Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3235342e302f32342d3234203d3e20323632323933.roa
File:                     3137392e3130372e3235342e302f32342d3234203d3e20323632323933.roa (raw, json)
Hash identifier:          tC1/4LYzWZuvTyJOKcoxXlMiF1IVeGmAr/96o2nA9qw=
Subject key identifier:   15:7B:41:F0:97:A1:76:0F:3E:01:94:ED:16:65:43:15:6C:CD:84:EB
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       65A9A0CEA767A48C6E22877678A8246D66AA9704
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3235342e302f32342d3234203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:47 +0000
ROA not before:           Sun 08 Jun 2025 11:19:47 +0000
ROA not after:            Sun 07 Jun 2026 11:24:47 +0000
asID:                     262293
IP address blocks:        179.107.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a9:a0:ce:a7:67:a4:8c:6e:22:87:76:78:a8:24:6d:66:aa:97:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:47 2025 GMT
            Not After : Jun  7 11:24:47 2026 GMT
        Subject: CN=157B41F097A1760F3E0194ED166543156CCD84EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:fb:56:0c:1b:24:94:3c:b5:b8:61:2b:50:
                    a5:c2:93:ee:a9:fc:5b:35:30:ee:40:b9:41:1e:ec:
                    9b:cf:dc:fd:9d:ea:ee:47:8c:71:76:e0:19:6c:c9:
                    54:45:94:48:2c:ca:86:b5:63:b2:2e:a3:00:ef:23:
                    5c:39:8e:0b:24:56:14:83:19:1a:f0:51:04:1a:99:
                    d5:5d:d7:c0:d8:ea:a9:dc:0a:4c:71:86:38:95:e0:
                    45:03:6a:b4:81:44:32:70:9b:79:1a:c4:77:c6:b9:
                    3d:52:c4:93:ee:82:58:a9:72:15:1a:e7:86:37:f1:
                    8b:49:22:96:79:50:9f:14:b2:2d:cb:b9:6e:bd:65:
                    55:b2:ad:f2:9f:cb:a9:de:7a:1c:73:eb:92:cc:c5:
                    f6:14:10:90:f7:59:a4:70:04:a9:b2:d8:13:ef:67:
                    48:19:bd:7f:04:97:21:e1:9b:0f:c6:a9:db:51:3f:
                    e2:65:c3:06:7f:0d:07:bf:75:28:77:fd:e2:29:19:
                    28:a9:e4:9d:e0:d9:8d:94:84:f8:ab:f3:73:51:83:
                    35:76:eb:76:23:f5:bf:a9:a6:60:c8:6c:ba:00:af:
                    71:ca:5d:1e:be:00:76:1f:d9:c4:0a:f3:d9:bb:99:
                    d9:c4:56:4f:0f:3e:8c:0b:bd:41:4d:71:60:40:dc:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7B:41:F0:97:A1:76:0F:3E:01:94:ED:16:65:43:15:6C:CD:84:EB
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137392e3130372e3235342e302f32342d3234203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:69:8d:ac:29:de:d5:4b:e7:8f:6d:73:27:49:07:3f:ce:7a:
         8d:1b:da:e3:4f:d2:2a:7b:fa:6f:ec:10:b8:82:14:9b:98:e2:
         8a:12:1d:c3:70:ba:ad:c0:90:b7:16:49:68:7a:18:8e:9c:43:
         dc:7c:21:8c:58:6e:c4:d0:63:8b:f6:b3:9c:37:0c:1b:c4:6f:
         d0:70:15:5a:61:91:d3:02:35:d7:0b:5f:b7:8e:bb:4c:57:cd:
         03:15:ea:3f:80:50:22:b5:47:75:2e:49:a1:60:c3:72:a6:dc:
         6e:d5:9b:09:2d:e0:f0:ee:9d:7a:45:63:23:04:79:b8:98:5d:
         8a:b0:17:5e:1d:28:cf:10:b2:ac:c0:57:ff:5e:d5:7c:83:17:
         2b:3a:a4:6e:27:20:f2:2c:aa:bf:59:5f:31:58:a4:00:6a:66:
         79:71:44:0d:f1:a5:73:b7:b7:d7:42:35:8d:41:22:31:57:87:
         23:3f:c2:1e:30:ec:42:52:7a:6b:30:08:13:56:10:3e:94:56:
         75:e8:4b:ce:91:5d:be:3b:f0:bb:0b:ed:51:e9:e1:6a:83:21:
         2b:08:7f:9d:03:f2:04:c1:85:3b:83:2e:d4:f0:b0:84:96:90:
         d2:7f:22:7c:5b:e6:f3:72:99:61:48:59:13:55:f5:cc:ff:20:
         b7:8a:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:35:24 2025 by rpki-client