Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3134332e3230322e38302e302f32322d3232203d3e20323634303637.roa
File:                     3134332e3230322e38302e302f32322d3232203d3e20323634303637.roa (raw, json)
Hash identifier:          zRikI29MpCPS1Q02KtBipDwIGMEQv+VnFlcWK4vzq3E=
Subject key identifier:   19:C3:70:81:C7:3B:DF:AC:3B:83:AB:14:72:1A:17:E0:A3:18:75:CA
Certificate issuer:       /CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
Certificate serial:       4D5AD607D1B91C6C7D38B805634C200D1DF72800
Authority key identifier: 60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3134332e3230322e38302e302f32322d3232203d3e20323634303637.roa
Signing time:             Wed 09 Jul 2025 12:45:33 +0000
ROA not before:           Wed 09 Jul 2025 12:40:33 +0000
ROA not after:            Wed 08 Jul 2026 12:45:33 +0000
asID:                     264067
IP address blocks:        143.202.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl
                          rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5a:d6:07:d1:b9:1c:6c:7d:38:b8:05:63:4c:20:0d:1d:f7:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
        Validity
            Not Before: Jul  9 12:40:33 2025 GMT
            Not After : Jul  8 12:45:33 2026 GMT
        Subject: CN=19C37081C73BDFAC3B83AB14721A17E0A31875CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:f8:2c:eb:d7:f5:c2:e1:2f:5b:d5:e9:a9:
                    0c:b9:d1:52:79:a3:af:d1:94:24:c8:1d:b1:ca:c2:
                    fc:c9:b8:72:bf:c3:f0:10:3d:4a:bb:d9:d7:44:92:
                    62:7b:9d:27:45:12:d1:7e:99:4c:2d:73:f7:a7:57:
                    e5:79:c9:6e:f1:cc:c0:bc:66:4d:5e:99:ad:52:5c:
                    6f:da:d7:4d:ad:20:d7:b1:98:a4:dd:a4:e7:1a:1f:
                    69:31:0c:43:c4:e8:fc:62:a5:a5:c0:0e:e1:d3:65:
                    ad:9a:84:c2:a3:9a:1d:53:18:90:7e:aa:93:c9:2d:
                    b5:00:9b:ac:53:75:0c:4c:e2:3c:96:d5:73:1f:9b:
                    c2:39:da:8e:30:cb:d5:62:1c:d7:f6:54:47:b2:a0:
                    f0:14:e2:9b:6b:a4:95:3e:68:ab:37:fc:47:db:ad:
                    04:a0:21:10:2d:a7:c5:e9:94:58:d8:21:5e:61:70:
                    ba:75:77:f9:f6:20:dd:db:b2:29:2f:3b:90:4b:b5:
                    6b:7f:94:a1:46:47:11:64:4e:6d:9d:3c:ca:93:99:
                    36:37:61:f7:90:25:22:2d:d8:2b:d3:c0:26:56:57:
                    2a:e3:29:9a:83:dd:70:7a:be:a8:93:f0:5f:31:01:
                    79:14:82:c0:c1:da:4f:46:55:3f:0f:75:c7:97:d0:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C3:70:81:C7:3B:DF:AC:3B:83:AB:14:72:1A:17:E0:A3:18:75:CA
            X509v3 Authority Key Identifier:
                keyid:60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3134332e3230322e38302e302f32322d3232203d3e20323634303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:bf:c5:20:f4:02:f4:7e:7b:f3:78:35:64:b0:59:e6:50:aa:
         36:3f:d9:8e:4f:63:93:95:37:57:f2:07:00:55:3b:df:4d:50:
         da:91:9e:64:bc:91:92:b4:50:79:eb:8c:a1:6b:d4:1a:67:2b:
         bb:14:2f:13:52:82:e0:99:e4:f3:1a:b3:3f:84:be:f6:5a:27:
         12:d6:7c:0c:0d:81:1e:da:00:02:d2:01:bc:88:9c:81:98:22:
         8c:d7:e8:2c:27:94:ea:38:bc:27:5e:eb:5c:0b:2e:14:85:c6:
         fe:a1:98:0b:fa:7c:d2:22:89:f5:e6:75:9a:0b:fc:22:c2:67:
         3b:90:68:de:0a:2b:97:1c:2f:15:fe:da:f5:11:1d:5e:4d:b9:
         45:e7:09:19:54:5a:dd:d6:6d:42:62:78:44:b3:73:01:45:85:
         86:ba:80:60:0c:6d:08:86:d3:87:28:b0:dd:f9:89:32:f2:0d:
         b9:b8:ca:55:0a:c8:eb:7e:64:ef:34:07:b6:72:b2:ed:12:62:
         22:36:97:d4:61:fd:ae:4a:a9:ce:60:1f:da:45:be:16:d0:53:
         5f:62:b4:44:c7:72:f1:d2:cb:2f:a0:5d:6a:a4:25:10:d2:f2:
         ba:31:e5:e1:ad:d8:b1:f4:6c:ce:b1:68:e1:78:a3:77:6f:3f:
         5e:68:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:48 2025 by rpki-client