Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          9n2cGsIZwST3Y6oVTnpfFOpFkyAcRrdtAZz0iu2bVF0=
Subject key identifier:   E0:54:63:CD:B8:30:AD:87:BA:85:25:36:76:C0:48:55:A2:CD:4B:F8
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       6CFF598DCA3E5CFDF4F4990F13C09C658E34C797
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:03:22 +0000
ROA not before:           Fri 22 Aug 2025 17:58:22 +0000
ROA not after:            Fri 21 Aug 2026 18:03:22 +0000
asID:                     52706
IP address blocks:        2804:c70:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ff:59:8d:ca:3e:5c:fd:f4:f4:99:0f:13:c0:9c:65:8e:34:c7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 17:58:22 2025 GMT
            Not After : Aug 21 18:03:22 2026 GMT
        Subject: CN=E05463CDB830AD87BA85253676C04855A2CD4BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:bb:05:00:3e:76:77:6f:07:bd:51:fc:1b:
                    8e:0f:30:c9:6f:75:13:8d:e9:44:1b:30:32:be:12:
                    20:e9:3d:c5:e8:4a:2d:cb:43:b1:ed:8e:2c:1d:4a:
                    cd:cf:68:c4:ef:67:e8:30:c5:5c:f7:f3:65:6f:52:
                    cb:f8:e3:4e:12:c8:4b:f2:d8:a0:34:d3:57:9a:dc:
                    c1:76:c7:ff:b1:74:e4:e5:c1:97:dc:af:0e:b1:d2:
                    31:ea:f6:6c:d3:f0:ab:fc:b1:30:20:ce:f8:e3:76:
                    ab:0f:ba:13:af:6b:ed:f2:bc:df:78:cc:69:89:e1:
                    77:c8:14:15:82:a2:62:3f:90:0e:ae:3f:f9:a1:fe:
                    e5:8c:2e:d0:62:da:bd:d0:5e:31:eb:ef:61:a8:87:
                    94:5f:17:63:ce:e6:79:5f:86:41:fb:f7:1d:92:d4:
                    51:fd:59:6b:0c:89:74:5f:62:1f:eb:ff:38:0f:98:
                    f1:ab:16:aa:40:bc:57:f7:5d:18:f5:9e:0f:d5:ab:
                    6b:1f:09:6b:12:80:65:49:06:3d:1c:6b:64:61:9a:
                    dd:10:36:c6:28:1c:49:a9:01:3e:72:a7:0c:fc:61:
                    fe:44:bc:1d:d4:a8:54:8d:f5:5a:ba:47:be:f8:f2:
                    0f:96:8f:e7:3d:5e:2f:a7:d5:5e:10:d5:5c:46:4c:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:54:63:CD:B8:30:AD:87:BA:85:25:36:76:C0:48:55:A2:CD:4B:F8
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:40:26:c6:be:b8:f1:56:dd:71:15:02:72:e4:e1:64:d4:
         e6:a3:3e:48:83:08:45:26:58:d7:95:f7:4f:42:d0:37:75:92:
         fb:22:a7:d0:70:bb:63:06:5a:78:cb:33:65:e7:1d:e7:04:0c:
         c9:8d:31:e1:d7:c6:ef:73:e2:c4:f7:80:43:a0:1f:84:37:2c:
         9e:bd:0b:c4:f2:62:2a:20:cc:23:4b:e7:81:48:72:2f:54:fa:
         d9:22:e2:59:11:f3:ac:4e:5a:33:41:51:0a:67:0c:fc:af:5d:
         3f:19:52:d0:50:28:33:22:d6:6a:f3:96:3f:27:d2:a0:10:b3:
         04:7c:a7:55:40:ce:32:c8:d5:06:2b:3a:7f:b9:70:f4:d6:5c:
         a4:17:02:8b:bd:a8:98:fc:61:45:0e:75:8a:39:e6:ae:60:47:
         7e:e2:96:09:28:41:8d:c7:11:3b:de:11:b2:4a:1b:23:62:33:
         65:33:30:cb:57:bb:b9:2d:a1:ec:c8:a6:1c:b8:9e:ba:8a:02:
         75:9a:4f:df:cd:ef:66:2f:36:5f:74:45:f2:ba:4e:77:38:f0:
         ce:3f:e0:78:e7:3d:52:df:3d:21:89:8d:6a:b2:d9:49:d4:f3:
         f4:79:c5:c6:87:d3:04:8c:63:fd:df:df:79:c5:6a:53:f5:00:
         9d:02:99:8e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUbP9Zjco+XP309JkPE8CcZY40x5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIxNzU4MjJaFw0yNjA4MjExODAzMjJaMDMxMTAvBgNV
BAMTKEUwNTQ2M0NEQjgzMEFEODdCQTg1MjUzNjc2QzA0ODU1QTJDRDRCRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcErsFAD52d28HvVH8G44PMMlv
dRON6UQbMDK+EiDpPcXoSi3LQ7HtjiwdSs3PaMTvZ+gwxVz382VvUsv4404SyEvy
2KA001ea3MF2x/+xdOTlwZfcrw6x0jHq9mzT8Kv8sTAgzvjjdqsPuhOva+3yvN94
zGmJ4XfIFBWComI/kA6uP/mh/uWMLtBi2r3QXjHr72Goh5RfF2PO5nlfhkH79x2S
1FH9WWsMiXRfYh/r/zgPmPGrFqpAvFf3XRj1ng/Vq2sfCWsSgGVJBj0ca2Rhmt0Q
NsYoHEmpAT5ypwz8Yf5EvB3UqFSN9Vq6R7748g+Wj+c9Xi+n1V4Q1VxGTAtzAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU4FRjzbgwrYe6hSU2dsBIVaLNS/gwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQMcCAwDQYJKoZIhvcNAQELBQADggEB
AEe5QCbGvrjxVt1xFQJy5OFk1OajPkiDCEUmWNeV909C0Dd1kvsip9Bwu2MGWnjL
M2XnHecEDMmNMeHXxu9z4sT3gEOgH4Q3LJ69C8TyYiogzCNL54FIci9U+tki4lkR
86xOWjNBUQpnDPyvXT8ZUtBQKDMi1mrzlj8n0qAQswR8p1VAzjLI1QYrOn+5cPTW
XKQXAou9qJj8YUUOdYo55q5gR37ilgkoQY3HETveEbJKGyNiM2UzMMtXu7ktoezI
phy4nrqKAnWaT9/N72YvNl90RfK6Tnc48M4/4HjnPVLfPSGJjWqy2UnU8/R5xcaH
0wSMY/3f33nFalP1AJ0CmY4=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:08:01 2025 by rpki-client