Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          /hR/U0QL8rIwL5RAK+pgmfTrqCvikfy4yQIZzyR8CVw=
Subject key identifier:   B0:6E:17:BE:9C:E5:5B:64:9F:C4:03:43:63:E4:AF:49:D1:B6:71:A0
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       3A80D8D7815893C3A9E5420F37BEC0C172C8C842
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:13:37 +0000
ROA not before:           Fri 22 Aug 2025 21:08:37 +0000
ROA not after:            Fri 21 Aug 2026 21:13:37 +0000
asID:                     52706
IP address blocks:        2804:c70:4001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:80:d8:d7:81:58:93:c3:a9:e5:42:0f:37:be:c0:c1:72:c8:c8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:08:37 2025 GMT
            Not After : Aug 21 21:13:37 2026 GMT
        Subject: CN=B06E17BE9CE55B649FC4034363E4AF49D1B671A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:83:70:a9:1d:f9:0c:67:8a:59:37:be:ad:
                    ce:5e:ed:bd:ef:1b:45:22:2f:8c:a1:f6:21:ff:cc:
                    38:e3:58:93:04:83:c9:fe:7e:50:a3:68:32:c9:26:
                    3b:96:74:87:0e:b8:70:e7:c7:a8:45:e9:b6:86:c1:
                    33:2b:27:99:ee:68:11:32:bf:1e:04:52:26:2a:75:
                    52:f7:16:39:b7:3e:59:f1:dc:92:24:3a:bf:84:48:
                    e2:81:08:cc:86:9f:50:65:ba:f7:26:2a:0d:58:9e:
                    bb:b3:16:12:7f:a7:cd:99:2e:a8:7e:9e:3b:05:1d:
                    6e:ab:17:2c:8d:31:70:07:46:19:d8:4e:36:be:83:
                    01:73:fc:5f:83:84:86:e4:dc:3e:76:3f:20:e9:11:
                    10:8b:ca:dd:6f:2f:a6:e9:b0:8c:35:d9:14:b9:5a:
                    cc:13:74:a3:3a:c6:09:4c:f9:22:f8:6b:b6:e1:69:
                    90:13:64:64:d6:b3:1b:c2:ff:08:81:da:f6:af:ae:
                    0b:2b:f9:91:42:e4:60:55:65:cd:0f:61:1f:55:ce:
                    34:54:71:93:88:23:0f:3e:52:ce:42:dd:62:46:69:
                    53:aa:ad:a4:5c:b6:0f:58:98:85:c6:c3:de:4c:ed:
                    0a:43:05:e2:99:98:9b:5c:26:e0:09:b9:8b:2a:b0:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:17:BE:9C:E5:5B:64:9F:C4:03:43:63:E4:AF:49:D1:B6:71:A0
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:be:d6:2b:cd:2e:13:23:92:31:be:2f:5a:77:bb:c3:18:
         67:4e:55:4d:de:5e:8f:98:64:46:f0:98:c2:c5:6a:fa:e9:ed:
         76:0d:d1:22:06:95:e2:59:5a:b1:1a:ce:f3:1a:13:04:d9:0f:
         c5:0a:2e:89:b9:71:9d:cd:36:9f:7b:8b:80:2b:cb:ce:bb:65:
         28:89:ae:cf:54:66:94:7c:e0:59:39:2f:c8:28:19:1b:1f:a1:
         17:b5:4d:c4:ba:06:92:20:ef:51:9c:d3:59:b6:bc:49:d0:89:
         e6:92:79:24:a9:8d:84:61:2c:66:f6:4a:36:0d:99:0e:a0:fd:
         f6:0a:27:50:d8:6d:06:c5:96:e8:32:8e:29:b8:97:01:ed:34:
         f8:19:33:97:56:76:e5:77:7e:f1:ac:40:7b:a4:05:78:4a:08:
         d5:79:57:89:2d:0d:80:83:7f:b2:7d:ac:b8:08:45:ea:4e:df:
         9f:56:c4:0b:8d:7b:66:98:d2:d2:d5:e1:cc:a9:07:0a:8f:c3:
         cc:3d:c1:34:0f:28:a2:bb:94:08:d8:1a:d7:a8:bc:50:a3:c3:
         c1:d3:f9:b6:3e:2f:ca:5d:3e:52:db:9c:4e:60:9c:d2:d6:9f:
         6d:ca:0f:54:3f:80:78:f3:c7:b0:72:e9:55:78:05:1e:f4:8b:
         e6:4f:86:ec
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUOoDY14FYk8Op5UIPN77AwXLIyEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIyMTA4MzdaFw0yNjA4MjEyMTEzMzdaMDMxMTAvBgNV
BAMTKEIwNkUxN0JFOUNFNTVCNjQ5RkM0MDM0MzYzRTRBRjQ5RDFCNjcxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvM4NwqR35DGeKWTe+rc5e7b3v
G0UiL4yh9iH/zDjjWJMEg8n+flCjaDLJJjuWdIcOuHDnx6hF6baGwTMrJ5nuaBEy
vx4EUiYqdVL3Fjm3Plnx3JIkOr+ESOKBCMyGn1BluvcmKg1YnruzFhJ/p82ZLqh+
njsFHW6rFyyNMXAHRhnYTja+gwFz/F+DhIbk3D52PyDpERCLyt1vL6bpsIw12RS5
WswTdKM6xglM+SL4a7bhaZATZGTWsxvC/wiB2vavrgsr+ZFC5GBVZc0PYR9VzjRU
cZOIIw8+Us5C3WJGaVOqraRctg9YmIXGw95M7QpDBeKZmJtcJuAJuYsqsCX5AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUsG4XvpzlW2SfxANDY+SvSdG2caAwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzQzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcEABMA0GCSqGSIb3DQEBCwUAA4IB
AQCa7L7WK80uEyOSMb4vWne7wxhnTlVN3l6PmGRG8JjCxWr66e12DdEiBpXiWVqx
Gs7zGhME2Q/FCi6JuXGdzTafe4uAK8vOu2Uoia7PVGaUfOBZOS/IKBkbH6EXtU3E
ugaSIO9RnNNZtrxJ0InmknkkqY2EYSxm9ko2DZkOoP32CidQ2G0GxZboMo4puJcB
7TT4GTOXVnbld37xrEB7pAV4SgjVeVeJLQ2Ag3+yfay4CEXqTt+fVsQLjXtmmNLS
1eHMqQcKj8PMPcE0Dyiiu5QI2BrXqLxQo8PB0/m2Pi/KXT5S25xOYJzS1p9tyg9U
P4B488ewculVeAUe9IvmT4bs
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:32:06 2025 by rpki-client