Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          dwlqpXDZddJC8xM8wn6DbYNss42a1qjBhEeIpD5ubHI=
Subject key identifier:   63:71:BB:38:07:84:38:A9:1D:C4:CC:FC:F8:F2:94:A8:BD:EE:9C:C7
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       62CFEAFC9FC0C1B7D6A3A5A3264986EA0C44590A
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:14:13 +0000
ROA not before:           Fri 22 Aug 2025 21:09:13 +0000
ROA not after:            Fri 21 Aug 2026 21:14:13 +0000
asID:                     52706
IP address blocks:        2804:c70:403d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cf:ea:fc:9f:c0:c1:b7:d6:a3:a5:a3:26:49:86:ea:0c:44:59:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:09:13 2025 GMT
            Not After : Aug 21 21:14:13 2026 GMT
        Subject: CN=6371BB38078438A91DC4CCFCF8F294A8BDEE9CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:63:10:0f:ca:2b:8a:65:4d:6e:12:7f:d1:
                    82:76:f8:c6:43:37:79:b9:28:fb:d7:65:b8:7b:a2:
                    08:49:6c:de:78:07:88:30:5f:6b:57:a4:39:db:87:
                    22:0d:47:15:20:fa:27:d7:b3:81:b1:d9:17:f2:76:
                    06:b8:97:f6:ce:51:5d:eb:bc:7e:30:57:51:67:42:
                    67:af:bd:70:50:71:8d:d8:96:f6:86:3d:8f:91:b0:
                    6f:3b:fe:0a:d6:c5:b4:c6:f9:c5:93:be:8a:44:a6:
                    de:8b:a3:3a:52:fa:4c:48:d7:df:51:13:c4:a4:1a:
                    27:aa:96:a4:1f:fa:72:c7:8f:d2:82:df:f1:0a:ce:
                    94:b9:e1:37:03:c6:04:56:a4:97:49:b6:61:18:52:
                    8e:14:00:1d:a6:37:c8:60:10:f5:c0:f2:62:62:c2:
                    c9:a1:cd:ee:91:3f:0e:5f:52:20:2f:0e:5b:79:d3:
                    ca:09:1d:cf:07:68:cd:0d:d9:7c:80:5a:58:ae:ff:
                    7c:57:45:3e:47:b3:3e:e3:58:3f:5f:99:44:cd:5e:
                    8d:fd:a3:97:3f:62:ee:e6:f3:3a:de:00:be:7f:71:
                    74:2d:25:fd:c1:3f:71:a6:94:59:59:89:a9:37:aa:
                    1c:2c:c6:eb:35:a3:34:37:a3:78:3f:d1:b6:38:06:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:BB:38:07:84:38:A9:1D:C4:CC:FC:F8:F2:94:A8:BD:EE:9C:C7
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:403d::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:bf:e3:43:56:08:05:04:fc:6a:4c:cc:61:f6:d3:12:69:
         97:5f:1f:3f:c1:f1:2a:76:bf:f7:31:8c:4f:0d:5e:3c:1c:6e:
         17:c2:70:29:73:47:44:39:b4:97:ea:4e:5a:70:d2:36:fe:08:
         e6:1c:e0:0a:79:06:d7:21:fb:d6:a3:d4:dc:e1:23:b2:a0:75:
         ca:ec:dd:31:2a:25:a1:30:fc:00:3a:06:74:f5:ba:cb:7b:fc:
         1b:3b:ad:85:4f:51:84:1c:0b:a3:87:75:93:7d:5c:a1:4e:b9:
         92:5f:35:be:ef:75:cb:fa:33:dd:df:bc:38:41:81:0f:45:fb:
         d0:03:6f:19:22:7e:c0:b5:46:26:22:e6:91:f7:da:40:78:25:
         35:08:d4:cf:79:d7:f8:bb:18:f0:6e:50:c7:14:22:ed:dd:51:
         68:66:8b:76:73:dc:8a:29:12:34:4a:1c:be:04:2d:7c:fd:06:
         42:1f:68:99:c5:33:16:a6:e9:ef:80:a3:fb:65:22:ff:30:67:
         c3:50:06:99:da:e7:66:d6:47:f4:93:5f:21:73:78:68:38:02:
         6a:c9:bf:62:9c:c3:a2:bf:ee:54:8c:ef:43:39:2f:15:8a:29:
         a8:7e:1d:96:ab:fe:46:a6:2a:9a:8c:32:ee:c9:82:ec:b7:50:
         69:fb:50:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:50:42 2025 by rpki-client