Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          rmExyDCnUF4++g3PmqpQz5bdWOcfqqv6/ZeAWEA02j0=
Subject key identifier:   01:CF:06:76:C5:9F:59:60:35:7E:0D:CA:21:24:3B:0A:4B:CD:1A:F1
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       330D90DE5A026F57B44B59CD4A491CE545EE886E
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:09:41 +0000
ROA not before:           Fri 22 Aug 2025 18:04:41 +0000
ROA not after:            Fri 21 Aug 2026 18:09:41 +0000
asID:                     52706
IP address blocks:        2804:c70:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0d:90:de:5a:02:6f:57:b4:4b:59:cd:4a:49:1c:e5:45:ee:88:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:04:41 2025 GMT
            Not After : Aug 21 18:09:41 2026 GMT
        Subject: CN=01CF0676C59F5960357E0DCA21243B0A4BCD1AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:ca:8b:a1:3f:c5:73:5c:ea:07:7f:4f:ec:
                    0b:7e:3e:b6:13:0c:ca:65:2d:11:c2:4f:59:e9:1e:
                    17:af:c3:4c:44:f2:9f:d3:4e:f1:b1:52:29:c4:20:
                    4c:1d:d1:ee:ca:2e:67:ea:38:08:b5:b8:f8:ca:16:
                    9b:b1:7f:6d:1a:71:f8:bf:6c:e6:73:9f:85:62:fb:
                    e5:c9:86:67:33:e7:61:2f:47:95:f9:5a:88:38:b9:
                    ee:85:0c:1b:3d:29:25:49:65:cc:3d:53:27:43:0b:
                    9a:94:9e:38:f6:52:74:96:f8:39:09:da:5a:35:48:
                    ab:bd:dd:1f:24:dd:d5:82:71:46:14:b1:71:27:98:
                    74:a4:f1:27:ec:ba:9b:59:63:17:46:d7:c0:57:8f:
                    50:c5:53:db:9b:e3:b3:8a:fa:a4:2b:18:5b:cb:88:
                    e6:84:38:33:68:0e:f2:b9:8e:35:4e:b8:e6:63:ea:
                    d6:7f:82:fc:33:04:3f:a0:97:68:59:8e:40:66:f9:
                    29:55:a6:02:2b:6a:96:ed:4e:9f:0c:c6:9e:9a:36:
                    ca:44:08:bc:c7:6f:d6:17:b7:db:e0:3a:f4:ff:32:
                    ff:a4:b5:66:21:e4:aa:a0:52:f0:ad:00:5d:25:54:
                    81:b9:24:c4:2a:2f:b0:6b:ef:92:8d:4e:51:89:24:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CF:06:76:C5:9F:59:60:35:7E:0D:CA:21:24:3B:0A:4B:CD:1A:F1
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:08:78:e4:d1:b3:38:b3:91:f7:bd:24:19:28:79:9b:fa:62:
         16:aa:91:54:a6:6e:dc:25:53:a3:83:37:d4:d8:48:50:7a:b8:
         be:95:12:67:ee:e4:7b:dd:18:71:f9:21:37:2d:8e:c7:9c:24:
         85:a9:28:e0:c0:66:71:5b:df:1e:b5:e9:3b:1f:2e:76:ad:a3:
         83:40:c1:4b:61:94:9b:5f:70:1b:7a:5a:c4:a5:1e:a3:04:17:
         9d:73:4e:65:27:cf:df:88:13:96:75:0f:1f:a5:00:e1:dc:ed:
         bb:4e:2b:a1:66:90:f3:d6:77:ee:9d:42:c3:de:a4:87:7e:f1:
         7e:89:47:9e:12:37:45:60:59:66:84:20:a1:a3:b9:0d:4f:0c:
         ba:81:a8:79:c7:40:bd:56:45:f1:1e:a6:c4:42:6e:9f:80:68:
         c7:97:99:77:cb:ad:20:af:e4:96:b2:c4:c8:18:0a:f3:74:46:
         43:16:1a:ad:5b:40:79:19:c9:2a:2b:7f:74:95:f6:01:81:4b:
         05:2e:68:d0:c9:8a:4d:18:65:cc:6d:48:15:78:40:41:ba:b3:
         2e:30:a3:9e:35:6b:52:45:98:32:88:ca:69:f3:01:65:79:49:
         68:64:04:1c:e1:48:f2:6b:b9:de:eb:b0:e9:39:05:ab:f8:ff:
         09:92:84:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:05:17 2025 by rpki-client