Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232382e302f32322d3232203d3e20323632323933.roa
File:                     3137392e3130372e3232382e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          qXf8zb1FeBXxQhxUtLXwr+DP7gORY4OHcwEjF6cvoXQ=
Subject key identifier:   87:24:71:2E:4E:07:DC:C3:D4:5E:EF:F9:F0:7A:6D:6C:8B:F4:9E:19
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       7CA6E8409AC7B39156A91117495BEB3D3F8A4DB1
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232382e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:44 +0000
ROA not before:           Sun 08 Jun 2025 11:19:44 +0000
ROA not after:            Sun 07 Jun 2026 11:24:44 +0000
asID:                     262293
IP address blocks:        179.107.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:e8:40:9a:c7:b3:91:56:a9:11:17:49:5b:eb:3d:3f:8a:4d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:44 2025 GMT
            Not After : Jun  7 11:24:44 2026 GMT
        Subject: CN=8724712E4E07DCC3D45EEFF9F07A6D6C8BF49E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:46:bd:cf:ad:2f:27:ed:32:02:05:32:7b:
                    e9:d1:79:ab:0f:81:fd:7f:a1:95:cb:bd:83:a6:7b:
                    ab:d5:23:cb:8f:69:4a:2e:1c:8d:96:8f:79:a7:2a:
                    45:29:29:ae:dc:b9:80:bd:f6:b6:d0:15:ad:ba:46:
                    bb:9b:7c:f9:e6:a9:0b:0b:29:66:95:e9:f6:fe:ee:
                    1c:ef:4e:bf:0b:2d:06:db:05:76:e2:40:da:7d:b2:
                    32:95:9b:56:e8:c0:90:55:72:3c:b5:26:ef:f1:c7:
                    33:03:0e:82:8b:84:2e:e9:c6:59:78:f4:c2:cd:55:
                    3a:5f:fb:41:db:e2:bd:8a:b4:ba:d0:17:29:f6:46:
                    18:1d:72:67:a9:d8:e3:d7:44:ca:7b:53:75:fe:5a:
                    1e:df:62:62:d3:42:c7:0b:4a:7e:3d:5c:00:54:a2:
                    4f:44:02:56:80:41:3f:40:97:f8:d7:1d:b5:b9:51:
                    36:31:7c:3b:70:da:b8:c7:75:2e:86:aa:f9:51:5a:
                    99:dc:e4:5b:29:d1:fe:b7:12:e3:84:39:c4:cc:16:
                    3a:2b:fe:9c:cd:b8:4a:a3:bb:0e:9e:6f:71:9b:f2:
                    51:93:75:be:5a:07:8d:f7:c6:9a:bb:da:22:6f:50:
                    bd:e6:51:1a:5e:f2:bb:45:ea:6c:d5:29:4f:47:c2:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:24:71:2E:4E:07:DC:C3:D4:5E:EF:F9:F0:7A:6D:6C:8B:F4:9E:19
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3232382e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:1b:b2:0e:22:1d:7b:24:26:f7:c2:a4:7b:18:ae:00:f4:a0:
         cb:5a:0c:6c:41:be:20:d1:da:34:38:c7:5f:3a:3a:fa:44:b6:
         9c:22:44:95:a4:da:f4:ef:52:5d:62:52:c6:4a:e3:0d:b2:52:
         dd:2d:f5:b1:dd:02:b1:18:b3:8f:6b:3d:c7:8e:a0:2c:95:f8:
         70:bd:09:07:6f:44:56:59:d9:3d:9d:e2:0d:d6:e2:d8:10:d9:
         2a:ec:58:d0:6d:06:03:a9:c5:5f:19:12:a2:86:6b:f6:6d:84:
         25:b6:68:5e:91:ed:e2:c7:53:e7:4d:32:23:66:bb:f8:07:21:
         2a:9c:ab:76:4d:c2:09:61:9a:31:09:b0:32:8f:74:a1:af:e2:
         e6:6a:65:8a:43:27:d4:99:5e:a5:6b:aa:a3:60:5c:69:09:01:
         f7:ad:ad:ea:00:26:47:6b:55:b1:1b:26:90:d8:be:e3:03:84:
         ea:c6:6b:cb:3c:41:fb:8c:d5:4b:be:18:c3:f8:04:41:74:01:
         1b:62:26:4e:c6:0a:dc:ec:0d:44:f5:33:0c:a2:71:73:d8:36:
         6d:39:3f:56:e6:ea:25:b2:bc:7b:cf:84:2a:f5:6c:ed:41:63:
         52:6a:8f:34:7b:3b:7b:38:e2:c3:26:d6:9f:e1:45:fb:27:cd:
         2e:13:28:69
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfKboQJrHs5FWqREXSVvrPT+KTbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDRaFw0yNjA2MDcxMTI0NDRaMDMxMTAvBgNV
BAMTKDg3MjQ3MTJFNEUwN0RDQzNENDVFRUZGOUYwN0E2RDZDOEJGNDlFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDUa9z60vJ+0yAgUye+nReasP
gf1/oZXLvYOme6vVI8uPaUouHI2Wj3mnKkUpKa7cuYC99rbQFa26RrubfPnmqQsL
KWaV6fb+7hzvTr8LLQbbBXbiQNp9sjKVm1bowJBVcjy1Ju/xxzMDDoKLhC7pxll4
9MLNVTpf+0Hb4r2KtLrQFyn2Rhgdcmep2OPXRMp7U3X+Wh7fYmLTQscLSn49XABU
ok9EAlaAQT9Al/jXHbW5UTYxfDtw2rjHdS6GqvlRWpnc5Fsp0f63EuOEOcTMFjor
/pzNuEqjuw6eb3Gb8lGTdb5aB433xpq72iJvUL3mURpe8rtF6mzVKU9HwgAjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhyRxLk4H3MPUXu/58HptbIv0nhkwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM5MmUzMTMwMzcyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArNr5DANBgkqhkiG9w0BAQsFAAOCAQEAiRuy
DiIdeyQm98KkexiuAPSgy1oMbEG+INHaNDjHXzo6+kS2nCJElaTa9O9SXWJSxkrj
DbJS3S31sd0CsRizj2s9x46gLJX4cL0JB29EVlnZPZ3iDdbi2BDZKuxY0G0GA6nF
XxkSooZr9m2EJbZoXpHt4sdT500yI2a7+AchKpyrdk3CCWGaMQmwMo90oa/i5mpl
ikMn1JlepWuqo2BcaQkB962t6gAmR2tVsRsmkNi+4wOE6sZryzxB+4zVS74Yw/gE
QXQBG2ImTsYK3OwNRPUzDKJxc9g2bTk/VubqJbK8e8+EKvVs7UFjUmqPNHs7ezji
wybWn+FF+yfNLhMoaQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:22 2025 by rpki-client