Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          3q8UHHoOTOvXh7LuTzFd3gOscolXgHBbxXiAgNqwqrg=
Subject key identifier:   D2:30:AB:2E:CC:EE:9B:51:EA:5E:C3:B5:40:C0:DE:2B:3A:FD:6B:E6
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       11125D4F9B45CBECA93EACEEC49165CEADC7F86A
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 19:03:57 +0000
ROA not before:           Fri 22 Aug 2025 18:58:57 +0000
ROA not after:            Fri 21 Aug 2026 19:03:57 +0000
asID:                     52706
IP address blocks:        2804:c70:2006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:12:5d:4f:9b:45:cb:ec:a9:3e:ac:ee:c4:91:65:ce:ad:c7:f8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:58:57 2025 GMT
            Not After : Aug 21 19:03:57 2026 GMT
        Subject: CN=D230AB2ECCEE9B51EA5EC3B540C0DE2B3AFD6BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:b5:a7:b7:c7:e9:92:aa:72:2c:b3:8e:15:
                    6c:49:35:d5:f9:cf:9d:8a:55:e8:1b:f6:6e:c2:89:
                    1f:3d:0f:cc:d8:05:d5:8e:16:bf:b0:05:53:81:ac:
                    60:51:fc:fb:70:d7:7b:65:b5:da:a0:b8:ca:6f:89:
                    19:d2:d7:f6:37:4e:24:41:0e:43:4a:0e:ae:1e:85:
                    f8:79:b4:ad:a7:6b:30:8e:5a:63:01:56:0c:4e:2c:
                    4c:0f:4b:bf:26:6d:3f:da:50:cc:20:fe:a4:41:86:
                    4c:49:08:cc:31:70:ff:4b:7d:b1:e8:a6:cb:5e:8d:
                    d4:f2:c1:97:dd:d2:97:5d:c7:1d:e0:d8:b3:fd:fa:
                    aa:b9:65:d5:dc:47:bf:a9:a7:44:ab:36:16:3f:5f:
                    74:f7:72:2c:d5:8e:93:f6:d1:ed:2e:bc:73:af:91:
                    99:72:b9:93:f6:e1:72:b9:92:f9:b9:1d:e6:56:a5:
                    45:df:0e:3d:d7:23:66:c5:bf:a7:4a:f4:2b:da:96:
                    ef:7b:95:cf:11:e7:6d:1a:a2:02:20:44:07:c7:19:
                    e0:a7:7b:20:a8:7d:48:e7:21:4d:6b:57:66:4e:b6:
                    84:1e:2d:ea:4a:d1:e8:e2:71:7f:53:93:44:ac:45:
                    7c:1a:06:33:47:fb:6b:53:83:da:42:85:eb:59:2b:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:AB:2E:CC:EE:9B:51:EA:5E:C3:B5:40:C0:DE:2B:3A:FD:6B:E6
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2006::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:8c:ec:76:be:7c:4f:d1:50:82:5b:8b:05:72:1a:ec:2b:
         c1:ef:ee:4e:49:d4:a5:4f:43:d3:e6:c3:e2:99:a6:60:13:71:
         97:68:ca:d0:70:d8:80:fa:b2:00:a6:e8:94:4a:2c:87:09:f8:
         0b:4e:84:c5:dd:20:b4:e6:53:5b:51:e6:63:ca:c1:59:d2:f1:
         d5:03:1d:3a:cf:c8:9d:f4:0d:1a:0c:35:2d:ba:a7:00:29:df:
         c7:36:90:30:e7:ad:d6:64:a8:d7:8f:8c:e7:2a:9e:95:30:3e:
         02:41:8c:4b:72:2e:e4:0d:b6:86:a8:f6:b3:56:6c:ae:ed:12:
         82:72:14:51:be:f5:1a:19:a8:3e:28:75:fb:31:21:ee:b6:f7:
         39:10:95:31:3d:70:24:d1:8b:ac:4c:07:3a:ff:ca:04:d6:7a:
         fb:3c:47:bb:49:35:c4:bd:be:19:e4:df:96:06:de:d8:7d:c0:
         f3:91:60:bb:12:22:fc:99:ef:f1:0e:bc:0c:9e:3d:06:ae:c9:
         b9:5e:18:c1:15:7c:56:c8:c1:71:6e:35:ca:4d:3e:76:f2:84:
         41:64:35:d1:d5:d2:90:85:b8:91:4e:9b:ae:c6:3e:26:76:95:
         1f:bd:29:5f:9f:48:74:11:17:6e:98:d2:f6:a9:e8:fa:ed:6e:
         b2:82:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:06:52 2025 by rpki-client