Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          w5zdaVNIHMVc7/Lvddt7sSy66xdKC8EPLSht5x2mKVU=
Subject key identifier:   E2:17:09:9F:AD:0C:2B:92:D8:F3:03:D3:7F:64:97:F0:CC:BE:9A:23
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       5B52A6075868DAF3D7532EA38FD94C106F1C1681
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:19:35 +0000
ROA not before:           Fri 22 Aug 2025 21:14:35 +0000
ROA not after:            Fri 21 Aug 2026 21:19:35 +0000
asID:                     52706
IP address blocks:        2804:c70:6006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:52:a6:07:58:68:da:f3:d7:53:2e:a3:8f:d9:4c:10:6f:1c:16:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:14:35 2025 GMT
            Not After : Aug 21 21:19:35 2026 GMT
        Subject: CN=E217099FAD0C2B92D8F303D37F6497F0CCBE9A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:12:33:bd:46:4c:f2:47:be:a1:e0:81:1e:
                    f2:56:12:2f:14:3c:71:4d:5d:7d:94:c8:71:f9:7b:
                    4c:a6:d0:23:96:f0:ca:cd:17:ee:00:89:b7:f7:e7:
                    ae:d5:07:c1:a3:05:07:b6:14:22:25:2a:66:1e:c8:
                    5e:08:d2:25:aa:9d:74:13:35:01:63:05:76:a6:b4:
                    73:e4:42:50:a1:cf:1d:6d:68:30:63:09:2a:61:d8:
                    ac:a8:20:f8:55:dc:54:55:9c:d7:59:7a:3f:35:d4:
                    c9:0c:53:fc:c5:66:61:29:b1:bb:c9:c7:74:80:83:
                    41:f6:eb:77:72:78:60:72:0b:3c:1d:59:1d:59:23:
                    07:11:63:f8:4b:c2:63:99:d0:ec:1d:32:cf:d9:4e:
                    9b:4d:6e:47:55:80:a5:d3:d9:66:c0:04:49:5f:0a:
                    31:5e:54:da:08:17:bb:17:41:6a:71:71:fd:a2:c1:
                    a1:06:ba:51:fb:9d:7d:9d:d8:44:90:89:f4:22:f0:
                    0b:5a:19:8c:ba:8a:cc:18:de:58:ec:19:dc:fb:9a:
                    2e:8b:65:b0:0d:c9:ed:fe:f6:49:d6:1a:46:6a:fb:
                    bc:ac:b7:5d:74:cb:13:91:05:57:85:a4:47:31:cd:
                    37:0f:04:d0:d1:4a:61:0f:be:f0:89:4c:2d:07:19:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:09:9F:AD:0C:2B:92:D8:F3:03:D3:7F:64:97:F0:CC:BE:9A:23
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:d6:df:1b:8e:ec:4d:38:23:9d:53:67:f9:12:16:d1:c3:
         1a:31:4c:9c:16:ef:fc:25:b8:d0:e4:35:5d:58:91:7c:0f:28:
         15:34:a6:46:7b:8e:bf:ad:13:b4:de:90:e9:b5:cc:5f:49:4e:
         97:56:61:b4:07:18:62:aa:e7:7c:b9:fb:67:fb:84:67:f3:3c:
         7a:ec:60:50:ee:2c:9e:c9:20:b3:20:90:94:5d:f9:37:12:46:
         06:ad:21:0f:01:db:10:75:93:cd:00:19:5d:3d:5b:80:b7:a7:
         72:30:5f:4b:57:0e:47:45:a8:00:10:c3:db:79:af:d9:17:98:
         8c:44:87:43:db:04:41:6e:ea:83:b3:18:67:a2:ad:f2:d6:b3:
         b6:e8:bc:5e:0e:7e:e1:21:d3:49:59:f4:5e:fd:07:d1:b9:0d:
         a9:bd:28:c4:b2:ac:08:7a:df:24:b1:19:5e:c6:86:99:f8:1a:
         0f:61:9e:80:ab:5c:3f:8f:f0:05:09:e9:8b:f8:86:8b:a3:e7:
         4f:83:41:cd:3d:80:2a:40:c3:6d:e1:70:e9:06:9f:e1:28:db:
         4c:31:dc:5f:a5:06:73:a2:78:72:1d:39:7e:07:2b:ee:43:25:
         26:6b:65:38:c5:a6:14:28:76:06:1f:ff:d6:c0:cc:aa:46:1b:
         c5:c1:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:34:33 2025 by rpki-client