Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          /glRxXdoT4nBx4Z6SV2tzAoA+bW7eEdYqs48OsIsG4E=
Subject key identifier:   C4:7B:DA:75:56:5E:B1:88:2A:7E:9B:F9:30:07:92:40:DD:35:91:C1
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       068C0DFF910EE375AD69C3949A8FA43D598CED1B
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:16:23 +0000
ROA not before:           Fri 22 Aug 2025 21:11:23 +0000
ROA not after:            Fri 21 Aug 2026 21:16:23 +0000
asID:                     52706
IP address blocks:        2804:c70:6002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:0d:ff:91:0e:e3:75:ad:69:c3:94:9a:8f:a4:3d:59:8c:ed:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:11:23 2025 GMT
            Not After : Aug 21 21:16:23 2026 GMT
        Subject: CN=C47BDA75565EB1882A7E9BF930079240DD3591C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:06:c2:a7:16:7a:51:34:21:e9:1b:88:b0:
                    70:f2:26:29:4c:9b:39:95:49:9d:21:e2:72:27:3b:
                    32:c0:b0:af:e9:09:2e:94:ea:ea:d3:f9:8a:58:d6:
                    d0:7a:80:b7:aa:8a:bf:9c:44:da:31:46:27:60:48:
                    98:b3:f0:95:1e:23:ae:50:af:92:69:93:e5:4a:fe:
                    24:ae:8d:34:cd:f1:2f:d1:e7:cc:a6:b7:ae:0b:53:
                    df:06:0a:49:90:ff:c8:2f:e9:93:d6:a1:93:9d:e6:
                    89:14:a5:1a:a7:36:c1:64:b6:5f:ea:bd:79:98:f3:
                    29:1a:96:0f:43:e1:b4:bd:8e:7f:47:67:77:26:80:
                    86:80:31:32:c6:c3:0f:3e:5f:a6:8c:32:65:a4:d3:
                    ab:7f:07:32:5d:81:60:da:a4:81:78:68:8c:a7:69:
                    47:c2:4f:ae:9c:e8:b7:f4:8a:de:b4:09:3a:89:ba:
                    f9:20:e4:2c:0d:6b:6a:1d:b5:64:e2:9f:02:31:9a:
                    a8:a4:08:c2:07:1a:24:3c:f5:06:ee:f4:81:bc:6d:
                    05:9a:85:81:cb:35:9c:97:e2:20:de:51:e8:96:b6:
                    a3:1e:f5:08:4f:b4:e2:66:5a:1d:98:62:55:8d:17:
                    15:41:40:06:b2:27:86:d3:61:2f:4b:cb:f5:b0:34:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7B:DA:75:56:5E:B1:88:2A:7E:9B:F9:30:07:92:40:DD:35:91:C1
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:41:a5:66:71:d0:aa:d4:91:82:d7:96:70:d6:79:1a:14:4c:
         44:56:65:9f:56:57:2f:78:b9:26:11:87:ef:29:4b:4b:52:a9:
         89:46:e7:5c:ad:54:93:01:31:6a:22:8b:82:35:06:08:a5:01:
         0d:61:3b:62:cf:59:62:7d:39:49:27:01:33:f9:60:62:b0:d8:
         8f:5b:0f:10:5c:84:ce:d8:3a:17:c2:9a:d2:20:be:b1:4d:a6:
         f3:b7:bc:f4:3f:a2:c4:5c:d4:2f:34:96:0b:c5:c3:4d:79:43:
         8c:1a:6c:0d:f1:1a:a6:5b:c1:7c:4b:58:8a:88:6a:e5:2f:fb:
         b6:92:1d:2f:49:c7:3c:87:87:56:c2:6d:1c:21:7c:86:a4:39:
         01:97:29:85:82:f7:fc:b2:43:1c:5c:f6:88:14:ed:56:f8:46:
         a0:d2:5f:cd:72:38:b6:be:f2:5c:f4:15:d4:4e:69:d2:bd:99:
         e4:e0:69:d8:12:a9:c6:90:d7:fe:04:15:43:56:ff:58:38:81:
         16:01:c8:16:7b:e2:08:0f:5d:8b:49:23:50:08:8e:a7:bc:03:
         e8:51:17:51:30:3c:07:15:12:a0:80:b8:35:3b:46:fc:0f:63:
         08:4b:0f:f6:8b:0f:83:ae:a1:6c:07:58:96:57:9a:43:f8:f4:
         38:2f:a4:99
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUBowN/5EO43WtacOUmo+kPVmM7RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIyMTExMjNaFw0yNjA4MjEyMTE2MjNaMDMxMTAvBgNV
BAMTKEM0N0JEQTc1NTY1RUIxODgyQTdFOUJGOTMwMDc5MjQwREQzNTkxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxQbCpxZ6UTQh6RuIsHDyJilM
mzmVSZ0h4nInOzLAsK/pCS6U6urT+YpY1tB6gLeqir+cRNoxRidgSJiz8JUeI65Q
r5Jpk+VK/iSujTTN8S/R58ymt64LU98GCkmQ/8gv6ZPWoZOd5okUpRqnNsFktl/q
vXmY8ykalg9D4bS9jn9HZ3cmgIaAMTLGww8+X6aMMmWk06t/BzJdgWDapIF4aIyn
aUfCT66c6Lf0it60CTqJuvkg5CwNa2odtWTinwIxmqikCMIHGiQ89Qbu9IG8bQWa
hYHLNZyX4iDeUeiWtqMe9QhPtOJmWh2YYlWNFxVBQAayJ4bTYS9Ly/WwNNy1AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUxHvadVZesYgqfpv5MAeSQN01kcEwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzYzMDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcGACMA0GCSqGSIb3DQEBCwUAA4IB
AQDMQaVmcdCq1JGC15Zw1nkaFExEVmWfVlcveLkmEYfvKUtLUqmJRudcrVSTATFq
IouCNQYIpQENYTtiz1lifTlJJwEz+WBisNiPWw8QXITO2DoXwprSIL6xTabzt7z0
P6LEXNQvNJYLxcNNeUOMGmwN8RqmW8F8S1iKiGrlL/u2kh0vScc8h4dWwm0cIXyG
pDkBlymFgvf8skMcXPaIFO1W+Eag0l/Ncji2vvJc9BXUTmnSvZnk4GnYEqnGkNf+
BBVDVv9YOIEWAcgWe+IID12LSSNQCI6nvAPoURdRMDwHFRKggLg1O0b8D2MISw/2
iw+DrqFsB1iWV5pD+PQ4L6SZ
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:04:35 2025 by rpki-client