Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          VJkxbIWaz8c7UhYRI7rq4TQo55q8sKO13/QGtLzx4z8=
Subject key identifier:   E0:D3:91:12:1A:5A:D5:6C:48:16:AB:38:FE:F8:2C:86:49:91:A0:D2
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       42EEAE040A9224DF05D3EB96F83CA727837DE891
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:24:33 +0000
ROA not before:           Fri 22 Aug 2025 21:19:33 +0000
ROA not after:            Fri 21 Aug 2026 21:24:33 +0000
asID:                     52706
IP address blocks:        2804:c70:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ee:ae:04:0a:92:24:df:05:d3:eb:96:f8:3c:a7:27:83:7d:e8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:19:33 2025 GMT
            Not After : Aug 21 21:24:33 2026 GMT
        Subject: CN=E0D391121A5AD56C4816AB38FEF82C864991A0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:45:8d:ea:a4:45:3e:e8:89:54:92:09:02:1d:
                    43:e5:47:c7:7a:83:a5:d7:e9:1f:c9:13:9e:07:18:
                    56:39:0d:04:18:13:77:ae:13:48:5c:ca:78:7e:ac:
                    ea:69:3d:27:31:8b:d7:5e:68:f4:a3:14:e7:bf:55:
                    00:c3:b9:ef:30:88:8e:34:b5:3b:e5:76:1a:df:c7:
                    0a:8b:9d:b9:75:d4:9f:e0:60:fd:23:fd:86:8d:ed:
                    4c:c1:8d:fc:ea:44:94:30:1e:67:ac:78:69:f6:fe:
                    28:44:15:8d:41:36:07:e5:33:36:a5:0a:9b:c5:9d:
                    bc:6e:9a:3c:e2:f9:43:93:e2:66:c8:23:27:1f:35:
                    8e:c4:11:e6:b8:4f:d4:15:43:b6:41:4b:7d:1f:9f:
                    05:23:5c:d2:58:92:0c:f5:27:4b:b8:0a:12:b3:f7:
                    c1:71:c6:da:12:0c:89:69:d3:30:68:2e:e4:cf:af:
                    95:f4:65:7a:f1:24:8a:93:84:96:a0:a0:7b:ed:e2:
                    d1:d9:89:97:5f:1e:d1:20:b3:4d:a4:d5:c9:05:a5:
                    70:86:42:fc:94:05:18:45:2d:54:28:92:75:9e:97:
                    fd:46:b3:04:ae:cd:8a:bb:2b:e3:32:9f:88:91:2a:
                    88:7e:bc:3f:a6:27:05:f3:0a:db:9c:f5:2f:49:e0:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D3:91:12:1A:5A:D5:6C:48:16:AB:38:FE:F8:2C:86:49:91:A0:D2
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:06:95:93:22:54:55:40:2b:57:25:4c:c3:61:16:2e:23:25:
         cf:d6:33:9a:78:ba:fa:03:2f:8b:46:13:38:54:1e:9a:3c:49:
         a7:90:b0:88:5e:34:0e:63:67:c0:4c:37:82:f8:16:6a:75:c3:
         93:eb:84:1c:e4:52:43:fe:59:08:69:7e:b8:5d:f7:4f:58:a6:
         11:c7:dc:4b:39:cd:81:de:21:c1:61:18:4b:87:7c:d5:6d:ae:
         14:5c:2d:7e:62:8d:13:5d:4a:38:b7:51:19:ef:3d:6a:5c:ae:
         18:90:ae:15:5a:2f:4a:27:f3:d7:7a:fe:ca:1f:e6:36:2d:6e:
         e3:82:8f:4e:6c:ca:61:6b:e7:96:6d:1c:ee:7d:2f:a2:9c:8b:
         2a:af:de:4c:f7:e9:60:ab:1b:01:9a:16:6f:15:a2:2d:be:21:
         55:55:7b:ff:0e:c0:13:d4:6b:64:a9:c2:75:74:4e:9d:52:69:
         da:89:df:b9:d4:7d:63:3b:13:49:e2:bc:f0:cc:4e:97:37:bb:
         86:00:5c:e9:bf:af:24:de:93:18:b5:5f:d6:74:3f:06:51:35:
         df:ad:78:80:86:54:e9:ba:6c:c0:2a:c1:7f:67:ea:72:af:60:
         c1:d4:2f:51:55:e1:bb:ba:01:6a:b6:70:b7:12:9e:1d:89:0d:
         b6:e6:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:07:45 2025 by rpki-client