Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          USBlgkYDYhvxAnOHnMuDVWDM2o5RyUD/FzUbUXAHFtA=
Subject key identifier:   B0:BE:21:0E:0B:9E:5D:36:9E:69:61:CF:A7:4F:66:A4:7E:B2:F1:C6
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       0D8DADCFA92E33D22A3FA88A81BFDF91E8F94DB9
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:22:46 +0000
ROA not before:           Fri 22 Aug 2025 18:17:46 +0000
ROA not after:            Fri 21 Aug 2026 18:22:46 +0000
asID:                     52706
IP address blocks:        2804:c70:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8d:ad:cf:a9:2e:33:d2:2a:3f:a8:8a:81:bf:df:91:e8:f9:4d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:17:46 2025 GMT
            Not After : Aug 21 18:22:46 2026 GMT
        Subject: CN=B0BE210E0B9E5D369E6961CFA74F66A47EB2F1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:aa:82:70:b1:76:2f:a0:50:95:ca:2f:a0:
                    3e:7f:ec:b2:b0:c5:af:1d:53:18:b3:76:9b:7b:48:
                    ad:af:a3:ba:e2:90:35:93:69:c0:02:33:96:98:8b:
                    78:48:d2:42:5f:00:10:a2:1c:3f:d5:71:3b:34:c7:
                    cd:6a:36:d2:fb:2c:52:9f:e1:3b:9f:fe:1f:9d:99:
                    e0:23:6f:c5:b7:03:59:e5:d3:24:c0:44:43:5e:dd:
                    04:d4:d6:66:b5:6f:7e:58:8b:4a:1a:a7:7d:df:09:
                    0a:68:41:a6:76:1a:18:e5:1a:fc:0c:0b:d5:60:fd:
                    72:99:0b:d3:a9:9c:39:89:8d:5a:6f:05:2d:0c:ba:
                    2c:ec:b1:37:83:cd:d8:1f:dc:11:57:ca:2d:58:60:
                    13:ca:4d:f8:bb:93:54:4a:9c:76:1a:62:ca:f9:f7:
                    73:9a:3d:28:55:8c:3d:15:e9:3f:eb:47:20:fc:08:
                    a5:a7:85:88:23:67:3c:09:e7:a9:b2:39:25:1f:d2:
                    6c:6e:54:19:2a:b8:49:f1:38:98:c2:12:cc:18:86:
                    b6:64:8b:a1:01:ce:3c:06:57:42:c3:0b:14:dc:c7:
                    eb:a9:4f:87:ff:ee:4b:25:b9:6e:43:6f:2b:10:08:
                    98:d8:93:d4:6d:bb:74:38:c2:c3:64:68:d6:50:03:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:21:0E:0B:9E:5D:36:9E:69:61:CF:A7:4F:66:A4:7E:B2:F1:C6
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a33643a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:d3:16:46:81:65:9b:72:17:34:06:ba:69:71:aa:eb:2c:
         f4:ab:dd:71:58:ae:0a:49:77:33:49:75:bd:c3:a2:b2:bc:05:
         3a:93:cc:13:0d:58:b2:1a:58:04:ed:88:25:d6:0d:bf:f9:09:
         23:21:3b:68:ff:70:3a:c9:d5:c8:55:35:d9:c6:06:c4:f8:06:
         52:ad:f9:24:1a:d6:26:43:4d:32:e6:34:3b:c7:10:3b:90:28:
         a1:8f:df:46:19:dd:f7:ee:a1:10:d1:cc:d5:cf:e0:bf:84:ab:
         97:d7:6c:5a:60:d2:3a:1f:e2:cb:e2:d6:b0:10:3b:d0:ce:06:
         78:a4:ab:ce:78:83:a2:16:8e:ae:a3:9f:4c:4a:f3:28:56:ec:
         c9:a2:09:0b:fe:fa:02:48:32:49:68:ca:76:24:9c:80:35:f2:
         14:5c:7e:42:83:04:f6:96:bf:f5:13:c1:db:d2:47:54:13:5a:
         3d:72:b6:a1:c0:f5:cf:6b:dd:fc:91:7f:62:40:a6:50:bd:fc:
         ad:25:be:9e:f5:c9:1a:a6:d8:51:66:99:c1:cd:7b:c4:0d:2d:
         6e:58:1f:52:f3:89:fa:20:42:f0:66:1a:85:79:c2:2b:98:da:
         8a:00:f0:13:c6:eb:d1:95:09:b3:48:b7:6f:88:8d:37:25:6f:
         e8:ae:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:30:41 2025 by rpki-client