Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
File:                     3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          2Ktknv2M8Cece++XyEudfMQJ/ULC2gdDI5GxcLUugSU=
Subject key identifier:   19:66:FD:1B:95:AE:67:45:5A:D3:F9:AC:4F:AE:5A:BF:31:8E:10:9D
Certificate issuer:       /CN=2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7
Certificate serial:       34E7BEA7F4F916EFF4EE508CC10F3E3BF6D28B6F
Authority key identifier: 2B:7D:84:C8:70:AF:A4:34:D8:F9:50:E0:A3:52:1C:F2:6C:D0:C7:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
Signing time:             Wed 18 Jun 2025 13:38:52 +0000
ROA not before:           Wed 18 Jun 2025 13:33:52 +0000
ROA not after:            Wed 17 Jun 2026 13:38:52 +0000
asID:                     262403
IP address blocks:        187.85.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 04:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:be:a7:f4:f9:16:ef:f4:ee:50:8c:c1:0f:3e:3b:f6:d2:8b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7
        Validity
            Not Before: Jun 18 13:33:52 2025 GMT
            Not After : Jun 17 13:38:52 2026 GMT
        Subject: CN=1966FD1B95AE67455AD3F9AC4FAE5ABF318E109D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:f9:70:b8:1b:dc:80:65:87:3f:ea:6a:d3:
                    e8:74:23:55:0e:10:bb:34:09:88:e0:a4:2a:c0:e3:
                    f0:c7:54:cb:04:ff:39:68:90:29:ac:63:ba:17:52:
                    24:f1:b0:8b:b9:b5:08:90:fa:83:6c:58:bf:6b:b2:
                    08:40:67:47:17:37:37:27:9c:bc:40:1f:f9:b5:ab:
                    00:1e:59:33:14:dd:a8:b4:25:80:e6:8d:1d:38:0e:
                    6b:61:c6:cd:75:fb:0f:ce:95:f4:54:7b:ce:c6:02:
                    f8:fb:fa:00:19:ed:4a:d4:d4:1d:ba:bb:be:17:6f:
                    6e:66:1b:12:04:0c:4f:16:6a:a4:2e:7f:33:a3:81:
                    ce:dc:ec:3b:89:2e:16:48:22:05:12:38:85:3b:c8:
                    a5:37:65:e7:f7:18:14:31:0d:3b:c6:06:9d:f9:48:
                    d8:c2:a0:0c:d1:b0:c8:be:c6:64:82:2c:00:ad:d3:
                    98:eb:e5:f2:e1:b8:bb:43:14:ff:4b:f3:b6:bd:69:
                    e6:9a:bd:30:7d:c5:5d:16:c4:99:bd:f4:9e:ad:42:
                    66:22:3e:16:8a:e4:6e:de:b6:a3:c6:5b:24:2e:99:
                    3d:ea:48:2b:02:2a:af:6d:b2:7d:49:45:52:5f:f9:
                    95:ac:f6:a0:d4:27:3a:4e:c4:52:3c:44:9c:73:17:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:66:FD:1B:95:AE:67:45:5A:D3:F9:AC:4F:AE:5A:BF:31:8E:10:9D
            X509v3 Authority Key Identifier:
                keyid:2B:7D:84:C8:70:AF:A4:34:D8:F9:50:E0:A3:52:1C:F2:6C:D0:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7D84C870AFA434D8F950E0A3521CF26CD0C7F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:6f:1c:a9:07:a5:66:4b:37:5e:ad:78:c8:29:4b:34:49:ad:
         2a:88:4c:49:3f:1f:10:fc:33:ae:d1:ba:c4:dd:f0:93:26:3b:
         63:6f:78:37:cf:28:eb:23:eb:91:ad:b4:e9:f7:1f:27:73:96:
         7c:1f:70:8d:b8:18:90:88:71:b5:51:08:70:94:f9:ca:0d:68:
         51:59:8f:28:a2:62:e3:a0:93:95:5d:6b:32:eb:73:60:64:bb:
         69:f1:09:73:6b:da:17:be:72:43:59:ea:4b:e8:a8:41:11:33:
         d5:8a:68:b9:25:38:85:f5:ef:aa:ff:ae:f5:44:b5:b0:a1:e6:
         95:f8:b6:fb:09:c6:92:b5:2e:06:d3:f0:52:35:88:54:38:b9:
         1e:80:bc:6c:da:6d:0d:d1:f0:23:66:9e:13:9a:f9:d0:5e:65:
         bc:4a:8e:96:79:bb:1b:a6:3e:a5:1d:65:f5:73:c2:7b:2e:4c:
         95:ed:2f:27:44:b0:87:9b:3d:69:65:e9:37:8b:36:3a:ba:e3:
         59:5c:e8:5b:f6:a6:6a:cd:76:bb:3a:8e:05:cf:0b:74:a8:e3:
         c4:2a:35:0a:56:fc:89:70:dc:ec:c4:7b:eb:5a:7f:31:e0:b9:
         80:80:b1:25:83:65:71:0b:3a:df:7e:25:2e:21:fb:99:cb:cf:
         89:1b:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:52:07 2025 by rpki-client