Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230382e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3230382e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          IqYI+OegdnrgGq7Yyiwk0c0RTVpPjaiR8WoAhhiD7UA=
Subject key identifier:   12:EC:D5:9B:2A:F4:92:5B:DC:AF:26:DA:0C:18:34:E4:2D:3F:99:63
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       3416074221B08180ED7F9BE996CC68116E6429FD
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230382e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:45 +0000
ROA not before:           Sun 08 Jun 2025 11:19:45 +0000
ROA not after:            Sun 07 Jun 2026 11:24:45 +0000
asID:                     262293
IP address blocks:        177.154.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:07:42:21:b0:81:80:ed:7f:9b:e9:96:cc:68:11:6e:64:29:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:45 2025 GMT
            Not After : Jun  7 11:24:45 2026 GMT
        Subject: CN=12ECD59B2AF4925BDCAF26DA0C1834E42D3F9963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:7b:53:93:ef:32:88:3f:e8:28:9d:c4:ca:
                    06:83:9e:69:6e:86:6f:bb:29:f0:ff:0b:bc:d8:e7:
                    53:8b:f0:14:31:4d:c2:51:36:57:be:48:bf:b2:db:
                    bd:1c:e6:b5:e4:1a:b1:af:11:08:e4:17:31:85:a4:
                    ec:27:76:f7:fe:a9:8a:c4:81:d3:e3:7e:ba:ce:5e:
                    21:19:98:cd:c7:43:8f:41:6d:1b:1d:ce:4a:e3:14:
                    58:f8:93:27:2f:97:50:bd:72:3e:9f:e8:f5:ed:d1:
                    52:aa:58:de:f3:29:92:86:24:23:93:59:6b:33:42:
                    e6:95:a8:01:42:7a:86:3b:6e:03:17:0d:c9:cc:81:
                    32:62:be:43:76:5a:ae:c5:05:9c:c3:c1:c0:d9:42:
                    35:86:e7:76:d7:ea:86:14:83:00:2b:d6:8c:ca:a3:
                    78:bb:dd:67:0f:e0:c8:f8:d9:fd:04:b5:ce:cd:03:
                    57:b0:c6:13:45:0c:ff:20:d8:4a:c1:ea:0f:cb:c2:
                    ae:ad:ba:4b:82:06:06:b3:9c:96:ad:b5:ac:ce:48:
                    8f:f0:dc:65:14:28:f2:8e:81:00:f6:a1:93:a8:79:
                    e3:70:e9:91:1b:f0:16:55:2e:56:b8:6f:80:96:f1:
                    9a:85:b1:42:8a:e2:89:8b:5f:da:76:9c:5e:47:53:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EC:D5:9B:2A:F4:92:5B:DC:AF:26:DA:0C:18:34:E4:2D:3F:99:63
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3230382e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:60:e4:b0:17:01:2c:de:95:cf:03:2f:a2:e8:48:4c:b7:
         aa:ee:37:32:b0:9d:f6:ae:ce:ff:25:94:08:9e:ac:f1:df:6c:
         8d:11:12:00:ba:49:b2:20:aa:a4:4c:f0:42:bc:af:20:0a:aa:
         38:6a:19:02:53:c8:c5:37:41:3e:2e:ac:79:d2:e3:31:1a:a1:
         3a:21:42:98:e4:35:bd:1e:be:57:d1:bf:68:71:dd:02:42:96:
         63:ee:6d:cd:7f:69:de:ef:d3:47:ed:6f:47:87:21:15:e4:9e:
         a9:ae:d7:bb:f7:0d:59:ee:8b:ad:b3:53:06:52:76:2d:ec:75:
         76:0a:5c:44:7d:0b:9a:d2:b4:96:ad:2a:03:85:fa:c1:47:8c:
         50:89:06:90:d5:52:11:bc:44:b9:dd:ed:bd:8f:73:ed:8b:33:
         9c:fc:aa:dd:2e:bb:f2:49:c3:3f:95:88:20:37:19:75:c1:c5:
         65:a7:b6:fb:06:a3:a3:98:19:e8:22:f6:bc:41:cd:36:31:24:
         cf:52:16:f1:e4:d5:f2:cf:a9:b5:a9:74:46:36:49:df:68:2a:
         3c:30:4d:ed:34:c9:16:8d:59:5c:38:91:9e:ee:a3:d4:2a:03:
         b2:71:01:b3:7f:4e:cd:d9:38:51:e2:6b:eb:01:cc:2f:39:e4:
         89:be:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:39:50 2025 by rpki-client