Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653332303a3a2f34332d3433203d3e20323638313338.roa
File:                     323830343a353839383a653332303a3a2f34332d3433203d3e20323638313338.roa (raw, json)
Hash identifier:          rPIiNKXI1P+LHNb7ImnEl/d0IZQnESLFk3VpD4Z/aL8=
Subject key identifier:   72:21:14:46:51:CD:06:58:8F:39:BC:20:5C:76:8F:A6:D2:56:42:84
Certificate issuer:       /CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
Certificate serial:       19F88AAA2874C91B222EA567907AB945FBC4907C
Authority key identifier: B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653332303a3a2f34332d3433203d3e20323638313338.roa
Signing time:             Mon 02 Jun 2025 17:23:24 +0000
ROA not before:           Mon 02 Jun 2025 17:18:24 +0000
ROA not after:            Mon 01 Jun 2026 17:23:24 +0000
asID:                     268138
IP address blocks:        2804:5898:e320::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl
                          rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f8:8a:aa:28:74:c9:1b:22:2e:a5:67:90:7a:b9:45:fb:c4:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
        Validity
            Not Before: Jun  2 17:18:24 2025 GMT
            Not After : Jun  1 17:23:24 2026 GMT
        Subject: CN=7221144651CD06588F39BC205C768FA6D2564284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:8d:e7:73:53:61:0a:6c:48:8e:92:49:a2:
                    39:37:57:ef:5a:98:e9:5c:57:22:09:31:16:8c:4e:
                    6a:da:a9:51:16:51:3c:88:15:96:2a:97:df:eb:6c:
                    e3:a9:bc:f1:a0:46:22:8f:3d:2d:bf:5d:8e:92:0c:
                    d6:56:70:51:68:f9:b5:22:4b:91:61:19:4c:06:1e:
                    91:9e:74:b3:ad:1b:a6:7f:30:62:91:cf:de:e5:15:
                    92:ad:bc:95:20:89:c3:8a:b4:76:7d:37:4e:e0:79:
                    3e:69:a2:87:85:3f:ed:09:e5:77:ca:6e:0b:f0:21:
                    e6:8d:53:75:ca:c2:59:66:72:88:44:b1:f1:63:99:
                    29:3a:3d:20:ed:ce:be:6b:46:93:95:90:47:0f:39:
                    cd:67:e8:d8:4d:51:e3:42:1c:2c:29:c1:4e:41:ac:
                    75:ca:3b:6f:0b:b8:03:f2:1f:35:36:8f:03:d1:66:
                    a0:f1:ce:33:80:b9:6e:27:e2:66:b1:16:51:fb:aa:
                    44:68:75:1f:bb:f0:a9:94:68:92:7d:51:44:9c:98:
                    cd:ce:fa:d2:9e:b7:60:7c:f5:3a:9f:8f:39:e1:c5:
                    77:ce:92:81:20:b6:cb:60:ca:dd:fb:e4:bf:b6:c2:
                    a6:bc:92:c2:d2:33:87:f1:93:9c:54:6c:01:88:b4:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:14:46:51:CD:06:58:8F:39:BC:20:5C:76:8F:A6:D2:56:42:84
            X509v3 Authority Key Identifier:
                keyid:B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653332303a3a2f34332d3433203d3e20323638313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5898:e320::/43

    Signature Algorithm: sha256WithRSAEncryption
         93:58:a8:90:60:0e:ec:27:06:4d:ea:f6:e3:c4:c6:50:11:0f:
         82:49:d6:ca:b6:c8:c5:11:8e:6a:19:6c:81:e4:0d:e6:4c:59:
         2a:14:f9:cb:46:87:59:d5:18:f0:99:07:0b:a6:4d:a8:2b:39:
         15:51:5c:97:f2:9a:b3:83:dc:13:93:cd:12:a1:2f:c4:71:6b:
         90:e1:be:0c:2f:9a:18:62:0b:14:83:aa:03:29:d8:2b:68:62:
         75:00:3d:08:27:e2:a7:a3:5e:cc:9d:33:2a:5f:b5:99:7c:11:
         d9:c1:02:7e:e0:8a:d5:f9:69:40:d7:88:60:d1:3b:bc:11:b9:
         21:3b:7a:bd:b2:1f:f0:3b:5a:d5:3c:15:1d:2a:f9:48:57:76:
         0d:3a:f7:33:0e:be:d1:ca:ae:e1:e9:36:bb:b5:44:2c:27:3e:
         af:b0:f5:80:9c:68:92:83:af:13:f4:3d:49:e5:0a:32:ca:7a:
         f0:79:41:2e:c9:2b:00:4d:96:d1:18:22:11:df:e6:3b:25:67:
         88:1e:02:db:fb:80:b2:bb:be:78:13:13:bc:38:54:e1:ba:3b:
         fd:65:de:87:de:df:ab:ca:29:0c:cc:1c:0d:0d:32:2b:23:5c:
         4b:eb:70:59:bc:5d:5b:4d:86:6a:bc:a0:09:fc:9e:99:68:c8:
         5f:47:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:01:02 2025 by rpki-client