Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3234302e302f32322d3232203d3e20323632323933.roa
File:                     3137392e3130372e3234302e302f32322d3232203d3e20323632323933.roa (raw, json)
Hash identifier:          HhdCLO/po+mX/aF7rafE0l8lh3NlOgmaaLlqxP8iBoE=
Subject key identifier:   AE:6B:0A:08:C5:D4:FE:81:98:88:01:0B:39:91:BD:A0:41:3E:E7:BF
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       0BEE4618B310F3F505A36B2803546F4C320F56AC
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3234302e302f32322d3232203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:43 +0000
ROA not before:           Sun 08 Jun 2025 11:19:43 +0000
ROA not after:            Sun 07 Jun 2026 11:24:43 +0000
asID:                     262293
IP address blocks:        179.107.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ee:46:18:b3:10:f3:f5:05:a3:6b:28:03:54:6f:4c:32:0f:56:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:43 2025 GMT
            Not After : Jun  7 11:24:43 2026 GMT
        Subject: CN=AE6B0A08C5D4FE819888010B3991BDA0413EE7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:99:ed:6b:92:31:51:a2:83:55:a4:d3:a6:
                    d5:0e:8b:6e:20:c6:96:c1:5f:f9:de:7a:57:45:ed:
                    18:ea:30:4b:44:fd:ce:d2:f7:c4:b4:a1:52:9a:b6:
                    63:2c:01:82:4a:6d:95:60:cb:3e:10:71:47:51:bd:
                    c6:1a:65:a1:b2:ea:ac:9f:d6:d8:84:10:89:27:4d:
                    63:0f:0b:a7:9c:a4:ac:48:9c:ef:44:ed:31:d5:13:
                    40:82:2c:ef:82:a2:79:33:4a:9c:6a:39:53:46:1f:
                    36:91:9b:a0:36:6c:cb:5c:d3:9d:1d:e6:43:a0:11:
                    11:ef:28:a1:e3:ff:94:e4:55:f7:08:02:78:a7:43:
                    bd:3d:6d:9f:db:9d:e8:a8:89:10:e0:bc:e8:c4:0f:
                    2b:cc:6e:4e:26:4b:04:b2:33:c8:fc:b2:eb:8a:dd:
                    04:e0:d9:37:96:35:49:1e:55:f9:ec:be:c8:33:40:
                    6d:80:4f:89:46:a7:0c:5f:2b:33:7a:c5:13:46:1f:
                    2e:95:9d:a6:ec:72:fc:c3:f3:f6:f7:d2:7c:c4:30:
                    70:b1:84:0c:dc:37:a6:ca:11:30:5c:68:19:cc:91:
                    6c:39:b4:27:27:96:40:6f:90:2d:fd:5b:7c:80:48:
                    d0:90:94:a8:12:2c:3d:05:6b:fe:ce:f3:ff:a9:ea:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:0A:08:C5:D4:FE:81:98:88:01:0B:39:91:BD:A0:41:3E:E7:BF
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3234302e302f32322d3232203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:cf:5d:19:e5:8d:37:43:f8:e9:63:c4:61:9d:b4:4f:22:
         8b:1b:0e:3a:ba:b7:70:7f:62:d1:09:6f:f1:ec:53:03:8d:6c:
         f4:31:8c:9a:73:e1:71:0e:c6:b5:2c:98:a5:61:21:5e:1f:ce:
         17:7c:a5:9b:d3:61:13:d0:63:99:07:c2:3a:98:9b:d5:50:b5:
         69:55:9d:04:0b:ed:51:74:90:26:3c:ec:ec:20:05:a9:85:00:
         c0:e3:0d:be:96:50:9a:84:33:fb:29:ac:92:ed:89:18:67:43:
         2a:b8:74:39:9d:58:e8:38:4e:d4:d6:9a:02:a1:ec:70:b2:3f:
         b0:2b:f6:34:65:12:c4:a1:78:f1:68:5f:02:a3:92:da:d9:58:
         9e:a6:eb:64:3d:e7:6d:2b:2e:b4:43:2f:39:bf:66:e5:9a:d1:
         fc:79:10:4e:dc:6d:8d:f4:2a:b7:e9:d1:86:ea:34:37:13:7f:
         9a:14:5c:9c:52:d2:f9:da:48:f6:32:5f:f8:6d:04:ef:94:0d:
         a1:6a:f7:67:18:82:7a:1c:f0:9c:ea:56:fd:02:d4:20:78:94:
         52:a3:06:e6:bc:eb:4f:0e:10:4d:0c:ea:7a:58:3c:c1:c5:b9:
         3f:7f:32:18:b0:f2:5b:15:a8:ac:41:32:c6:19:80:07:e6:54:
         04:86:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:18 2025 by rpki-client