Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653336303a3a2f34342d3434203d3e20323638313338.roa
File:                     323830343a353839383a653336303a3a2f34342d3434203d3e20323638313338.roa (raw, json)
Hash identifier:          KmxuAVT4tkYPQk8qINOfCBYNgnZ7xOYk0oNMmhe3q50=
Subject key identifier:   40:9C:45:5B:A6:90:DB:44:8C:1C:DE:13:8C:DF:64:D3:98:E6:16:BA
Certificate issuer:       /CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
Certificate serial:       4A69EC9D1A3B8203F44BCDA16FAF9D0ACC8AEECA
Authority key identifier: B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653336303a3a2f34342d3434203d3e20323638313338.roa
Signing time:             Mon 02 Jun 2025 17:23:25 +0000
ROA not before:           Mon 02 Jun 2025 17:18:25 +0000
ROA not after:            Mon 01 Jun 2026 17:23:25 +0000
asID:                     268138
IP address blocks:        2804:5898:e360::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl
                          rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:69:ec:9d:1a:3b:82:03:f4:4b:cd:a1:6f:af:9d:0a:cc:8a:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B60ED4BAF1002CB172904FB372EB8C72E9276C0D
        Validity
            Not Before: Jun  2 17:18:25 2025 GMT
            Not After : Jun  1 17:23:25 2026 GMT
        Subject: CN=409C455BA690DB448C1CDE138CDF64D398E616BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:89:a3:87:62:e7:e8:9e:0c:d0:48:ca:3e:
                    76:20:49:e1:95:0b:91:40:d7:22:95:8d:6c:be:a1:
                    1d:98:61:75:7b:58:2e:97:00:5b:98:42:c7:0f:df:
                    db:e4:1f:0a:2f:11:f0:70:26:49:37:2e:f7:9f:9d:
                    44:a6:5a:b6:9b:ce:b6:2f:c3:ab:14:53:76:e6:56:
                    63:54:0e:d4:98:a8:32:97:67:3a:57:8b:93:8c:7b:
                    5a:71:ed:66:cc:e3:8f:4f:62:b5:d6:5d:9b:d8:05:
                    52:77:ba:f1:8c:fd:c8:6f:5e:64:2b:9c:3c:d9:8a:
                    ad:a9:7f:af:1e:37:15:df:78:4b:d4:c8:03:3c:2d:
                    b5:c5:97:34:85:41:8e:a0:c7:14:f8:0a:73:48:07:
                    a7:8c:c2:05:6a:f1:4f:87:8c:3b:5d:eb:81:05:65:
                    fa:b9:af:3a:30:e7:82:88:18:4f:54:7d:5a:c4:3b:
                    c8:21:e1:2f:1d:51:61:88:5b:74:1a:3a:d9:12:68:
                    65:02:7f:38:d6:14:eb:45:46:68:56:5d:7a:ce:ac:
                    b7:c5:bd:eb:32:67:4f:07:1e:ac:08:87:8c:07:5a:
                    77:c4:0d:2d:47:ed:d6:de:d7:e8:40:e1:63:d2:6e:
                    ac:eb:5b:73:e6:7f:7f:83:f6:19:c0:5d:be:e8:fa:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9C:45:5B:A6:90:DB:44:8C:1C:DE:13:8C:DF:64:D3:98:E6:16:BA
            X509v3 Authority Key Identifier:
                keyid:B6:0E:D4:BA:F1:00:2C:B1:72:90:4F:B3:72:EB:8C:72:E9:27:6C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B60ED4BAF1002CB172904FB372EB8C72E9276C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/1/323830343a353839383a653336303a3a2f34342d3434203d3e20323638313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5898:e360::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:69:33:b3:fc:f9:a7:15:7f:d3:8e:d9:24:6a:86:0e:2b:7d:
         15:1f:8d:aa:6a:ff:30:19:8d:4f:b0:0e:3f:8e:81:32:f7:b0:
         33:63:b3:d2:8b:be:42:30:3c:e0:19:1a:37:59:aa:5d:c3:dc:
         ae:18:12:c7:49:1f:16:b5:9e:c0:06:22:67:4e:88:28:63:a2:
         bd:10:10:23:a8:89:d4:49:39:2e:a3:24:f9:3e:2c:03:4e:8f:
         1f:08:86:d4:da:b5:6a:a8:55:8c:13:21:5b:c2:5a:ab:dc:45:
         38:31:49:12:15:52:42:33:9e:33:44:0f:8a:83:db:78:ee:d1:
         72:69:35:a9:dd:27:cf:45:a1:d0:26:e0:ec:f0:82:91:d6:13:
         87:96:0c:a1:3f:52:58:75:ec:d7:22:7b:fd:4e:22:04:63:86:
         da:da:5f:e3:e0:0e:c8:4e:76:fc:9f:57:18:5a:f2:f7:b6:50:
         21:d9:c0:5f:d4:86:05:ce:ce:5b:bd:8e:22:4b:c8:d2:59:c1:
         54:1f:f6:d7:c9:24:49:2a:8d:62:0c:70:88:ff:d4:9b:42:6b:
         66:a1:c6:df:6e:81:58:8e:46:ec:19:c4:e0:8f:b8:60:2c:5c:
         af:74:16:d6:60:24:14:2f:4d:d2:6f:bf:a5:6c:81:4d:0c:50:
         39:0e:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:23:43 2025 by rpki-client