsTUxfHlDcVK8P0g1DOhQ76EEwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMyMzAzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGayjANBgkqhkiG9w0BAQsFAAOCAQEAHjIM
2NrsoZVnpQOQOBKMjmNE/PDBxpIGGG777yZz1fFecF8Sse22hSeQuxZPqKxN7q9t
r31qdbZJlTEtwXgyytJo1K2OMA7rkUqjgFRPcTCN3ty0oBxAtKH/k3eUdgJN8rt8
Gl2NKDYKZtG1rr97a0uEzuGNUKfN2CtwQzcrRdPvKWmwIlTXe9eCEL/yNDY5BAFi
dy+EEKHM2bi3/5IiG0kY23QplDJSTLRvMhS9195pR8kjwea+BsPe3zXgZNniHzvJ
K9cepG3edy3IL1QYV04ZPH79DfJeC+XG0KE4axRHScxKeAQShEhlpf6ZwAG60aCe
bUsvLh/5a9RV4gG3xg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:33 2025 by rpki-client