Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230362e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3230362e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          cSdp6ck0gxJs6NZqLE4VAI+aNbCwK1oCkoqkxclsszQ=
Subject key identifier:   B6:C3:5D:4B:C9:28:C7:E4:B5:FD:A0:20:BB:4D:8D:87:84:A6:AB:27
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       587F07909E9FE560E5ECD93D0173F6FC3B97572B
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230362e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:43 +0000
ROA not before:           Sun 08 Jun 2025 11:19:43 +0000
ROA not after:            Sun 07 Jun 2026 11:24:43 +0000
asID:                     262293
IP address blocks:        177.154.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:07:90:9e:9f:e5:60:e5:ec:d9:3d:01:73:f6:fc:3b:97:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:43 2025 GMT
            Not After : Jun  7 11:24:43 2026 GMT
        Subject: CN=B6C35D4BC928C7E4B5FDA020BB4D8D8784A6AB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:0e:5d:75:d7:f7:66:cc:3e:b7:1d:fb:32:
                    a5:c2:43:f3:e3:06:2a:07:c7:47:35:01:cd:12:c8:
                    16:01:7b:d0:b5:b8:16:97:33:4e:27:ed:2b:8c:40:
                    f0:bf:70:cd:e9:44:d2:a4:6a:02:9f:a5:08:16:d2:
                    d3:2e:42:08:f1:5e:0e:70:28:28:ba:69:3d:93:16:
                    98:2d:a1:08:8a:9e:d8:0d:d0:42:df:80:04:65:8c:
                    a3:ce:fb:14:e4:25:a1:a3:03:d5:54:5f:4b:85:bb:
                    dc:56:a5:b5:18:7e:df:27:a6:42:ce:67:d1:fe:b0:
                    37:ef:f3:9c:1a:09:5b:fe:5a:70:80:71:a7:25:a6:
                    07:5a:72:c2:f8:08:54:2d:ed:d6:c5:31:95:54:25:
                    e7:1c:70:f4:cc:13:86:1a:44:75:d8:a2:a2:65:ca:
                    00:3e:bf:0c:56:68:30:c6:4f:cb:ad:8d:7b:d1:90:
                    7c:cc:7d:95:01:54:ea:bb:46:86:50:9d:c8:62:a3:
                    cb:e9:d0:39:86:b3:9d:17:74:94:35:15:b8:26:87:
                    ce:64:47:17:5a:7d:d6:47:9b:e0:b6:9f:bf:65:4e:
                    20:0e:65:e9:25:d3:f7:15:23:0f:83:31:cc:62:26:
                    da:72:1f:2b:3f:1b:5a:a4:05:8c:fd:ee:83:74:29:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:5D:4B:C9:28:C7:E4:B5:FD:A0:20:BB:4D:8D:87:84:A6:AB:27
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230362e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:47:eb:5d:9c:ad:7a:6a:63:d7:bf:52:dc:33:9a:b8:17:
         42:d7:30:48:d4:61:e4:99:ad:a6:6e:81:71:90:05:19:f8:88:
         e4:c4:9a:0e:b0:08:b8:1c:46:01:df:cd:82:dc:d3:d9:f2:c5:
         ad:33:29:d8:8a:1c:31:55:0f:9d:c8:83:1f:3e:b1:5d:65:86:
         cc:11:4e:ec:db:87:81:ef:08:8c:ef:26:f5:20:17:db:22:52:
         37:65:39:71:ef:1c:af:bb:e5:6c:e4:15:e0:ee:ef:bc:a0:75:
         ee:f3:ff:d8:b1:9c:c9:da:98:a6:71:8b:8f:e5:38:cb:43:3c:
         85:2d:11:cf:a4:03:97:cb:0a:ad:6f:31:d9:74:5d:a2:ca:68:
         91:c8:71:ea:a3:1a:8b:74:c7:9b:ce:52:c1:d3:10:57:01:78:
         9e:e9:24:57:25:2a:b8:7b:42:39:61:fa:24:9e:74:8d:4b:ca:
         fe:7c:f6:a1:4b:84:d9:9b:32:d8:07:dc:4d:25:77:f8:79:be:
         10:da:db:4d:84:7f:9e:42:f3:b8:63:2d:a0:1f:57:d1:fc:da:
         13:2e:f0:89:b9:88:39:4f:25:3b:29:11:49:5b:1e:d1:dc:f2:
         b8:71:00:d5:6d:38:11:f0:83:8a:0f:4a:ee:e3:fe:7a:00:ae:
         c3:b7:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:05:04 2025 by rpki-client