Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa
File:                     3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          7zEVguLFAhFGmWrg/g6nOSYHC8LB2iqC9n/5amr+q0Y=
Subject key identifier:   0D:A4:12:4D:D8:80:93:6D:F3:1C:64:A6:DB:26:0C:58:DE:F6:AE:E9
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       3877B3E8DFF40747A4216A695EC3B3EB5F24DF7F
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:49 +0000
ROA not before:           Sun 08 Jun 2025 11:19:49 +0000
ROA not after:            Sun 07 Jun 2026 11:24:49 +0000
asID:                     262293
IP address blocks:        177.154.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:77:b3:e8:df:f4:07:47:a4:21:6a:69:5e:c3:b3:eb:5f:24:df:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:49 2025 GMT
            Not After : Jun  7 11:24:49 2026 GMT
        Subject: CN=0DA4124DD880936DF31C64A6DB260C58DEF6AEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:1e:5e:2a:45:b9:bd:23:5e:e8:38:ae:ed:
                    ec:0c:e9:a7:78:0a:63:bb:98:e6:16:da:f2:66:f1:
                    8b:39:25:c1:d5:5c:78:f2:b6:88:a8:c2:db:99:7b:
                    fa:57:e2:48:d3:0f:9c:26:6f:66:ff:5d:f6:6c:55:
                    67:7c:30:cf:0a:9c:5d:a4:ca:c0:c0:47:c1:0b:db:
                    3d:6a:b8:a7:08:62:14:53:b1:db:a7:35:53:d4:27:
                    97:15:ce:84:f3:80:f1:b4:21:52:d4:5f:4d:59:35:
                    2e:50:c0:06:96:be:0d:5a:a1:fe:77:5f:19:56:8f:
                    46:75:71:24:fa:a8:3c:e5:fb:0f:ae:ae:91:8e:03:
                    b4:38:69:cc:d4:82:47:88:4b:c8:f5:99:a6:aa:46:
                    d8:3f:1f:d4:f9:0e:c2:7b:9b:52:5d:96:bb:04:d5:
                    5a:62:46:8c:e8:8e:c6:bf:ed:e2:bf:7d:25:e7:9d:
                    62:c9:98:df:89:37:40:36:61:c4:00:81:e6:ad:8b:
                    b8:f4:c1:63:db:f6:01:49:cd:87:74:80:87:65:fb:
                    ef:cd:27:ab:d7:be:4b:c8:bc:83:ec:f6:f0:88:4b:
                    5f:4d:8d:7e:d6:bf:90:3d:b2:76:e4:97:0f:8b:b9:
                    d7:59:df:fd:26:b3:5d:42:17:25:2c:30:3e:df:59:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A4:12:4D:D8:80:93:6D:F3:1C:64:A6:DB:26:0C:58:DE:F6:AE:E9
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3232312e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:72:cd:a7:62:e2:84:72:a2:9c:18:b2:52:f1:0e:d7:79:
         84:7a:93:eb:73:c1:d9:ae:3d:bc:84:07:2d:20:57:cb:33:6e:
         1c:20:ce:92:38:fb:87:49:48:a2:f2:fe:43:c7:9b:d6:3b:08:
         bb:ae:3c:47:05:37:ac:25:11:f7:66:25:cd:f5:fd:a3:68:95:
         11:c6:60:d9:9f:09:c4:c8:38:47:68:9b:12:cd:80:23:30:4d:
         4f:aa:45:96:05:3d:f4:a6:58:c3:d8:22:bd:d2:92:b8:b1:71:
         e1:db:9d:ab:32:f8:e9:a6:19:0c:bd:e4:3b:04:00:47:32:c9:
         bc:46:36:79:ed:6c:47:41:bd:f0:2b:db:6f:3d:6a:44:07:c7:
         7e:f2:28:72:bb:61:53:c8:10:5b:6e:25:59:61:e1:c6:16:ed:
         ac:aa:d0:0e:70:fb:88:a5:0e:42:4f:3e:d3:8d:9e:07:61:9d:
         5e:0e:36:87:32:74:6c:2a:02:1b:7e:2c:28:e3:80:85:80:4e:
         4e:69:61:a9:e3:d9:c0:89:df:5d:88:a8:2e:07:e8:97:60:d9:
         53:76:93:c3:87:fa:e4:c1:c5:d9:0b:1b:89:00:40:dc:ba:25:
         d7:28:cf:f4:05:ca:a5:a9:37:33:c0:4f:fa:4c:d8:45:e2:f4:
         65:ed:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:36:22 2025 by rpki-client