Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          QXsqYw2lEcdpRsWvmbnioFJcLT9mrWmkdsXtJXKMf8k=
Subject key identifier:   88:21:4E:A1:59:2C:04:8F:18:7E:16:E5:F8:77:44:78:C0:82:36:52
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       6B6D9819DD0E8B0A3603C92CE27763F5CE8FFFCA
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:49 +0000
ROA not before:           Sun 08 Jun 2025 11:19:49 +0000
ROA not after:            Sun 07 Jun 2026 11:24:49 +0000
asID:                     262293
IP address blocks:        177.154.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 01:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6d:98:19:dd:0e:8b:0a:36:03:c9:2c:e2:77:63:f5:ce:8f:ff:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:49 2025 GMT
            Not After : Jun  7 11:24:49 2026 GMT
        Subject: CN=88214EA1592C048F187E16E5F8774478C0823652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:bd:3e:9a:be:b1:b0:69:f6:5a:43:81:4f:
                    11:16:3e:ab:9f:c4:ce:92:a7:3c:bd:da:11:2e:18:
                    f0:24:7d:0e:b2:d7:6c:5f:02:69:46:1e:80:c6:59:
                    9f:df:ee:70:ee:44:99:82:a8:21:69:01:a5:b1:24:
                    c6:b5:22:e5:c1:91:28:29:c2:b1:84:fe:4e:b5:a5:
                    5d:d2:04:d1:41:37:04:fd:91:71:d0:6d:3b:12:59:
                    5f:52:e5:66:fb:a4:c1:ab:f0:42:a5:c2:d6:25:12:
                    f4:55:f7:b5:b7:71:c2:56:8d:e6:e8:27:18:19:3e:
                    ba:bb:04:1f:77:2d:08:07:cf:cd:9a:04:94:86:90:
                    b6:15:06:fd:8a:05:06:02:25:4a:98:6b:5c:48:9b:
                    1f:2d:1f:b4:09:5f:af:da:43:a7:fa:e1:82:37:d4:
                    1e:78:90:b5:a4:ce:e5:d0:80:2f:a1:1a:c9:5f:e2:
                    8d:b5:2f:f9:ff:0c:64:f7:7d:34:67:07:21:29:78:
                    8b:94:84:7d:46:dd:52:2f:d1:50:1b:63:13:b7:d8:
                    e5:42:29:da:97:6a:6c:54:ee:44:09:e3:f4:ac:67:
                    94:a5:4f:09:c0:4a:72:88:3a:6f:51:97:d0:86:77:
                    68:5f:04:6b:26:02:2a:70:8b:69:e6:6e:cf:eb:cb:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:4E:A1:59:2C:04:8F:18:7E:16:E5:F8:77:44:78:C0:82:36:52
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231322e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:07:bd:03:b4:9f:c6:9e:40:e6:5a:de:43:c5:d8:d5:61:
         72:f9:d0:60:b4:7b:fe:e5:1a:ba:43:b2:19:00:82:2f:ae:c0:
         42:dd:1a:c3:32:40:5e:d4:0c:f8:fd:4e:a9:a5:e5:0b:3d:23:
         df:2f:70:2b:09:2a:80:83:2d:01:d8:c8:25:36:8e:8f:82:ea:
         f1:3c:67:5a:85:09:8c:01:bd:e5:bc:62:6d:05:55:4e:e6:3a:
         7c:b8:8e:52:a1:0f:07:f8:8e:5d:e9:c8:83:2b:45:b6:49:eb:
         91:be:94:68:16:fd:ae:01:fc:89:b2:2c:ae:e7:7d:c1:ea:dd:
         f7:83:62:52:49:0d:48:2e:24:a7:50:0e:12:1f:d5:4b:f1:18:
         9b:68:a3:cd:7d:72:7f:13:80:78:af:aa:35:c8:a2:f2:53:97:
         77:53:b2:f4:62:8e:18:e7:9c:38:7a:0d:90:6e:15:42:87:9e:
         fd:44:3f:25:67:38:b9:52:2e:37:67:8d:72:a5:c2:25:54:2a:
         cd:99:68:6c:99:4b:3e:8b:08:40:f8:81:18:98:cc:e0:5a:92:
         a1:ec:d7:f7:34:34:82:40:00:37:4e:f9:b5:eb:0a:fc:45:75:
         5b:e0:22:95:8b:8a:56:36:65:a3:f6:6f:5a:3d:11:ae:a3:c8:
         57:6d:a0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:14:55 2025 by rpki-client