Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          5rqpoVkM+pkdVYLX+LivgZzbAz5JzguEh2aBEWhdNcg=
Subject key identifier:   95:C0:00:58:8F:54:85:B4:10:7B:AE:43:F9:D9:6A:9F:F0:6F:CF:DB
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       5BF4699529DA08F3D560534CAB0F63E8E9AA36D6
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:17:13 +0000
ROA not before:           Fri 22 Aug 2025 18:12:13 +0000
ROA not after:            Fri 21 Aug 2026 18:17:13 +0000
asID:                     52706
IP address blocks:        2804:c70:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f4:69:95:29:da:08:f3:d5:60:53:4c:ab:0f:63:e8:e9:aa:36:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:12:13 2025 GMT
            Not After : Aug 21 18:17:13 2026 GMT
        Subject: CN=95C000588F5485B4107BAE43F9D96A9FF06FCFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:37:7a:c8:14:82:da:9f:4d:66:9a:0d:6a:
                    36:0e:91:6b:5c:82:97:62:99:69:32:d4:c9:d7:3b:
                    4a:60:f8:7f:8f:f1:eb:56:24:22:80:e9:cf:c0:4a:
                    ca:13:f4:35:9b:b1:4b:cd:07:f9:a3:60:b3:8a:63:
                    f8:1f:f5:70:92:b6:0a:19:68:a5:7f:61:31:37:25:
                    f2:55:eb:16:f3:fc:ae:49:a7:f9:53:9b:8b:04:53:
                    62:9b:48:75:d8:b7:cb:99:3d:57:df:eb:6a:52:eb:
                    b5:4f:54:54:f8:c1:a8:31:b7:15:29:45:d6:f6:56:
                    ec:10:1f:65:88:18:91:e3:8f:47:6c:48:68:68:cb:
                    32:aa:3c:00:d7:0b:8b:f9:72:6d:ed:2e:12:0b:46:
                    4d:b1:17:d2:55:3e:1d:09:f2:ee:2d:c9:c7:db:6a:
                    b7:f9:1f:d1:f5:91:44:72:19:7e:39:b0:90:4c:76:
                    55:b2:b3:8d:ac:5d:23:a1:c7:9b:24:0b:d3:74:d8:
                    70:3c:0c:f4:00:83:b8:55:35:a9:14:8f:8e:79:56:
                    5a:3b:ef:40:f3:a4:51:ff:8e:67:f1:25:23:d2:69:
                    03:9d:35:4e:ef:cf:a0:6e:31:9c:78:f5:3d:90:f0:
                    0f:1c:89:be:54:e9:4f:9f:a4:cd:96:3a:a6:53:bc:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C0:00:58:8F:54:85:B4:10:7B:AE:43:F9:D9:6A:9F:F0:6F:CF:DB
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:5f:f6:69:31:66:f9:f9:4f:14:53:d8:5b:9d:c6:74:1c:ea:
         f7:b5:3c:95:c6:6b:99:5d:6e:6d:84:c5:2e:c9:ca:8a:5c:48:
         e8:0f:e8:0a:76:2d:8e:36:e1:62:d0:ac:4c:60:b4:53:fd:cf:
         99:7b:d8:77:12:67:af:b3:04:43:d3:06:a3:a0:98:36:a2:66:
         53:23:5e:58:de:03:08:b5:7e:32:0e:cb:fe:0a:f7:3e:22:7e:
         eb:6f:3b:2f:f0:2f:33:1c:6d:19:25:52:62:92:1a:c0:77:4f:
         78:bb:93:d7:16:44:e6:d8:b3:01:d6:43:fb:bd:a2:46:46:fe:
         f4:78:f4:e0:61:16:b3:74:51:ac:61:8c:fb:25:81:a1:00:b9:
         5d:1b:80:ec:a0:8e:53:d7:c6:8a:84:c9:df:a5:e0:ba:2f:80:
         f7:b9:0c:a3:d4:e1:b6:de:1c:6e:06:5e:40:50:e9:40:c9:2d:
         af:3d:76:32:62:4f:cb:13:0f:10:87:a8:b7:c4:5c:3f:9d:59:
         19:74:a9:4a:1f:cf:8a:09:29:59:77:cd:2f:13:14:74:e2:8e:
         13:3d:55:2b:b2:e6:74:05:41:e4:01:97:89:a0:17:37:12:c9:
         ab:38:0c:4d:03:06:fe:c8:3f:d3:e5:70:4d:58:ce:e5:3c:d5:
         57:61:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:32:15 2025 by rpki-client