Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231342e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3231342e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          iN3tHCtapED+mdx5Iq+YUKBv6zFoSpKQ8w+7c4PaJ2s=
Subject key identifier:   45:DE:4C:9F:A0:BC:C9:61:23:AA:5E:FD:DE:15:32:ED:24:70:C8:9E
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       4C61ADD9E4FF483A0D5D85110CAD4C4295B4DE42
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231342e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:47 +0000
ROA not before:           Sun 08 Jun 2025 11:19:47 +0000
ROA not after:            Sun 07 Jun 2026 11:24:47 +0000
asID:                     262293
IP address blocks:        177.154.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:61:ad:d9:e4:ff:48:3a:0d:5d:85:11:0c:ad:4c:42:95:b4:de:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:47 2025 GMT
            Not After : Jun  7 11:24:47 2026 GMT
        Subject: CN=45DE4C9FA0BCC96123AA5EFDDE1532ED2470C89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:e6:e9:48:c2:84:93:f2:4f:dd:98:f5:56:
                    55:5c:cd:17:a9:b9:ac:75:53:e8:68:50:ba:bb:e1:
                    b2:3d:9b:eb:eb:a5:f4:b7:a4:cc:85:7c:f8:ea:15:
                    10:c3:8d:16:32:08:a5:af:36:7c:98:5d:d4:48:94:
                    c9:a8:fd:70:07:36:d7:39:a0:a0:eb:46:f2:21:93:
                    b6:3a:f3:8c:6e:b0:76:0f:5c:d8:38:a6:ea:73:32:
                    a7:38:59:a4:95:fb:00:f7:47:8e:6c:9c:a6:c5:c7:
                    82:5a:d4:9b:8d:fe:27:e1:c1:ad:31:07:eb:bd:8b:
                    02:53:94:9f:d7:9e:88:91:6a:e3:a3:5a:2c:80:d8:
                    1d:08:7e:3f:91:59:6a:b9:62:64:1d:03:c1:24:b9:
                    3f:ee:d4:91:13:c5:c8:17:c5:50:4c:54:b7:f3:c1:
                    94:a4:c4:39:e1:f6:db:32:59:18:b6:6f:b1:29:a7:
                    4a:3f:56:08:e1:79:b1:05:81:ab:10:4d:ee:1f:f5:
                    77:21:4a:3c:4b:99:be:fa:c4:66:cf:91:ba:4f:12:
                    df:c5:bc:30:8c:ec:bd:f8:90:d8:8b:b0:cd:ab:a0:
                    bd:ec:fa:91:9d:39:0d:1e:e6:4f:5f:1b:78:04:f0:
                    f2:4d:52:c6:e1:a3:5c:ec:e6:10:af:44:ba:2f:a7:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DE:4C:9F:A0:BC:C9:61:23:AA:5E:FD:DE:15:32:ED:24:70:C8:9E
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3231342e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:7a:d5:fc:b8:f2:51:cd:83:42:c8:eb:f2:2f:20:e9:72:
         f2:d4:9a:7c:30:66:a2:41:10:41:82:43:da:d8:f5:ce:78:ea:
         9b:eb:c6:bb:27:81:07:85:f0:31:83:99:03:98:4b:ed:1f:70:
         17:e4:ae:06:ee:6b:f5:e1:3e:d1:20:8f:6b:64:4e:a3:c7:5a:
         ce:e7:03:e9:1e:9d:77:18:e1:91:f2:4f:d8:35:aa:12:17:22:
         01:90:b0:3d:a2:0d:0b:20:07:ee:97:27:89:b2:bc:aa:f9:9b:
         ec:45:93:49:73:96:8e:46:fc:6b:45:5f:1a:2a:33:28:f9:9a:
         44:09:07:b4:71:7f:be:00:5e:fd:bb:df:44:05:08:ca:d9:67:
         b4:12:91:65:46:df:9e:4e:0e:24:78:e2:cc:f0:28:8a:00:c0:
         07:7d:59:b8:8c:db:1a:d5:1b:a9:bf:8d:11:5f:cd:cb:f4:ab:
         ff:dc:59:05:cf:77:a5:fa:d5:8b:f0:3c:dd:bf:88:7e:e8:9d:
         f4:34:11:a8:3b:3c:84:0d:bc:95:f5:d6:04:a0:62:73:a5:ca:
         c0:ae:e8:61:b4:26:37:eb:53:0d:2b:ba:fe:81:2c:c9:59:9d:
         fc:66:83:5d:cb:e2:7b:0a:f5:7b:7c:d7:b1:be:0a:5f:93:bf:
         2f:5e:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:32:06 2025 by rpki-client