Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3332203d3e203532373036.roa
File:                     323830343a6337303a3a2f33322d3332203d3e203532373036.roa (raw, json)
Hash identifier:          0/kVVOhJiauMu5xxA/zOpI5ubip3JHkVtEzCXTDWwhA=
Subject key identifier:   13:57:F1:02:CB:46:09:5D:C3:FA:0C:49:FB:90:F7:FB:AF:82:C6:3D
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       11559FE8B982436F336E9E9633B0A3D54012B8F9
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3332203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 14:45:56 +0000
ROA not before:           Fri 22 Aug 2025 14:40:56 +0000
ROA not after:            Fri 21 Aug 2026 14:45:56 +0000
asID:                     52706
IP address blocks:        2804:c70::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:55:9f:e8:b9:82:43:6f:33:6e:9e:96:33:b0:a3:d5:40:12:b8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 14:40:56 2025 GMT
            Not After : Aug 21 14:45:56 2026 GMT
        Subject: CN=1357F102CB46095DC3FA0C49FB90F7FBAF82C63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:ca:74:c8:05:b5:a3:97:05:e1:dd:77:78:
                    cb:4b:f5:87:98:51:70:a1:23:bd:9b:81:28:57:67:
                    3c:62:e2:48:a9:a7:f9:2c:c0:d5:38:24:a7:9c:17:
                    c6:c7:b1:0c:32:59:df:45:df:31:70:70:f2:47:1b:
                    8f:5f:f1:ac:e1:8e:d8:09:cb:fe:33:ef:8f:76:21:
                    4f:11:58:f8:d2:91:fa:39:b2:83:76:e3:fb:3e:6a:
                    67:ad:92:2b:ed:95:f1:e9:86:fe:d6:bd:70:1f:7c:
                    6f:c9:18:c0:15:d3:e9:f1:73:0b:ee:b6:40:e3:7d:
                    aa:6d:de:60:34:89:8b:88:99:fa:90:fa:c3:63:9a:
                    c6:49:f6:ee:77:36:3f:be:38:0d:ff:c1:d1:8c:ef:
                    cb:00:78:e9:62:aa:6a:47:4f:be:34:11:47:a9:d6:
                    c7:71:c3:8a:61:2c:1f:7e:44:84:b4:0e:ea:30:3c:
                    c3:94:4b:41:4b:b9:c3:6c:b8:13:b1:54:77:6d:eb:
                    fc:4f:d5:06:3f:fa:44:3a:19:ee:b4:5e:5c:77:44:
                    f9:dd:26:4a:15:da:5a:e3:d0:e5:f9:2b:6d:54:3a:
                    07:7f:67:5e:20:20:b6:12:d7:95:59:58:98:2a:b2:
                    b7:05:95:31:82:49:b4:71:91:88:13:e6:1a:c7:d2:
                    83:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:57:F1:02:CB:46:09:5D:C3:FA:0C:49:FB:90:F7:FB:AF:82:C6:3D
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33322d3332203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:fb:b3:10:06:48:63:2b:11:24:35:f1:b5:44:1e:7b:97:ef:
         0a:d7:f3:1b:27:73:4d:e7:49:3d:6e:b2:7d:71:d6:29:00:e6:
         99:8f:7f:b9:f8:0d:5c:be:9f:3e:4e:f7:ae:31:fc:d4:e7:03:
         b4:9c:30:21:70:ba:e8:52:ff:76:4b:92:34:73:1e:b1:9b:ca:
         7b:6d:7d:5e:98:dc:96:e0:60:60:f3:68:da:7c:0b:66:35:31:
         8f:e8:be:8d:8d:b3:d3:99:66:92:dd:55:7d:3b:35:f8:cf:8d:
         8b:0d:24:e5:76:7e:d3:7f:d7:7e:aa:d6:5d:7b:ae:1c:f5:11:
         04:b5:a8:77:27:9c:9b:7f:2e:0e:81:56:06:47:93:be:b1:c1:
         cf:2a:c9:2d:49:97:d5:59:25:c9:db:1e:37:6b:ca:57:7f:3f:
         76:4f:1a:32:21:bd:75:b6:09:4a:66:7f:cb:13:41:2f:e1:f9:
         a3:47:b8:4b:2a:0e:65:59:70:55:6b:46:bb:39:80:41:9f:6e:
         96:55:90:cf:41:0c:d2:bd:8c:fa:0f:7e:0a:09:ed:b7:59:1a:
         0e:32:e4:fd:ba:e2:a0:4a:fa:fd:80:61:d2:63:00:1a:1c:23:
         ac:e3:6a:3c:14:03:58:9e:72:90:30:d5:f6:cc:c7:4c:f9:a9:
         ae:f1:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:29:48 2025 by rpki-client