Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3235322e302f32342d3234203d3e20323632323933.roa
File:                     3137392e3130372e3235322e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          ikCTVsgb4v1KBe9SCoE8J4X27SrWK1LnV6B70bwuvbI=
Subject key identifier:   21:87:0F:9B:8D:62:0D:7E:70:B5:B9:F9:F0:14:4A:21:81:95:4F:76
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       7F747001641843602616D89D3240A6B25C2C85F1
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3235322e302f32342d3234203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:48 +0000
ROA not before:           Sun 08 Jun 2025 11:19:48 +0000
ROA not after:            Sun 07 Jun 2026 11:24:48 +0000
asID:                     262293
IP address blocks:        179.107.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:74:70:01:64:18:43:60:26:16:d8:9d:32:40:a6:b2:5c:2c:85:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:48 2025 GMT
            Not After : Jun  7 11:24:48 2026 GMT
        Subject: CN=21870F9B8D620D7E70B5B9F9F0144A2181954F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:27:f4:a6:43:f9:6f:b2:64:08:cc:c3:fe:
                    a4:78:c5:8b:ed:8b:fc:1b:18:e4:eb:3b:ae:7c:d0:
                    10:30:ea:4d:07:47:d8:31:8e:5e:c1:22:22:91:14:
                    45:af:26:3a:04:63:c0:b4:f3:b4:ca:37:c3:2e:7d:
                    54:e4:23:92:95:ff:38:7a:b2:97:8b:2c:5d:dc:12:
                    b6:7f:02:30:64:4e:02:8b:49:7d:91:4a:19:7a:92:
                    a7:ba:92:46:21:9b:f7:25:27:70:3f:31:60:c1:39:
                    e2:33:b6:fe:bb:99:55:b3:c7:57:ab:98:ad:91:1c:
                    8d:a3:23:15:53:22:aa:26:26:c9:97:5b:f8:19:52:
                    bd:d2:cc:25:f2:74:77:74:70:30:62:9d:37:c2:5a:
                    25:3d:41:f7:0d:0e:25:6b:67:41:36:a6:99:54:1d:
                    2c:11:e8:d3:ef:23:9a:35:b6:d5:e1:5f:78:3f:d4:
                    4c:b3:97:18:0d:24:a5:e6:a5:82:03:23:e9:43:ca:
                    8e:7d:e0:d0:94:58:b1:58:d1:db:7e:6b:63:4b:8f:
                    38:bd:ab:25:90:26:5c:6e:0e:eb:7b:7f:54:9e:c0:
                    2e:57:c2:54:b6:65:83:de:cd:e8:24:0b:95:3a:d3:
                    1e:c0:00:fe:2b:83:d1:f7:d4:59:c7:36:33:10:04:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:87:0F:9B:8D:62:0D:7E:70:B5:B9:F9:F0:14:4A:21:81:95:4F:76
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3235322e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:bb:0a:d9:30:cc:e5:84:1e:21:be:ae:11:cb:9d:5a:de:
         3e:0c:e4:5f:d1:71:51:75:f7:16:76:a1:5e:cc:a1:30:96:71:
         e7:ee:da:23:3e:97:f9:b2:86:0d:da:08:3e:98:39:d5:2d:90:
         be:36:f6:f0:bc:4d:1a:18:d2:e2:8a:4c:3b:6e:32:56:e8:7a:
         77:98:c1:a8:ea:1b:13:30:01:32:a2:9c:58:5d:50:2f:31:62:
         5b:18:2f:ee:30:13:98:39:f5:9d:4b:21:22:2c:7b:e8:12:79:
         b3:bb:46:e6:a0:f1:41:8a:a7:68:96:0c:8d:2d:55:db:00:5d:
         bd:3e:4d:f6:1c:3a:63:e9:ad:53:b8:8a:5b:75:2b:9f:dd:46:
         76:25:dc:cf:a1:16:63:66:e7:00:cc:78:a4:22:ef:6a:f2:0a:
         3a:06:13:19:62:b2:16:75:b8:50:c3:81:c1:5f:65:4a:56:c6:
         15:fe:a7:4c:c1:da:1d:6a:38:fc:8a:cf:60:86:50:96:a7:46:
         04:f5:2b:8d:bd:6e:e0:5d:e2:be:d8:6c:06:5e:c9:21:56:78:
         24:48:b2:9e:ff:14:fd:46:9a:b3:71:fa:88:17:22:91:66:8e:
         b6:b3:c6:1b:ea:3d:b0:8c:66:fb:56:73:05:1a:e3:30:58:50:
         eb:83:e9:be
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf3RwAWQYQ2AmFtidMkCmslwshfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxMEZGQjRDRDk4QTY0RTY3RDBDNUI2Rjk5NEQxQTc5
NzExREY2NTAeFw0yNTA2MDgxMTE5NDhaFw0yNjA2MDcxMTI0NDhaMDMxMTAvBgNV
BAMTKDIxODcwRjlCOEQ2MjBEN0U3MEI1QjlGOUYwMTQ0QTIxODE5NTRGNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/yf0pkP5b7JkCMzD/qR4xYvt
i/wbGOTrO6580BAw6k0HR9gxjl7BIiKRFEWvJjoEY8C087TKN8MufVTkI5KV/zh6
speLLF3cErZ/AjBkTgKLSX2RShl6kqe6kkYhm/clJ3A/MWDBOeIztv67mVWzx1er
mK2RHI2jIxVTIqomJsmXW/gZUr3SzCXydHd0cDBinTfCWiU9QfcNDiVrZ0E2pplU
HSwR6NPvI5o1ttXhX3g/1EyzlxgNJKXmpYIDI+lDyo594NCUWLFY0dt+a2NLjzi9
qyWQJlxuDut7f1SewC5XwlS2ZYPezegkC5U60x7AAP4rg9H31FnHNjMQBLr5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIYcPm41iDX5wtbn58BRKIYGVT3YwHwYDVR0j
BBgwFoAUmBD/tM2Ypk5n0MW2+ZTRp5cR32UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC85ODEwRkZCNENEOThBNjRFNjdEMEM1QjZGOTk0RDFBNzk3MTFERjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MTBGRkI0Q0Q5OEE2NEU2
N0QwQzVCNkY5OTREMUE3OTcxMURGNjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM5MmUzMTMwMzcyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALNr/DANBgkqhkiG9w0BAQsFAAOCAQEAigm7
CtkwzOWEHiG+rhHLnVrePgzkX9FxUXX3FnahXsyhMJZx5+7aIz6X+bKGDdoIPpg5
1S2Qvjb28LxNGhjS4opMO24yVuh6d5jBqOobEzABMqKcWF1QLzFiWxgv7jATmDn1
nUshIix76BJ5s7tG5qDxQYqnaJYMjS1V2wBdvT5N9hw6Y+mtU7iKW3Urn91GdiXc
z6EWY2bnAMx4pCLvavIKOgYTGWKyFnW4UMOBwV9lSlbGFf6nTMHaHWo4/IrPYIZQ
lqdGBPUrjb1u4F3ivthsBl7JIVZ4JEiynv8U/Uaas3H6iBcikWaOtrPGG+o9sIxm
+1ZzBRrjMFhQ64Ppvg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:31:37 2025 by rpki-client