Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          fByVDysUkXmyahAlbPL15CPtahWViOY1K7YrDPMr58o=
Subject key identifier:   54:43:37:F9:9D:89:9E:C5:EF:C2:0E:82:70:B6:07:20:95:17:81:5E
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       26533C4AA0F0850D07CFCF6100DB3EB660E90F2C
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:04:42 +0000
ROA not before:           Fri 22 Aug 2025 17:59:42 +0000
ROA not after:            Fri 21 Aug 2026 18:04:42 +0000
asID:                     52706
IP address blocks:        2804:c70:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:53:3c:4a:a0:f0:85:0d:07:cf:cf:61:00:db:3e:b6:60:e9:0f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 17:59:42 2025 GMT
            Not After : Aug 21 18:04:42 2026 GMT
        Subject: CN=544337F99D899EC5EFC20E8270B607209517815E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:4d:52:82:0c:8c:9f:45:b5:6c:80:81:23:
                    e2:4f:b9:bb:f5:56:21:f5:0f:31:a8:45:20:60:4a:
                    b5:d7:08:5f:27:c6:61:cc:0f:04:da:e2:61:18:80:
                    09:17:ee:5c:6c:ae:f6:bd:bc:d9:cf:ee:ea:59:82:
                    d6:7d:43:d0:e1:af:d3:15:b0:7f:de:ec:4a:bd:35:
                    4c:58:1f:7d:aa:69:6a:7d:53:10:53:d0:51:79:14:
                    72:97:81:4d:5f:66:c1:f3:1d:ce:4f:3d:65:fc:c9:
                    50:24:99:db:d4:44:19:04:7e:be:4c:e6:19:d8:df:
                    0b:1a:76:f9:9b:91:29:8f:0d:cd:f8:0b:50:72:15:
                    f8:10:22:75:88:66:c9:2d:a2:df:6f:4c:b8:94:db:
                    5e:f3:e0:9e:63:4c:1b:b6:a0:c7:bd:b5:c3:8a:c2:
                    ce:63:e6:87:55:39:96:b0:e6:f3:94:d1:ce:81:9b:
                    fe:50:91:1e:33:32:ec:62:c8:ef:9b:af:a9:43:1f:
                    57:68:b0:f6:c3:27:01:6a:ee:3a:ec:65:4d:70:fd:
                    69:90:53:2d:29:ed:66:a9:f3:90:9e:07:93:23:a2:
                    c8:8c:da:a5:97:9f:b7:91:08:b7:88:c8:0d:14:dc:
                    3c:f5:17:e3:42:10:db:e6:62:7e:96:b8:97:7d:99:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:43:37:F9:9D:89:9E:C5:EF:C2:0E:82:70:B6:07:20:95:17:81:5E
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:b3:bd:5d:ba:3d:30:6e:95:6d:a0:b3:9c:22:93:ee:53:
         d4:49:27:d2:02:e8:31:d9:7a:91:eb:ef:1b:d6:19:4d:db:e9:
         2b:9d:37:93:ae:67:17:b9:1e:50:de:62:be:51:54:72:65:b9:
         28:5b:bb:6b:d9:3c:78:3f:01:08:8e:7c:98:4c:5a:6c:6a:7a:
         be:bf:f7:52:3f:e6:52:1f:89:31:5f:7d:81:14:d5:5c:ca:ac:
         8e:49:94:d8:af:de:03:56:21:6c:eb:15:0a:05:63:c5:b3:6a:
         d1:67:df:e1:da:f3:cc:5c:12:d1:dc:f6:56:77:b3:08:a5:91:
         65:45:65:7b:b2:13:1f:56:8c:51:6c:62:97:02:d6:86:f1:e5:
         e8:24:88:1e:ac:b6:52:12:ab:4e:60:f8:4d:d3:50:53:4c:b1:
         56:e7:2d:48:62:9c:00:90:2f:c3:6c:b3:87:1e:81:b0:cb:1f:
         b4:01:ab:07:e6:7f:9d:7a:66:14:ec:ea:56:d8:a6:e8:62:37:
         18:0e:88:d0:16:a4:9e:b0:16:0f:55:34:52:72:01:86:d5:fa:
         43:14:29:c8:24:26:26:d8:d8:61:24:e9:44:b1:9f:57:23:86:
         6a:2d:6f:21:1e:34:65:6f:f0:19:3c:d6:14:92:91:ed:fc:56:
         c7:91:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:59:22 2025 by rpki-client