Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          i52BOFXeGVD6tlkeLo2fB+T6hMkWb0uhFrvQwO9jcEo=
Subject key identifier:   15:DF:2D:D8:89:8C:7A:55:85:65:15:F9:C3:97:34:88:1C:17:33:C9
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       57D3482FDD64252E7767CFDEF6B9FDEECF70DD93
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:23:33 +0000
ROA not before:           Fri 22 Aug 2025 21:18:33 +0000
ROA not after:            Fri 21 Aug 2026 21:23:33 +0000
asID:                     52706
IP address blocks:        2804:c70:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d3:48:2f:dd:64:25:2e:77:67:cf:de:f6:b9:fd:ee:cf:70:dd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:18:33 2025 GMT
            Not After : Aug 21 21:23:33 2026 GMT
        Subject: CN=15DF2DD8898C7A55856515F9C39734881C1733C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:79:30:c7:ed:b8:df:df:02:8e:49:47:57:
                    bc:e4:8b:e0:08:f5:fc:10:fc:ae:34:ac:8b:15:f7:
                    f5:a9:4d:a8:85:f4:58:74:24:39:db:7a:df:41:a6:
                    a2:04:51:51:d5:4b:55:fe:20:83:5e:d7:0e:4d:7c:
                    d9:1a:89:87:ed:88:40:39:d7:c5:0f:97:16:e8:09:
                    e1:77:5f:2c:be:b6:b8:16:9d:b2:b6:83:db:46:19:
                    26:f8:ab:d4:74:7a:80:f2:ad:eb:8c:c2:6a:41:55:
                    b7:8e:f9:88:53:f4:cb:2d:23:5a:5c:da:da:40:ff:
                    5d:b0:aa:f8:9e:d5:26:2c:26:95:fc:7e:4c:be:41:
                    d4:f9:4f:83:cf:16:bd:10:71:14:fb:ec:eb:3b:2a:
                    60:68:fd:31:8f:2f:27:38:06:4c:44:5e:56:50:bf:
                    c4:8d:0a:98:91:8e:fa:bb:d6:dc:40:ef:2d:6f:46:
                    f0:61:90:4e:00:0f:d9:0e:63:7f:59:4c:44:f1:90:
                    ee:63:10:de:ee:48:1a:42:05:c6:ed:d4:bb:e6:22:
                    7e:2e:fa:83:a4:4a:34:ee:cf:dd:00:05:ef:06:1e:
                    27:56:66:35:d6:1e:80:a1:96:ed:50:60:f2:70:83:
                    cc:91:1b:ba:0b:8b:f1:c4:f1:89:20:30:f5:a9:01:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DF:2D:D8:89:8C:7A:55:85:65:15:F9:C3:97:34:88:1C:17:33:C9
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:54:cf:55:d9:de:42:10:46:06:04:93:ce:86:08:b9:c3:
         58:b7:d4:30:6a:b2:3d:62:93:81:55:4a:5e:6f:f8:e6:8e:76:
         e5:27:8e:8f:8b:36:18:eb:a4:92:ec:6a:64:17:01:9f:03:e6:
         f3:75:b8:56:95:fd:d2:8f:d4:69:bf:f3:19:72:0a:1b:5c:8f:
         ec:a7:b3:9e:ed:cb:be:54:af:28:39:81:8e:a6:77:90:8e:a1:
         2d:0a:ea:93:c8:46:14:89:02:b2:32:d0:70:19:5a:dc:33:c6:
         33:71:55:81:90:df:34:98:81:2e:e5:e2:5f:dd:58:be:4d:2d:
         51:bd:d0:87:78:e2:0d:3a:89:02:bf:d1:d3:aa:4a:4d:f0:ac:
         e5:77:52:2c:7d:34:ec:f4:ee:01:0a:66:41:ba:d3:d7:30:e2:
         7c:75:d3:cc:f7:ea:61:7b:2d:7e:62:58:b1:fd:ca:44:7a:4b:
         5a:f7:00:81:92:3f:98:70:21:44:93:5a:d8:f9:d4:fc:87:f3:
         a1:6c:25:4c:26:60:d9:82:15:9d:f8:01:6d:9b:9c:d9:78:6c:
         44:c2:54:a8:21:f1:8f:57:3a:47:38:29:ae:5a:27:b4:a9:9f:
         5f:86:49:41:f2:4c:a0:20:5f:3d:78:26:0b:d9:0a:d1:9e:7b:
         48:e0:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:06:55 2025 by rpki-client