Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32322d3232203d3e20323632323933.roa
File:                     3137372e3135342e3231322e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          NgJDGamZVhGai0XPfvuDFePtIGY1wigpCpwJ+fOj9cs=
Subject key identifier:   5F:B1:B8:5A:7A:2C:9C:DA:8D:88:84:89:A3:E0:AA:06:FF:A9:7C:79
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       0437D3341F417DEFDDAFFB727BF6F7B146BCF380
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:49 +0000
ROA not before:           Sun 08 Jun 2025 11:19:49 +0000
ROA not after:            Sun 07 Jun 2026 11:24:49 +0000
asID:                     262293
IP address blocks:        177.154.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:37:d3:34:1f:41:7d:ef:dd:af:fb:72:7b:f6:f7:b1:46:bc:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:49 2025 GMT
            Not After : Jun  7 11:24:49 2026 GMT
        Subject: CN=5FB1B85A7A2C9CDA8D888489A3E0AA06FFA97C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:40:aa:a1:c3:00:8d:55:e4:cb:b1:e6:5f:
                    5f:25:4d:ba:49:cf:d0:4a:99:c2:87:f3:3e:25:f2:
                    0a:0a:85:1b:91:df:3a:c4:5f:45:ea:cb:d8:eb:a9:
                    71:57:1f:6d:3f:fd:dc:1d:a8:19:de:ad:8a:fb:ad:
                    83:38:87:aa:84:56:7c:d5:d5:9e:8b:b3:db:d8:31:
                    da:e8:a2:a2:4a:19:18:53:01:50:f6:1d:17:07:e0:
                    25:13:78:b2:0e:22:33:10:3f:39:de:f1:0c:17:cb:
                    76:3b:e8:5e:ce:16:ef:5b:10:2e:f5:eb:7f:7e:69:
                    23:16:13:25:e9:d4:05:5c:10:2c:dc:05:b4:18:09:
                    6c:57:2f:5c:3b:4e:db:e8:36:5e:3c:ff:fd:b7:f9:
                    1f:74:62:29:41:c0:3d:f8:e8:f0:84:d1:f3:81:ce:
                    30:b9:aa:ea:ea:23:46:9d:ef:61:23:87:48:f8:9d:
                    ba:1a:2d:0f:f8:4c:c8:fb:1b:54:4a:a7:f5:59:2c:
                    96:e5:be:a3:e6:a3:f3:30:aa:73:cf:db:9a:26:c0:
                    b6:ea:82:6b:aa:ff:d6:9d:71:20:2c:8f:f5:05:75:
                    eb:ad:99:5d:33:db:9c:8b:5b:19:57:db:3e:80:7c:
                    a5:22:ab:2a:c1:43:d0:12:e3:00:2c:2d:1f:4b:51:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B1:B8:5A:7A:2C:9C:DA:8D:88:84:89:A3:E0:AA:06:FF:A9:7C:79
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:68:ae:64:15:96:0b:fa:08:d9:55:66:7e:05:c8:29:2f:
         5f:9d:ec:c4:e7:05:3a:e0:88:0b:f3:b5:99:b0:4b:f0:29:6f:
         f3:e8:68:90:fb:fe:05:68:f4:f4:20:78:62:47:99:e1:69:92:
         88:4f:96:55:29:b9:41:ed:ef:34:42:62:da:77:41:d0:c8:6f:
         2c:70:c2:2f:a4:63:76:51:af:b1:65:79:5c:d9:18:81:31:47:
         d2:bd:5b:b1:dc:4b:da:58:72:e7:02:44:54:99:5b:25:62:dd:
         d2:f6:04:65:b1:16:83:34:97:99:91:03:59:90:b8:9b:c6:5a:
         ab:56:dc:ac:00:ce:9a:39:1b:44:14:6e:20:b3:32:02:eb:d0:
         d2:63:57:4a:5a:9e:a9:a5:ea:93:1f:db:3a:ab:f3:e5:bb:ed:
         0a:61:cb:7b:0c:cf:35:a2:39:51:3b:e2:17:85:a7:54:36:f0:
         1c:26:f1:11:3c:25:f4:e2:19:d5:d3:8b:f6:3e:50:c0:c7:4f:
         53:bd:3a:dc:fe:a0:6e:3b:9b:d3:ef:c7:54:65:5f:30:2e:54:
         41:7e:0e:36:f0:1a:94:83:dc:2b:9a:c2:05:6a:be:3b:6c:b5:
         95:c6:24:51:32:a5:b7:fc:69:3e:dd:e1:28:2a:94:21:f7:45:
         5c:d4:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:43:25 2025 by rpki-client