Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          Dvl7pXts/mNEieAQkLPEIcwwm+NnFpgCmBc78mkOXEk=
Subject key identifier:   9B:22:3E:E9:94:06:A5:A5:27:7B:54:F8:A6:54:00:FF:0A:77:83:47
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       2C2F4786AD51BB5436748FFCA587C73B8DF80AE8
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:19:08 +0000
ROA not before:           Fri 22 Aug 2025 21:14:08 +0000
ROA not after:            Fri 21 Aug 2026 21:19:08 +0000
asID:                     52706
IP address blocks:        2804:c70:6005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2f:47:86:ad:51:bb:54:36:74:8f:fc:a5:87:c7:3b:8d:f8:0a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:14:08 2025 GMT
            Not After : Aug 21 21:19:08 2026 GMT
        Subject: CN=9B223EE99406A5A5277B54F8A65400FF0A778347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:b9:aa:e1:14:1b:9e:3e:af:3a:75:ed:c1:
                    db:47:91:59:3e:28:22:c7:73:8f:4c:ff:a3:1f:62:
                    e3:de:86:ab:e2:0e:1b:b6:bf:64:36:c5:13:34:4a:
                    a1:ce:66:38:2b:2b:c0:2a:fe:fd:01:b0:51:3b:46:
                    4f:f5:2f:46:18:99:dd:93:25:cf:60:36:2a:e0:96:
                    24:c0:f4:a2:7f:ab:3d:ec:4a:15:cb:50:c2:ec:0f:
                    94:02:ac:2d:fb:f2:53:34:96:7f:00:c3:50:a8:3d:
                    01:df:98:e8:a0:c7:f0:23:09:a3:bf:19:39:db:e5:
                    d2:0c:f6:4a:34:13:eb:e8:a1:c7:98:50:fd:ef:e8:
                    2b:24:e4:ad:96:d3:8e:a2:14:2a:ca:de:75:e2:ef:
                    dc:e4:9e:3e:bd:f8:8e:ee:4a:46:22:48:9f:e0:c0:
                    5a:be:3a:cf:e3:17:ee:99:9e:06:07:b6:23:bb:89:
                    91:c2:67:3f:c1:c2:6f:d5:af:c5:c8:81:e7:d4:a8:
                    4f:38:79:bc:9f:24:88:db:cd:06:8d:12:c7:33:0b:
                    ab:75:56:64:09:3a:fd:be:24:19:5b:db:66:17:94:
                    83:4a:01:d5:8f:67:31:e4:e7:6d:6d:4d:e7:11:85:
                    25:4b:b9:57:91:d0:8f:be:39:29:ba:46:c8:97:81:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:3E:E9:94:06:A5:A5:27:7B:54:F8:A6:54:00:FF:0A:77:83:47
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:22:e8:80:28:d8:63:9b:e1:56:d7:5d:ec:77:1e:bb:7a:7b:
         c8:ab:56:d7:92:67:86:d7:89:3c:e8:fb:f7:c1:e8:68:97:f7:
         32:68:9a:53:5f:b2:d7:2e:38:a0:4e:5b:b5:06:03:97:f4:83:
         fb:ab:32:ba:a7:8a:1c:03:70:4b:43:75:b7:01:f5:b3:dd:ad:
         d6:89:fb:f9:67:b2:5a:e5:1f:ba:4f:3a:a1:a5:65:bf:68:2e:
         79:ac:d8:d8:b4:7d:aa:cc:2b:3c:3f:c0:91:6e:30:5d:39:47:
         da:77:76:67:99:ad:11:3e:37:eb:ce:bc:b5:c3:90:82:66:26:
         ac:49:53:69:0b:2d:ba:08:57:e1:04:c2:7a:59:19:20:81:cc:
         c3:3c:fe:84:7a:5e:e9:54:e4:f6:e1:88:b2:bc:7d:c6:54:a6:
         8a:a9:9b:5b:70:27:ae:a1:82:20:02:47:a8:4a:b4:76:64:32:
         e0:a1:b7:46:7c:0b:e0:8e:58:f6:70:ad:fe:1e:67:19:ea:ca:
         a6:a0:da:ad:b4:9c:0f:06:b0:90:98:42:82:2e:09:07:7c:3c:
         2a:86:5a:0b:a9:71:b6:24:53:a9:38:0e:89:86:35:6b:e8:fe:
         a1:69:5c:15:59:1d:99:4b:ed:53:08:b9:fd:52:90:09:c3:07:
         64:de:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:31:30 2025 by rpki-client