Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          d2oEIC/96FwS1D2mFeUo0oK9TR+j4hLgcovcPKGfoQE=
Subject key identifier:   AD:C1:A3:8F:7D:1F:85:44:8E:E7:E6:6B:27:ED:01:B1:F7:0E:1C:E4
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       10A32C3230B4774F8382DEEE718E9FB8DB8E4124
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:29:04 +0000
ROA not before:           Fri 22 Aug 2025 18:24:04 +0000
ROA not after:            Fri 21 Aug 2026 18:29:04 +0000
asID:                     52706
IP address blocks:        2804:c70:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a3:2c:32:30:b4:77:4f:83:82:de:ee:71:8e:9f:b8:db:8e:41:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:24:04 2025 GMT
            Not After : Aug 21 18:29:04 2026 GMT
        Subject: CN=ADC1A38F7D1F85448EE7E66B27ED01B1F70E1CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:68:72:e9:da:dc:1b:99:5d:d8:60:55:56:
                    14:cd:f3:1e:5c:dc:d6:ab:e2:86:ce:fe:ac:81:a4:
                    40:e2:4a:f9:89:29:d1:dd:34:32:5c:34:4c:b5:92:
                    c8:9c:a2:9e:a0:26:e6:a7:f7:1e:58:56:51:fa:6f:
                    a4:38:c2:64:27:6c:ff:38:a5:ea:08:2b:b3:c7:1f:
                    65:a5:41:74:85:89:c5:22:ec:e2:b5:49:89:ea:00:
                    78:20:af:59:f2:68:2f:e7:31:ef:7c:4e:98:82:56:
                    cf:27:4e:b3:b1:e7:da:58:c1:13:65:c2:c3:12:7d:
                    18:f2:de:10:94:73:1a:dd:e4:ee:ba:40:ee:1c:f5:
                    6d:60:ba:38:65:2e:28:8a:4f:ab:12:c0:47:e5:90:
                    42:28:95:b0:a0:11:87:ff:98:7b:2b:f5:a9:90:31:
                    01:18:67:8f:57:b3:58:9e:b6:1a:52:9d:72:dd:24:
                    31:0a:31:ae:11:c8:85:51:97:68:3d:9d:aa:3b:0e:
                    1d:56:a7:10:4a:b7:54:5c:a5:f3:97:ef:e2:74:a4:
                    9c:22:b6:93:98:34:19:c0:4f:07:12:b7:b3:ce:b4:
                    02:6d:de:c3:98:2e:c9:ba:58:c7:7b:ae:2a:37:ac:
                    44:b4:ec:fb:59:89:db:c3:d3:91:4f:e3:54:20:bb:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:A3:8F:7D:1F:85:44:8E:E7:E6:6B:27:ED:01:B1:F7:0E:1C:E4
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:06:2e:26:23:5c:f4:3d:dd:37:71:c4:18:77:41:ea:02:
         0c:3a:2c:59:b6:60:98:4d:52:ed:50:7c:55:fa:a1:3e:d8:e8:
         02:63:a2:09:cf:02:21:00:c0:75:a8:13:7f:e3:a2:75:c6:a2:
         2c:f6:19:d8:6a:c5:78:a8:64:36:d8:30:35:f3:a8:75:7b:8e:
         4e:b6:22:44:d9:8a:e0:c5:50:05:f6:62:e3:be:95:cc:c3:93:
         fe:b1:8e:89:64:87:74:67:8c:21:cd:59:36:a3:fe:45:99:7b:
         1c:a5:ca:5c:91:c9:6b:b8:84:92:14:05:1a:bb:e6:49:4d:06:
         c4:58:ec:19:43:44:2c:99:f8:f8:cc:07:39:00:e5:39:ae:69:
         e9:63:23:e7:b0:83:6e:03:e5:e8:48:4d:67:8b:03:e4:97:02:
         9d:31:e5:b3:d6:09:79:ba:e7:f5:9a:86:82:01:35:fb:34:85:
         37:a3:a4:3e:8c:cd:4d:6a:8c:51:7f:fa:46:8e:84:8d:3d:cc:
         3b:e0:cb:04:81:81:38:5d:f7:7d:dd:6e:22:f1:b0:d5:01:1e:
         c1:5f:8b:e3:2b:3c:ff:fe:67:85:45:8c:7f:91:9a:b5:69:a9:
         43:c3:07:49:05:38:9c:e8:88:9b:7d:8a:6b:12:2b:45:22:df:
         93:ee:33:4d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUEKMsMjC0d0+Dgt7ucY6fuNuOQSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIxODI0MDRaFw0yNjA4MjExODI5MDRaMDMxMTAvBgNV
BAMTKEFEQzFBMzhGN0QxRjg1NDQ4RUU3RTY2QjI3RUQwMUIxRjcwRTFDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiNWhy6drcG5ld2GBVVhTN8x5c
3Nar4obO/qyBpEDiSvmJKdHdNDJcNEy1ksicop6gJuan9x5YVlH6b6Q4wmQnbP84
peoIK7PHH2WlQXSFicUi7OK1SYnqAHggr1nyaC/nMe98TpiCVs8nTrOx59pYwRNl
wsMSfRjy3hCUcxrd5O66QO4c9W1gujhlLiiKT6sSwEflkEIolbCgEYf/mHsr9amQ
MQEYZ49Xs1iethpSnXLdJDEKMa4RyIVRl2g9nao7Dh1WpxBKt1RcpfOX7+J0pJwi
tpOYNBnATwcSt7POtAJt3sOYLsm6WMd7rio3rES07PtZidvD05FP41Qgu+BDAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUrcGjj30fhUSO5+ZrJ+0BsfcOHOQwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzIzMDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcCACMA0GCSqGSIb3DQEBCwUAA4IB
AQA5zwYuJiNc9D3dN3HEGHdB6gIMOixZtmCYTVLtUHxV+qE+2OgCY6IJzwIhAMB1
qBN/46J1xqIs9hnYasV4qGQ22DA186h1e45OtiJE2YrgxVAF9mLjvpXMw5P+sY6J
ZId0Z4whzVk2o/5FmXscpcpckclruISSFAUau+ZJTQbEWOwZQ0Qsmfj4zAc5AOU5
rmnpYyPnsINuA+XoSE1niwPklwKdMeWz1gl5uuf1moaCATX7NIU3o6Q+jM1NaoxR
f/pGjoSNPcw74MsEgYE4Xfd93W4i8bDVAR7BX4vjKzz//meFRYx/kZq1aalDwwdJ
BTic6IibfYprEitFIt+T7jNN
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:20:42 2025 by rpki-client