Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          qJPGKg4Ru8L1SwCuFpeL4nJovP8Zp0a/8WDB67Xdieg=
Subject key identifier:   C8:69:AA:4F:10:58:FB:A4:9F:17:F7:68:D0:1D:93:A7:1C:6A:1D:E7
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       2BAE51EB86EFC7C67C00BB08837DB688D9A4BC99
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:42:56 +0000
ROA not before:           Fri 22 Aug 2025 18:37:56 +0000
ROA not after:            Fri 21 Aug 2026 18:42:56 +0000
asID:                     52706
IP address blocks:        2804:c70:2005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ae:51:eb:86:ef:c7:c6:7c:00:bb:08:83:7d:b6:88:d9:a4:bc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:37:56 2025 GMT
            Not After : Aug 21 18:42:56 2026 GMT
        Subject: CN=C869AA4F1058FBA49F17F768D01D93A71C6A1DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:51:c4:e8:51:4b:cb:1a:f7:2c:ec:87:31:
                    12:f8:e2:1a:bd:0c:0d:59:a7:84:1b:06:7e:a3:d0:
                    ad:5d:83:76:90:9e:ba:81:bc:9f:55:19:7e:61:be:
                    09:a1:90:45:65:55:16:91:be:14:2b:1d:17:39:7e:
                    38:71:b8:42:ee:7a:c3:b7:7f:04:e2:11:7d:71:ce:
                    da:4d:ee:80:d0:af:ff:ab:fa:60:97:1f:e9:cc:04:
                    30:27:b1:89:ac:09:b3:95:93:de:0b:9c:68:e0:b5:
                    7b:49:f2:0d:b8:a5:9f:4d:3b:a7:7a:a5:06:23:b4:
                    2e:e6:c3:97:ca:83:7c:78:f8:2e:af:86:b6:d8:e4:
                    4b:db:a3:10:6e:83:28:ab:60:68:b6:45:40:25:16:
                    5a:47:62:ac:18:16:cb:51:74:27:1f:5f:0e:98:5e:
                    66:c9:6d:9a:da:66:77:83:e6:81:85:23:af:cf:05:
                    71:50:d2:34:24:27:8b:41:9c:36:68:b0:ca:ad:78:
                    15:c7:a8:44:fe:9c:59:ff:27:f7:c2:ed:26:4e:b5:
                    63:75:71:c6:d2:84:18:93:15:74:e1:dd:54:69:8e:
                    dc:cf:cf:f7:42:74:91:c3:df:df:0c:0d:3d:f9:48:
                    82:d3:c1:46:c6:00:b7:0e:34:2e:94:72:d7:e2:1f:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:AA:4F:10:58:FB:A4:9F:17:F7:68:D0:1D:93:A7:1C:6A:1D:E7
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2005::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:54:d3:fd:23:b6:c3:d1:15:d5:2a:9b:1e:26:47:71:75:60:
         23:4e:52:57:9a:ad:34:b3:e8:a7:20:82:1b:cd:4d:1d:89:60:
         b4:77:c7:72:af:32:e0:a5:5b:ee:1a:ab:b9:fc:26:6f:37:dd:
         73:cc:24:87:41:b2:6a:34:66:f3:05:22:e2:0b:38:31:ff:2b:
         74:09:d0:c8:3d:18:67:78:f8:71:2c:5e:39:40:c3:b3:d6:28:
         8b:0f:9a:f1:41:74:44:7b:76:52:f4:ab:8a:0e:2b:a9:b2:cd:
         05:3e:f2:e7:67:92:c6:a9:a9:ae:1d:73:1b:36:08:b0:d9:e3:
         4f:04:7b:50:ed:7b:41:11:17:0f:96:80:c1:99:97:89:1d:ba:
         ad:14:d8:36:ec:21:2a:8e:cc:a1:02:8b:4a:0a:5b:7e:ba:1b:
         3e:50:d0:24:40:a8:f9:1b:4a:72:4f:79:4f:da:c3:c1:a5:ca:
         c0:31:ef:b1:65:b2:78:2a:60:94:2a:d5:31:10:ee:36:01:0b:
         90:65:96:d8:26:ee:d1:ee:91:38:66:98:f1:a2:f1:52:f4:bb:
         ed:20:ce:a4:8b:3f:9b:18:70:1c:5b:9e:53:58:ad:05:67:ea:
         c6:77:40:02:2f:d8:13:f5:0a:2d:c4:83:97:1d:ee:df:d9:96:
         ec:13:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:35:32 2025 by rpki-client