Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          RoM8bxIW0GOsB3l4hHcFmnW+6LdtUPIJwbDPcrdSaxA=
Subject key identifier:   52:91:08:AA:A3:57:AA:3C:18:3F:30:D7:DC:1A:AE:54:1F:D5:FF:D7
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       66A1CFA8A6E6A312FE0A66B7A9B655980316CA47
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:17:43 +0000
ROA not before:           Fri 22 Aug 2025 21:12:43 +0000
ROA not after:            Fri 21 Aug 2026 21:17:43 +0000
asID:                     52706
IP address blocks:        2804:c70:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a1:cf:a8:a6:e6:a3:12:fe:0a:66:b7:a9:b6:55:98:03:16:ca:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:12:43 2025 GMT
            Not After : Aug 21 21:17:43 2026 GMT
        Subject: CN=529108AAA357AA3C183F30D7DC1AAE541FD5FFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:13:f0:70:d7:2e:2a:2f:89:7f:ea:93:e4:
                    c8:46:0f:92:05:d5:82:72:00:d5:94:76:18:5f:c0:
                    8e:96:75:33:d2:ae:5c:c0:71:9e:1a:ee:0c:4e:dc:
                    fd:b0:f1:85:a1:86:d2:4e:0d:48:e4:f5:40:e5:8b:
                    19:0d:b5:ed:64:83:d9:c4:ec:ff:8c:22:dc:ee:4c:
                    9f:f9:47:8f:75:c8:47:40:a2:48:df:3c:a0:78:21:
                    38:46:31:a8:ec:f3:76:cf:0d:6c:17:54:af:f3:95:
                    74:46:ec:7b:cb:36:8f:28:96:cd:33:6a:01:28:06:
                    20:94:38:c5:49:47:d3:2b:32:8b:d2:dc:4e:21:45:
                    77:4b:de:70:7e:ff:fd:87:f8:34:84:5b:bf:cd:72:
                    00:81:0a:9b:b2:20:70:e6:39:33:22:00:37:65:a3:
                    86:09:65:01:64:e1:e2:bf:15:dc:7d:4f:64:fa:19:
                    ba:5e:77:02:ce:f5:63:0b:f6:08:6b:a0:58:2e:20:
                    a5:b7:6f:9f:01:c4:aa:e6:0e:92:07:71:7f:a7:ed:
                    7b:36:7e:32:99:77:2a:42:53:31:76:1c:6f:48:05:
                    14:11:63:fc:3f:09:52:e7:d1:32:4c:fa:50:9b:3f:
                    06:0a:62:f4:07:bf:f2:12:cc:0a:e2:84:a2:b0:20:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:91:08:AA:A3:57:AA:3C:18:3F:30:D7:DC:1A:AE:54:1F:D5:FF:D7
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:c7:30:6a:b2:b1:1e:1d:4a:c6:1f:91:ee:44:98:45:73:f4:
         58:10:0c:93:43:ec:94:2e:40:79:87:b6:ca:c9:0d:57:95:d8:
         49:b4:51:ba:b6:3d:d1:c7:79:a3:0c:64:ee:7e:e5:fc:26:e8:
         f4:60:0b:0c:6a:26:59:ef:4c:8e:8a:3c:56:66:ba:8d:2c:8d:
         91:ad:a6:7a:23:2e:65:44:b3:22:9c:5e:84:cb:7f:6b:07:a4:
         8f:6a:e7:2e:b4:40:be:74:fd:c7:3e:26:af:d6:b3:20:a6:1d:
         87:05:4a:f2:35:4f:b1:10:05:00:5a:62:f8:1f:98:af:9c:6f:
         26:dc:72:d4:d9:b0:ba:d9:0f:e4:95:42:55:4e:05:9d:0f:7a:
         e6:24:7f:3a:bf:8e:22:b7:c8:74:d5:ee:82:52:c1:cc:a5:d3:
         4a:aa:4c:d0:5a:d5:77:16:6c:ed:5e:12:5c:9b:db:e6:e1:f3:
         69:29:4f:8e:02:ca:37:1c:dd:aa:98:de:13:52:95:57:6c:9e:
         75:4d:79:22:d3:95:ae:85:53:b2:54:ae:a0:dd:f0:10:a1:74:
         d1:87:73:92:f5:55:b0:a0:1b:ec:bd:9b:f6:0b:1c:e2:28:e0:
         52:00:27:f3:f8:4b:dd:73:51:f4:fb:2f:95:9f:60:2c:f4:60:
         82:65:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:31:09 2025 by rpki-client