Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          Haweq4jca6CUQTJHUlVtNcXPBBN2RyrP9gAtvBSm06U=
Subject key identifier:   B2:36:3F:6F:32:1E:CE:AE:56:D5:D8:A8:13:81:FC:32:26:81:00:4C
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       41D2D8A38ED22413DF8C86FA1E57691CB1E11DDF
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:20:36 +0000
ROA not before:           Fri 22 Aug 2025 18:15:36 +0000
ROA not after:            Fri 21 Aug 2026 18:20:36 +0000
asID:                     52706
IP address blocks:        2804:c70:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d2:d8:a3:8e:d2:24:13:df:8c:86:fa:1e:57:69:1c:b1:e1:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:15:36 2025 GMT
            Not After : Aug 21 18:20:36 2026 GMT
        Subject: CN=B2363F6F321ECEAE56D5D8A81381FC322681004C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:70:e2:b1:be:25:4d:18:be:e0:4f:25:99:
                    43:f8:35:8f:dc:80:b5:d2:29:bf:d7:e6:bc:f1:a2:
                    83:13:bc:09:4e:e9:b4:5f:40:e5:fe:0f:c2:55:4b:
                    36:f0:08:9f:1a:12:a7:0b:c6:6d:02:d6:7f:1c:c1:
                    5d:cb:1a:06:7f:4c:af:3e:b3:7c:34:0e:54:32:6b:
                    f8:e3:86:ee:44:4e:12:5b:35:fc:71:c6:4d:0e:8a:
                    7b:31:bd:0b:3f:79:b1:9e:b1:7b:63:c9:df:2e:5f:
                    e9:43:85:01:fb:8c:e0:f5:f9:f1:6e:84:73:07:16:
                    e3:59:e3:f4:69:f8:78:90:45:22:43:b7:0c:de:4f:
                    29:9a:e3:37:bb:ed:95:b4:95:2b:90:b1:b8:3b:ca:
                    bd:f1:71:21:15:66:1f:25:0d:86:66:62:a2:ed:25:
                    c6:21:02:3a:b6:21:c1:69:f6:5f:20:5f:e1:3a:92:
                    7e:82:d7:09:4c:85:3c:53:f1:03:0e:2b:43:01:36:
                    7d:5c:0e:43:0d:3c:71:5c:a4:54:72:07:36:ef:b2:
                    2c:16:8f:b4:45:04:af:f8:0b:81:67:32:ce:d8:d7:
                    29:cf:d1:d7:3b:de:76:be:ba:e9:f9:dd:78:92:12:
                    65:8b:ce:e8:be:f3:57:76:6f:55:02:a4:9f:ab:3a:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:3F:6F:32:1E:CE:AE:56:D5:D8:A8:13:81:FC:32:26:81:00:4C
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:3f:ca:7a:89:9a:cb:8b:50:2a:6d:93:fa:b9:f8:f6:e6:
         2b:36:f1:55:57:60:91:71:a5:10:88:e9:be:80:70:65:db:a2:
         bb:ce:9a:a0:7a:dc:83:99:cb:ab:ad:f6:42:ba:fb:a6:36:a4:
         f2:ac:3d:8c:40:40:8f:d7:ff:33:8c:1f:49:84:69:8d:b8:ef:
         48:ca:ab:7b:34:e3:67:14:ac:93:5f:ad:5d:51:25:44:c2:e4:
         7c:94:14:fa:e9:8d:f9:3d:ac:30:64:25:75:81:b6:ad:d5:a9:
         b9:29:2b:17:93:30:15:0a:10:e1:c3:a9:f4:a1:0a:ad:dd:c4:
         f6:ce:3d:2a:55:8f:9f:0b:c4:66:ed:22:93:89:b5:3b:ae:b1:
         5c:26:79:e8:7d:d8:2f:9f:5a:8f:c2:76:b9:d5:ad:37:40:2b:
         1b:d7:6a:5c:68:b2:5a:88:aa:25:54:ca:ea:d8:d3:24:5c:7d:
         a4:c2:a6:2f:b1:7d:fd:0a:36:c6:a2:00:c2:12:d1:24:23:cd:
         d9:bb:70:b0:32:47:3a:de:09:96:30:43:04:c2:ce:e0:fd:dc:
         90:8f:f0:49:1b:4a:27:af:2e:fd:ab:3c:f3:9e:5b:ed:c7:01:
         a4:a8:50:55:71:b1:8f:92:95:1a:b2:96:e6:d7:aa:2d:1e:6d:
         4e:87:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:51:25 2025 by rpki-client