Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232342e302f32322d3232203d3e20323632323933.roa
File:                     3137392e3130372e3232342e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          E+zyyaFFwvqvD50km99a3DkmEACRnEuUqx48F3yjnWk=
Subject key identifier:   D4:7F:3A:6B:6B:E3:E9:7B:62:FE:76:0E:5E:B3:4E:5B:70:60:35:B9
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       5E3CD7AACAA52571BC4E21EACE6F03ED12E9FBA2
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232342e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:43 +0000
ROA not before:           Sun 08 Jun 2025 11:19:43 +0000
ROA not after:            Sun 07 Jun 2026 11:24:43 +0000
asID:                     262293
IP address blocks:        179.107.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3c:d7:aa:ca:a5:25:71:bc:4e:21:ea:ce:6f:03:ed:12:e9:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:43 2025 GMT
            Not After : Jun  7 11:24:43 2026 GMT
        Subject: CN=D47F3A6B6BE3E97B62FE760E5EB34E5B706035B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b3:25:5c:43:b7:b0:e8:7e:e6:0e:b4:be:b5:
                    e1:46:44:5c:9f:d9:ab:a8:a6:ad:d2:e3:20:75:54:
                    de:a3:5b:26:51:4d:d5:5f:17:12:04:1e:2a:41:e9:
                    0c:62:67:a2:bf:9d:70:4d:81:98:41:74:ed:4e:73:
                    86:c5:66:ce:ed:32:17:08:02:8b:ec:8c:e9:70:6e:
                    90:07:ea:c0:14:00:b2:d4:69:cb:27:dd:50:19:a8:
                    d4:e6:fc:7d:13:88:c6:84:bd:7e:75:e4:66:9d:72:
                    38:2a:01:e0:36:3c:c3:73:bf:56:ed:8a:45:c9:54:
                    10:9c:7f:1d:d0:fd:54:59:12:af:3c:3a:61:c6:db:
                    4e:c3:ed:49:6b:bb:c1:99:41:e4:b7:54:1c:db:1d:
                    37:8c:fc:08:69:f1:60:06:a2:76:14:7e:30:78:11:
                    5f:34:85:8f:d9:3d:0a:60:72:ec:a9:f0:c4:57:48:
                    dd:03:77:db:35:92:ae:f8:52:19:d5:36:a7:34:87:
                    68:ee:b7:8f:d5:64:99:d4:59:55:f4:42:ba:2c:0d:
                    ce:f3:23:4c:fa:54:90:52:80:ba:44:1b:7f:08:41:
                    22:d0:62:d0:72:34:b7:f1:0f:e3:9d:cb:62:cf:35:
                    f5:7a:4e:2c:31:e4:f8:33:8a:8f:94:5b:4f:c3:93:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7F:3A:6B:6B:E3:E9:7B:62:FE:76:0E:5E:B3:4E:5B:70:60:35:B9
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232342e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:f6:94:e7:60:05:a9:b6:8f:e1:b1:00:de:35:67:3e:72:
         e2:d6:a3:52:fa:e7:cf:7a:4e:9d:4a:03:9b:13:4c:f1:76:e5:
         2c:9f:5c:8c:85:39:dd:1c:10:d4:a5:f6:88:23:7c:48:f6:8b:
         ae:fe:93:7d:01:23:ea:c9:fd:fe:40:94:64:b3:c1:e1:94:f3:
         89:b5:99:ac:c4:de:e2:a1:78:7b:43:04:c2:82:51:4b:1c:a5:
         27:14:74:31:a9:ed:7d:c1:c1:3b:19:d6:ec:90:6b:e7:06:6b:
         ac:f3:e9:8e:fe:76:98:51:9d:ae:19:e0:17:4f:69:7f:95:ca:
         bc:59:e2:d5:9e:c5:61:ac:e5:e3:be:ee:0d:c5:24:f0:5f:cf:
         78:75:5d:fd:30:18:48:fb:09:31:6c:1a:19:b9:c9:e7:5b:2c:
         17:24:e5:f7:18:c1:bb:bf:3a:d6:3d:97:09:56:99:86:c0:f6:
         85:07:8d:d2:7f:46:2d:f0:5a:d6:f1:2b:8a:56:72:13:45:6d:
         7d:90:e0:13:87:3a:fc:1a:7e:d8:33:6d:40:8d:e9:64:06:06:
         98:ab:83:59:77:75:60:92:de:c4:00:11:3f:7c:18:ba:58:10:
         a8:ab:48:9c:8a:9d:78:47:c3:4b:4d:64:74:f5:f5:d0:97:0a:
         5d:da:43:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:08:05 2025 by rpki-client