Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          k8kvs9aD4S8+b/QmqG4G9yLBzCpvirvlS7ClRUYVXgo=
Subject key identifier:   A6:0A:4F:91:A8:13:CD:20:1C:16:C7:EB:E3:C1:F0:C2:B0:66:E8:80
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       3F07E21D9B2536DD099548F4ADC8B204C54F0A84
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:23:16 +0000
ROA not before:           Fri 22 Aug 2025 21:18:16 +0000
ROA not after:            Fri 21 Aug 2026 21:23:16 +0000
asID:                     52706
IP address blocks:        2804:c70:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:07:e2:1d:9b:25:36:dd:09:95:48:f4:ad:c8:b2:04:c5:4f:0a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:18:16 2025 GMT
            Not After : Aug 21 21:23:16 2026 GMT
        Subject: CN=A60A4F91A813CD201C16C7EBE3C1F0C2B066E880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9f:de:b2:8d:d9:96:16:12:a5:a5:42:ff:25:
                    37:fa:f9:3f:9c:4b:3e:12:5e:7b:b3:b1:4e:67:99:
                    85:1e:f7:26:27:d8:a9:18:9d:72:ea:35:ca:4b:c7:
                    00:06:bd:b9:70:75:46:03:00:81:c8:e2:1a:45:0c:
                    c5:bd:e9:13:34:cf:1d:0f:a8:6b:f6:b7:d2:ef:b3:
                    55:25:f3:24:e1:67:18:52:f7:e0:b8:8b:f5:22:84:
                    cf:cf:72:c9:a7:2e:5f:45:47:a9:e7:0e:95:77:42:
                    2b:3a:56:07:8d:52:10:dd:ff:2d:54:ff:f4:96:93:
                    87:4e:0d:33:17:37:71:e2:f5:18:3b:74:4e:10:c5:
                    8d:03:cd:81:4a:05:5f:c1:eb:7b:a5:36:5a:5f:3c:
                    42:20:77:91:c4:17:74:48:1c:5f:b1:d3:d9:a8:1a:
                    45:c5:a3:8c:89:d5:4d:55:e5:ba:1d:5f:c7:2e:1e:
                    f1:26:b7:1a:76:c6:08:ef:f6:00:0d:2b:d9:70:78:
                    f2:c1:d6:22:6d:50:c7:6e:8d:1f:4f:9f:ef:95:e3:
                    20:b0:a4:1f:4f:30:f5:1f:b5:40:ba:3c:a2:7f:66:
                    4a:a8:0f:8f:30:1a:63:cc:04:49:97:0a:21:92:59:
                    aa:36:87:ff:28:fc:8d:42:eb:c8:60:98:dc:f1:73:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0A:4F:91:A8:13:CD:20:1C:16:C7:EB:E3:C1:F0:C2:B0:66:E8:80
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:82:8b:9f:31:a3:30:f1:c2:13:ed:8c:65:4b:ad:9e:a9:ed:
         54:6b:1e:7e:f5:89:f2:ce:c3:56:78:27:21:e9:92:a6:2b:ca:
         b4:4c:22:d4:64:95:97:33:f3:81:6a:cf:97:0c:0f:ba:8b:1f:
         b2:78:89:e9:2b:84:0c:ab:2d:a4:96:00:e9:df:e6:e5:5a:87:
         b0:db:78:c7:c6:d7:c2:6c:6a:f4:7a:3d:55:0f:d5:ca:ab:e2:
         e8:c2:18:a6:c8:de:74:b0:d4:bf:69:21:fe:1e:c5:ba:e8:24:
         c4:02:76:aa:5b:53:b9:03:dc:d3:b1:28:59:f0:e2:f5:49:26:
         21:cd:a4:45:9f:78:38:b5:be:1c:66:1d:cf:e5:99:b1:42:bc:
         68:4c:48:61:9e:33:a7:6e:72:ce:e9:79:1f:b7:83:3f:62:6f:
         d3:91:71:18:f9:99:bf:ce:21:fe:1e:f6:6f:ab:6e:c0:58:07:
         65:80:72:08:f3:ba:e9:8b:b6:03:96:2d:5b:65:63:00:3b:1f:
         bc:0f:f2:da:51:bc:43:c3:8b:35:7b:c1:35:cb:0d:3f:84:37:
         9d:07:11:48:3e:92:cf:86:f2:3d:8e:e9:08:ef:18:0f:f5:89:
         a6:3d:59:c0:54:58:9b:7e:bb:f2:51:dd:03:03:a4:ea:9c:6b:
         ad:7e:75:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:06:50 2025 by rpki-client