Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653130303a3a2f34312d3431203d3e20323638313338.roa
File:                     323830343a353839383a653130303a3a2f34312d3431203d3e20323638313338.roa (raw, json)
Hash identifier:          6HLMq3IXNZRz4AQeKvk2402UgWRxeSttTzqfGhyuexI=
Subject key identifier:   68:E6:6F:DC:C3:4A:AC:8B:85:F1:89:1D:21:7C:70:3D:0C:BB:6F:54
Certificate issuer:       /CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
Certificate serial:       08B9D8AF62711F696286A030E9844B9D4F4F6254
Authority key identifier: B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653130303a3a2f34312d3431203d3e20323638313338.roa
Signing time:             Mon 02 Jun 2025 17:23:24 +0000
ROA not before:           Mon 02 Jun 2025 17:18:24 +0000
ROA not after:            Mon 01 Jun 2026 17:23:24 +0000
asID:                     268138
IP address blocks:        2804:5898:e100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl
                          rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b9:d8:af:62:71:1f:69:62:86:a0:30:e9:84:4b:9d:4f:4f:62:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
        Validity
            Not Before: Jun  2 17:18:24 2025 GMT
            Not After : Jun  1 17:23:24 2026 GMT
        Subject: CN=68E66FDCC34AAC8B85F1891D217C703D0CBB6F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:2b:a2:13:e0:26:5e:ad:48:24:e9:a9:6d:
                    04:76:6d:1a:cc:1e:79:07:a2:80:70:2c:34:a0:3c:
                    73:af:03:1d:f4:0b:11:9e:9e:b3:56:5c:37:5d:e1:
                    68:2d:ce:c0:39:4f:80:31:41:3a:84:e4:6c:21:83:
                    c7:92:2d:8e:70:67:41:be:80:c4:d5:5b:be:81:6e:
                    b6:6b:f6:ab:66:8b:c0:62:a2:81:53:a0:ee:37:69:
                    d0:d2:26:11:df:05:08:6d:d6:02:10:29:c9:29:dc:
                    41:26:85:c1:7a:78:80:76:9b:52:2c:5b:04:84:f9:
                    46:fa:a8:38:fa:9a:68:87:17:3b:1b:1c:f2:8b:18:
                    a3:f2:50:04:67:72:76:ec:9f:76:a2:d3:0c:26:67:
                    cc:af:af:31:33:c0:f5:d0:d1:72:96:fb:b6:75:e5:
                    22:e9:09:18:cc:67:65:75:d2:19:86:f6:d4:f5:1d:
                    1e:8f:e1:d5:d4:d6:e8:43:78:d8:90:6e:f9:5f:67:
                    9e:39:6a:52:88:19:c9:ec:85:7f:bf:eb:63:8b:4a:
                    ad:d7:56:40:9f:35:ff:43:0f:f7:ac:57:84:e5:06:
                    68:54:a2:7a:2c:97:0d:34:b6:c9:41:33:89:98:a7:
                    71:5f:1f:7f:d7:09:8a:34:64:ac:8e:3b:62:2c:f2:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E6:6F:DC:C3:4A:AC:8B:85:F1:89:1D:21:7C:70:3D:0C:BB:6F:54
            X509v3 Authority Key Identifier:
                keyid:B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653130303a3a2f34312d3431203d3e20323638313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5898:e100::/41

    Signature Algorithm: sha256WithRSAEncryption
         95:82:c4:38:fe:27:8d:1a:69:73:a8:4b:03:35:a2:1a:e3:f2:
         35:86:d5:b2:5c:8f:48:cd:41:f7:69:e2:67:c9:a0:02:69:58:
         66:c4:13:9d:2b:6f:bc:de:71:82:1f:0f:b8:a3:26:b0:7c:71:
         5c:b8:cb:0b:45:3a:c9:16:e8:09:8e:d7:d3:45:3c:68:1b:e7:
         50:35:f2:bd:3c:7f:c7:07:3e:bd:21:b5:4a:99:c4:5f:81:bf:
         c8:6d:2c:eb:e6:05:c1:75:2f:05:ec:d5:bd:11:e9:26:35:08:
         f3:f7:ff:83:29:4d:ec:42:19:14:45:1f:f1:1c:d0:2d:cd:43:
         32:db:c4:6d:2c:a2:ae:e1:d4:e3:ca:02:d5:29:90:9e:33:56:
         32:bf:5f:a1:bd:6d:f2:f1:54:2e:48:00:c1:ed:c6:82:42:5b:
         6f:c4:95:86:08:57:f8:7f:72:4b:df:42:36:98:19:03:95:5f:
         57:f6:61:dc:cc:34:9a:1d:56:65:9e:e6:ad:65:52:64:d4:f6:
         b0:00:0b:a7:ad:33:c1:43:1d:90:32:dd:91:30:c2:52:79:58:
         40:72:7e:f6:ea:0f:9a:3e:f1:24:49:c4:bc:42:40:e1:7b:76:
         b5:64:e5:f0:0b:11:da:19:b4:fd:ab:4f:73:05:b4:4a:ed:f4:
         d0:f0:d4:9f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUCLnYr2JxH2lihqAw6YRLnU9PYlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYwRUQ0QkFGMTAwMkNCMTcyOTA0RkIzNzJFQjhDNzJF
OTI3NkMwRDAeFw0yNTA2MDIxNzE4MjRaFw0yNjA2MDExNzIzMjRaMDMxMTAvBgNV
BAMTKDY4RTY2RkRDQzM0QUFDOEI4NUYxODkxRDIxN0M3MDNEMENCQjZGNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpSuiE+AmXq1IJOmpbQR2bRrM
HnkHooBwLDSgPHOvAx30CxGenrNWXDdd4WgtzsA5T4AxQTqE5Gwhg8eSLY5wZ0G+
gMTVW76BbrZr9qtmi8BiooFToO43adDSJhHfBQht1gIQKckp3EEmhcF6eIB2m1Is
WwSE+Ub6qDj6mmiHFzsbHPKLGKPyUARncnbsn3ai0wwmZ8yvrzEzwPXQ0XKW+7Z1
5SLpCRjMZ2V10hmG9tT1HR6P4dXU1uhDeNiQbvlfZ545alKIGcnshX+/62OLSq3X
VkCfNf9DD/esV4TlBmhUonoslw00tslBM4mYp3FfH3/XCYo0ZKyOO2Is8mEzAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUaOZv3MNKrIuF8YkdIXxwPQy7b1QwHwYDVR0j
BBgwFoAUtg7UuvEALLFykE+zcuuMcuknbA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZaMmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oy
aFMvMS9CNjBFRDRCQUYxMDAyQ0IxNzI5MDRGQjM3MkVCOEM3MkU5Mjc2QzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2MEVENEJBRjEwMDJDQjE3
MjkwNEZCMzcyRUI4QzcyRTkyNzZDMEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2WjJiR3VMNHNEMjZxRHpFRUhXU2hibjFrcGhCeTNhUjk1ZlpYQTNqMmhTLzEv
MzIzODMwMzQzYTM1MzgzOTM4M2E2NTMxMzAzMDNhM2EyZjM0MzEyZDM0MzEyMDNk
M2UyMDMyMzYzODMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBygEWJjhADANBgkqhkiG9w0BAQsF
AAOCAQEAlYLEOP4njRppc6hLAzWiGuPyNYbVslyPSM1B92niZ8mgAmlYZsQTnStv
vN5xgh8PuKMmsHxxXLjLC0U6yRboCY7X00U8aBvnUDXyvTx/xwc+vSG1SpnEX4G/
yG0s6+YFwXUvBezVvRHpJjUI8/f/gylN7EIZFEUf8RzQLc1DMtvEbSyiruHU48oC
1SmQnjNWMr9fob1t8vFULkgAwe3GgkJbb8SVhghX+H9yS99CNpgZA5VfV/Zh3Mw0
mh1WZZ7mrWVSZNT2sAALp60zwUMdkDLdkTDCUnlYQHJ+9uoPmj7xJEnEvEJA4Xt2
tWTl8AsR2hm0/atPcwW0Su300PDUnw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:01:06 2025 by rpki-client