Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa
File:                     3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          g4kwnnJV460PLY1p7uyPehRjJjLocgZxWrrvcWUvDUI=
Subject key identifier:   2E:66:F3:47:EB:B7:48:AE:27:BB:1D:D1:6D:95:EF:29:8D:5A:30:E0
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       64AAFDCBADE5DB0BC812C5D948E574EE2531009C
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:48 +0000
ROA not before:           Sun 08 Jun 2025 11:19:48 +0000
ROA not after:            Sun 07 Jun 2026 11:24:48 +0000
asID:                     262293
IP address blocks:        177.154.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:aa:fd:cb:ad:e5:db:0b:c8:12:c5:d9:48:e5:74:ee:25:31:00:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:48 2025 GMT
            Not After : Jun  7 11:24:48 2026 GMT
        Subject: CN=2E66F347EBB748AE27BB1DD16D95EF298D5A30E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:aa:35:d1:1a:1d:9a:42:97:03:92:bb:a1:
                    86:6b:fb:34:96:4e:06:69:1e:22:71:fa:18:24:2f:
                    40:12:9b:1c:93:57:7f:59:80:17:2d:40:db:d2:83:
                    ed:ea:64:05:b7:5a:bc:cc:08:5f:02:61:f1:6e:f8:
                    fc:96:15:d3:62:a4:39:70:97:eb:f6:b9:26:12:88:
                    85:be:d2:c6:3f:07:c1:19:43:41:db:47:c7:fc:1f:
                    03:b5:3e:f0:5f:c6:51:03:dd:4d:8b:7c:0a:bb:39:
                    ac:ea:2c:6b:ea:61:65:d1:1f:d1:42:77:5e:bc:99:
                    8b:b0:f2:88:a2:db:b1:bc:0b:17:b5:8c:45:bf:cc:
                    43:23:64:93:09:1a:b7:be:da:53:6f:60:52:1a:df:
                    38:44:9f:78:0c:14:28:b5:f9:69:e0:06:a2:e0:b1:
                    fa:70:0b:83:25:81:9c:83:b2:e0:b5:da:f1:df:9d:
                    5d:ac:41:ec:90:a7:af:81:ac:40:3e:4e:6e:ed:d1:
                    39:88:45:e6:27:ab:a7:10:e4:ba:1e:c5:68:5a:3c:
                    5b:d6:d8:12:8b:98:49:6f:e9:4f:75:74:50:65:cd:
                    ff:59:c0:4d:a5:6f:c2:2c:7c:64:03:06:da:30:84:
                    ce:d6:34:90:b2:64:0b:6b:5e:9d:33:73:6d:11:7f:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:66:F3:47:EB:B7:48:AE:27:BB:1D:D1:6D:95:EF:29:8D:5A:30:E0
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232302e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:53:6f:47:d1:f8:b7:b0:21:82:f8:39:6a:87:70:11:a5:21:
         a8:95:01:92:a5:f9:8f:c3:d4:4e:ff:1b:cd:79:67:21:97:dd:
         a9:b1:d8:7a:28:22:3b:df:28:4c:31:75:0f:a1:73:5b:14:e5:
         8a:90:a8:59:a6:b8:78:4a:51:96:01:5f:8e:d9:7c:5d:5c:27:
         12:ad:86:e4:0f:89:61:86:e1:d9:78:27:83:80:c8:b3:b8:09:
         bc:a7:13:c3:93:cf:7e:9f:01:6b:2f:71:8f:be:17:b2:84:d7:
         cc:de:93:8d:e2:f8:6a:71:49:88:0d:8e:0a:a1:d5:e1:c9:27:
         d3:9a:5e:65:59:b5:f2:bc:83:26:ec:56:e7:f1:dc:75:c1:12:
         50:2c:cd:a5:5e:f7:38:33:0c:c4:0e:ff:8e:74:fd:8d:d6:90:
         3c:e9:b0:d0:15:f5:80:c0:50:36:26:97:a3:0b:10:be:ed:50:
         aa:1c:e6:9f:8f:ce:b0:aa:9c:d3:eb:1a:fa:1f:8d:ea:37:11:
         59:e5:ff:86:4a:3d:3a:92:d0:12:0d:12:ff:9d:88:02:65:77:
         01:2d:c9:ad:12:6a:7a:86:e7:73:0c:7e:6c:94:28:b4:dc:a3:
         70:b9:48:8a:a1:17:d9:b6:a0:a7:43:e5:e3:a5:bf:e3:43:d2:
         14:27:bb:eb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZKr9y63l2wvIEsXZSOV07iUxAJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDhaFw0yNjA2MDcxMTI0NDhaMDMxMTAvBgNV
BAMTKDJFNjZGMzQ3RUJCNzQ4QUUyN0JCMUREMTZEOTVFRjI5OEQ1QTMwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Wqo10RodmkKXA5K7oYZr+zSW
TgZpHiJx+hgkL0ASmxyTV39ZgBctQNvSg+3qZAW3WrzMCF8CYfFu+PyWFdNipDlw
l+v2uSYSiIW+0sY/B8EZQ0HbR8f8HwO1PvBfxlED3U2LfAq7OazqLGvqYWXRH9FC
d168mYuw8oii27G8Cxe1jEW/zEMjZJMJGre+2lNvYFIa3zhEn3gMFCi1+WngBqLg
sfpwC4MlgZyDsuC12vHfnV2sQeyQp6+BrEA+Tm7t0TmIReYnq6cQ5LoexWhaPFvW
2BKLmElv6U91dFBlzf9ZwE2lb8IsfGQDBtowhM7WNJCyZAtrXp0zc20RfzlvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULmbzR+u3SK4nux3RbZXvKY1aMOAwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGa3DANBgkqhkiG9w0BAQsFAAOCAQEAZVNv
R9H4t7Ahgvg5aodwEaUhqJUBkqX5j8PUTv8bzXlnIZfdqbHYeigiO98oTDF1D6Fz
WxTlipCoWaa4eEpRlgFfjtl8XVwnEq2G5A+JYYbh2Xgng4DIs7gJvKcTw5PPfp8B
ay9xj74XsoTXzN6TjeL4anFJiA2OCqHV4ckn05peZVm18ryDJuxW5/HcdcESUCzN
pV73ODMMxA7/jnT9jdaQPOmw0BX1gMBQNiaXowsQvu1Qqhzmn4/OsKqc0+sa+h+N
6jcRWeX/hko9OpLQEg0S/52IAmV3AS3JrRJqeobncwx+bJQotNyjcLlIiqEX2bag
p0Pl46W/40PSFCe76w==
-----END CERTIFICATE-----
Generated at Wed Jun 11 05:09:10 2025 by rpki-client