Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232342e302f31392d3139203d3e20323632323933.roa
File:                     3137392e3130372e3232342e302f31392d3139203d3e20323632323933.roa (raw, json)
Hash identifier:          enhWU9cHZKtebVOAMDAFyF6cskz5iQsG1ARMhZ8QHOQ=
Subject key identifier:   87:D1:32:8D:33:DA:59:46:9C:ED:6C:8E:DA:E1:8B:F3:22:62:D9:97
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       7AFED1C716555553450992CD00B3B72D98683D01
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232342e302f31392d3139203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:45 +0000
ROA not before:           Sun 08 Jun 2025 11:19:45 +0000
ROA not after:            Sun 07 Jun 2026 11:24:45 +0000
asID:                     262293
IP address blocks:        179.107.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fe:d1:c7:16:55:55:53:45:09:92:cd:00:b3:b7:2d:98:68:3d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:45 2025 GMT
            Not After : Jun  7 11:24:45 2026 GMT
        Subject: CN=87D1328D33DA59469CED6C8EDAE18BF32262D997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:38:1f:ae:6f:cc:a4:9b:e0:d7:74:d6:81:
                    10:ce:8c:6b:e5:cb:09:6b:79:d3:37:0a:f0:20:83:
                    a6:af:33:14:4b:dd:78:ca:08:61:ab:d7:69:43:e5:
                    88:5a:9c:c9:98:dd:58:da:73:b9:aa:36:c0:34:ae:
                    c5:13:de:c5:a3:64:3d:7a:88:47:af:9e:bf:92:53:
                    82:de:87:2e:7d:fe:38:33:bc:3f:4f:5d:f4:91:56:
                    15:60:00:43:d8:45:d0:ed:d2:eb:db:6b:8a:56:44:
                    6f:82:55:3e:7d:06:2a:02:4c:a4:e9:54:e3:ad:9f:
                    1a:a8:11:e1:45:08:31:7b:a2:50:0a:76:55:38:26:
                    30:f3:c4:3a:3f:d5:17:74:59:bd:7c:8d:e6:6f:2b:
                    f2:dd:70:18:0e:07:8c:59:13:6b:b5:19:16:82:b6:
                    7f:e2:51:32:de:03:28:5f:26:65:5b:3b:42:86:11:
                    92:0a:1e:14:69:fe:03:87:f5:ba:d3:11:b0:04:d7:
                    a1:14:54:04:7b:b6:c4:ba:1e:39:dc:a1:34:38:c9:
                    41:fd:0b:59:35:68:7b:e3:d0:8b:05:54:63:b6:0c:
                    2a:52:a8:75:8e:d4:95:da:04:9f:d6:d4:be:23:78:
                    86:a3:82:57:5e:1f:25:9d:b3:be:9f:8e:23:af:c2:
                    9b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:32:8D:33:DA:59:46:9C:ED:6C:8E:DA:E1:8B:F3:22:62:D9:97
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232342e302f31392d3139203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:46:bb:df:6f:02:26:67:5d:59:eb:80:4f:5f:32:12:07:cd:
         da:49:da:26:8f:a2:d9:82:43:c8:7e:e7:6e:9d:32:ce:e4:ba:
         15:cc:bb:d1:60:76:26:ab:98:39:61:77:8c:97:74:aa:13:7b:
         84:41:e6:5a:f0:7e:f4:58:6c:e2:cf:80:22:5a:32:77:da:c6:
         9f:6c:59:9f:24:42:3d:fd:34:3b:f9:e6:33:ef:d4:49:7b:10:
         e1:e6:96:9e:ae:8c:0f:e7:d2:03:c6:fd:db:32:00:33:12:64:
         09:04:3b:40:12:3d:46:86:fe:7e:8d:a1:2d:e9:d9:b0:a3:47:
         4d:41:88:58:ef:1a:cf:e1:1e:57:b2:7b:53:55:9b:35:e7:45:
         e3:7e:e5:80:f5:64:8c:4a:b5:88:3e:16:e0:d4:69:6b:05:b0:
         4c:f0:ec:e6:1f:b1:f2:30:01:d1:e5:7c:a9:e1:05:7e:2b:d8:
         e8:5a:6f:3a:ee:40:2c:41:9d:24:cf:35:70:6a:3c:8f:c6:2f:
         1b:e1:57:d7:79:fe:b2:e4:aa:21:d6:b6:2e:c3:44:a3:2b:a6:
         2d:32:dc:f3:8c:fa:b0:35:71:9a:42:f6:68:bf:85:90:10:3f:
         5d:bb:5e:b3:e1:6f:34:ec:af:71:38:45:72:8d:28:33:b6:de:
         c9:07:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:58:26 2025 by rpki-client