Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
File:                     3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (raw, json)
Hash identifier:          hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=
Subject key identifier:   EB:66:E2:1D:17:C1:13:BF:B4:DB:37:02:B3:85:E3:B8:FB:D2:C8:F1
Certificate issuer:       /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
Certificate serial:       59F419E402E8C28DB85623F0A13879D77661F703
Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa
Signing time:             Wed 16 Apr 2025 10:34:47 +0000
ROA not before:           Wed 16 Apr 2025 10:29:47 +0000
ROA not after:            Wed 15 Apr 2026 10:34:47 +0000
asID:                     265018
IP address blocks:        160.238.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl
                          rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 22:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f4:19:e4:02:e8:c2:8d:b8:56:23:f0:a1:38:79:d7:76:61:f7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14
        Validity
            Not Before: Apr 16 10:29:47 2025 GMT
            Not After : Apr 15 10:34:47 2026 GMT
        Subject: CN=EB66E21D17C113BFB4DB3702B385E3B8FBD2C8F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:9f:b3:b9:e6:9e:07:43:05:a4:88:48:c7:
                    ca:11:d8:92:b8:d6:22:df:5a:26:b2:68:d5:5b:90:
                    6c:ce:fe:7a:5f:f4:7b:96:ad:72:6e:b9:61:8c:dd:
                    2c:43:c5:b7:b9:f6:6c:fc:79:ba:39:f0:a3:9d:7a:
                    31:23:dd:f7:9a:09:51:f8:16:62:3b:2c:03:9f:1b:
                    58:b1:38:84:43:ad:f8:65:6c:f1:59:e5:65:d9:49:
                    61:34:5f:05:62:f9:e0:c3:6d:ce:95:7c:35:92:ec:
                    9a:18:17:49:e3:53:37:d8:d2:57:da:a4:9f:06:c6:
                    be:61:69:c9:d8:cf:8d:56:6b:b5:8a:99:32:18:a5:
                    6a:3e:23:37:76:b6:d6:e7:2f:20:a8:8a:84:26:da:
                    74:53:fa:8a:6a:e6:86:5a:9a:7d:66:5b:32:9e:64:
                    c4:d5:a3:55:61:7a:ae:ed:82:d8:88:10:2e:8d:77:
                    96:fa:63:6b:50:21:32:ef:1a:92:ae:70:1b:7e:c2:
                    d3:40:95:71:87:49:70:d6:63:62:6c:b5:d6:c3:e8:
                    70:66:ff:e4:85:bd:a6:72:b9:e2:e1:00:ab:23:f2:
                    94:41:c4:c5:cd:00:de:0c:8b:0f:60:fd:ea:17:ec:
                    ee:5f:a6:1d:bb:70:be:69:63:89:f5:37:1f:c5:a7:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:E2:1D:17:C1:13:BF:B4:DB:37:02:B3:85:E3:B8:FB:D2:C8:F1
            X509v3 Authority Key Identifier:
                keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:37:22:55:fd:04:19:d8:05:84:f5:ed:af:dc:12:9b:5d:
         1a:ab:06:b9:0f:20:b1:e1:88:db:e1:b3:0f:29:43:ef:d4:f7:
         8c:a7:27:20:dd:59:69:55:ff:d6:98:fe:dd:ed:05:f9:d0:33:
         bc:78:59:d5:ec:12:ca:07:24:66:eb:9c:ca:e6:56:94:eb:21:
         3b:b9:90:93:0f:ce:43:1d:d6:4e:ab:0b:d6:12:93:05:e8:ef:
         e6:22:2a:82:f9:20:26:90:45:2b:1d:4f:74:ac:6e:3d:5e:f5:
         80:73:fa:e3:d0:ae:47:3a:33:09:a4:44:de:d4:7c:89:be:55:
         a3:b6:3f:9f:e9:e9:4e:19:c0:3a:b1:4f:87:96:85:0e:ce:bc:
         d6:ec:eb:55:29:11:0c:27:ca:ba:40:5c:66:14:55:2c:37:60:
         67:18:20:88:19:91:e2:17:53:f1:73:28:09:66:e5:19:95:9a:
         6d:53:90:ca:1e:f1:5e:19:e9:dc:a9:61:af:72:f5:59:37:81:
         78:45:6b:6d:e9:c3:00:7d:b4:91:cc:3f:e5:39:e0:27:5c:e4:
         5e:3b:4e:b9:12:49:11:2a:07:ac:42:e9:c3:52:65:fc:be:09:
         84:82:3b:53:35:43:7a:27:12:c8:c8:5b:cd:88:6b:a5:12:73:
         b7:fc:e3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:10:32 2025 by rpki-client