Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          8WB2Ogq+ciltLr4DrntejhR40d+fkmP1Ba+66Rwuvdk=
Subject key identifier:   5F:FF:FB:87:44:A8:13:E3:1B:0E:93:8E:D6:2F:F8:BC:1A:5C:9E:B8
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       71F7EE05A108917FA45C1D90B5A6B49E14F1D8EC
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:24:48 +0000
ROA not before:           Fri 22 Aug 2025 21:19:48 +0000
ROA not after:            Fri 21 Aug 2026 21:24:48 +0000
asID:                     52706
IP address blocks:        2804:c70:8007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f7:ee:05:a1:08:91:7f:a4:5c:1d:90:b5:a6:b4:9e:14:f1:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:19:48 2025 GMT
            Not After : Aug 21 21:24:48 2026 GMT
        Subject: CN=5FFFFB8744A813E31B0E938ED62FF8BC1A5C9EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:67:b6:b2:f8:6b:34:38:67:dc:7c:87:3a:
                    b0:6a:c5:49:23:31:cf:98:c7:d9:ed:83:fd:74:c0:
                    64:76:83:34:80:35:e5:ce:0c:84:21:9d:fe:fd:4d:
                    cf:6a:5f:0b:b1:a3:d4:f6:05:70:5f:3b:9a:88:c1:
                    b0:7a:4c:e8:e1:52:4a:10:05:5f:da:e6:f7:2b:79:
                    35:90:94:82:40:73:74:10:e8:cb:a0:9b:72:b3:7f:
                    28:f8:61:ae:e2:13:45:17:bd:b8:74:e3:6d:20:60:
                    83:e3:7c:8c:7a:2f:e0:5b:70:a0:de:cd:49:47:96:
                    26:73:04:40:76:34:51:60:78:89:48:d4:ec:55:c0:
                    c9:88:4d:7e:26:65:65:11:b5:67:5d:ad:de:6a:ec:
                    7b:58:32:83:23:ca:aa:b0:86:de:df:1c:c2:2d:63:
                    1f:e4:35:d3:f9:fc:90:c4:8c:ad:6d:28:5d:63:f6:
                    db:60:98:e7:30:81:a3:38:e3:ae:ba:4c:81:42:e1:
                    2f:e5:35:bb:d5:b5:b8:a3:2f:e6:64:5c:5e:f9:b2:
                    2f:be:a9:9a:b9:f2:db:88:5b:c9:01:e3:c6:d3:aa:
                    f6:c9:ec:01:68:83:9c:98:d8:5f:2a:62:dc:65:b5:
                    e1:53:7b:97:20:63:3d:7b:bc:a8:83:64:7b:22:24:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FF:FB:87:44:A8:13:E3:1B:0E:93:8E:D6:2F:F8:BC:1A:5C:9E:B8
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030373a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8007::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:be:5c:fb:e9:c4:44:67:51:a8:9e:f4:c9:59:a0:4c:11:
         38:5b:97:b1:40:9e:a8:5b:40:a7:79:f2:bd:a6:06:88:8f:b4:
         f5:b6:4b:87:f4:68:c2:23:1d:3d:e3:34:df:ef:43:6b:77:e9:
         d5:a5:1f:0c:39:fb:c2:db:b0:f3:2a:5d:68:d9:d8:8d:df:a9:
         38:73:67:77:5e:79:af:e1:0d:30:38:11:de:bc:4b:f7:c2:3d:
         05:13:f8:27:b4:13:40:65:b9:37:f0:43:77:61:e0:21:04:e1:
         a2:8e:b8:dc:17:6e:14:9a:11:ab:46:d1:a0:ee:c0:f8:5a:11:
         e5:08:13:e8:96:9f:3f:db:75:22:98:89:7d:c5:ba:e7:20:77:
         bb:70:ae:67:5f:75:b1:bc:c6:90:cd:20:39:68:a2:75:90:49:
         11:25:b3:f0:fd:e8:89:33:89:01:3c:04:b8:2f:7a:8c:97:ce:
         fe:82:5b:11:b6:ba:e9:ca:dd:d9:ae:d8:3c:44:cf:9e:00:fa:
         bf:eb:65:89:03:a9:a9:e4:74:63:5a:ca:e2:c0:5b:cd:dd:8e:
         77:34:61:8d:f5:23:d1:68:e3:2f:05:01:e0:77:1c:f3:32:dd:
         e2:c0:28:aa:93:9a:21:69:70:1e:67:a2:4b:5a:2e:bc:64:8d:
         98:98:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:06:54 2025 by rpki-client