Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3233362e302f32322d3232203d3e20323632323933.roa
File:                     3137392e3130372e3233362e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          p88nM+OiQhHV1a4+Bby2BrCDnNvdcA9C7isjeQoKBBE=
Subject key identifier:   12:3F:03:01:B7:DF:0D:53:8D:40:07:58:42:50:52:91:69:79:30:00
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       069E0EF606BCFF0C20F80A29306242FF5304A1BF
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3233362e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:46 +0000
ROA not before:           Sun 08 Jun 2025 11:19:46 +0000
ROA not after:            Sun 07 Jun 2026 11:24:46 +0000
asID:                     262293
IP address blocks:        179.107.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9e:0e:f6:06:bc:ff:0c:20:f8:0a:29:30:62:42:ff:53:04:a1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:46 2025 GMT
            Not After : Jun  7 11:24:46 2026 GMT
        Subject: CN=123F0301B7DF0D538D4007584250529169793000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:95:aa:d2:ec:0b:9c:ae:01:c1:02:67:e0:
                    c6:1c:07:e7:14:e5:f4:17:18:7b:2b:e3:89:94:50:
                    40:92:16:eb:dc:65:63:8e:70:7a:d3:a5:a6:f3:72:
                    b8:4f:6a:f8:91:e3:10:bb:ca:76:e8:1a:7b:ae:57:
                    ae:9f:92:5c:6f:36:7a:ae:3a:90:9a:97:c4:e8:a2:
                    f2:16:fd:a1:26:c5:ff:f7:ef:d9:96:f0:87:24:02:
                    80:73:da:29:e5:12:65:3f:b2:62:d9:e8:23:2a:3f:
                    18:10:5d:0d:b9:41:25:7c:7f:bf:71:24:53:7b:fd:
                    71:e5:e2:1d:14:32:3d:02:7a:b9:b2:e2:2b:38:b6:
                    b3:9c:bb:19:7f:fb:ef:0a:e8:b0:28:b5:b7:21:05:
                    14:c0:b3:b7:f6:92:8d:47:32:bb:84:74:dd:34:62:
                    08:c9:4d:d4:3a:7e:d7:3b:46:f4:09:73:c3:64:71:
                    9e:3d:da:69:bb:23:fe:81:2c:d5:77:7a:bd:00:6e:
                    92:f5:f7:ae:8d:cb:38:2a:80:73:be:ce:47:b0:91:
                    73:c0:63:af:e3:26:6f:51:71:bc:a1:da:48:a7:b2:
                    20:f5:c4:46:03:9f:77:a5:3d:e2:4a:37:81:b3:21:
                    e5:23:9c:fc:f2:6a:19:5f:fc:61:eb:08:84:e3:fa:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:03:01:B7:DF:0D:53:8D:40:07:58:42:50:52:91:69:79:30:00
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3233362e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:87:a0:e4:46:6f:e0:0c:bb:26:df:c7:42:7b:39:95:87:
         fd:61:04:c8:10:52:be:57:f1:fd:9b:8a:c6:98:82:18:ae:13:
         a0:fa:5f:4b:62:5a:b0:cb:86:af:dd:86:fb:78:43:02:f8:2d:
         2f:0b:74:3f:42:b8:ad:b3:3a:3b:4d:68:c6:84:ee:57:b2:2e:
         05:b4:bc:6c:fc:3b:ab:b1:a0:3d:02:c8:c1:84:93:73:7b:69:
         74:c9:f6:85:c9:00:9b:ba:8e:3c:f3:a2:1f:df:16:75:bd:9d:
         fc:3e:74:59:78:5a:c1:28:c9:80:69:d3:b2:82:63:d8:82:4b:
         4c:79:a9:81:b9:5b:1f:dc:3e:1b:d8:63:7e:41:59:23:8c:f3:
         f8:5e:db:65:f9:85:28:3a:0e:c6:a8:c7:d5:45:10:19:8c:49:
         f3:0a:2f:c0:26:42:cb:36:03:cc:60:06:5c:29:a2:f8:27:b5:
         01:e0:dc:4f:99:7b:c1:e4:1d:e4:6e:43:e3:d2:d6:ab:4d:cd:
         98:19:cf:3d:ba:c4:a1:aa:8e:54:5a:05:cd:57:e7:23:d9:7a:
         42:2a:22:26:5e:6a:4e:01:4b:3a:a4:78:be:c2:b9:fe:0e:25:
         9e:fe:1f:ab:a9:aa:a5:ae:ac:d4:24:16:86:82:f4:44:22:51:
         be:f3:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:19:33 2025 by rpki-client