Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          rO/3Nc+NkHgYalQ7p2+f9r/8TECrIazCB3hoL6emfp8=
Subject key identifier:   E2:CA:A8:63:E0:23:1C:F5:78:D5:5B:DC:86:DC:D0:16:A3:69:D2:94
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       45C847635C0FA771095C117C561CC20A8D9CC527
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:07:32 +0000
ROA not before:           Fri 22 Aug 2025 18:02:32 +0000
ROA not after:            Fri 21 Aug 2026 18:07:32 +0000
asID:                     52706
IP address blocks:        2804:c70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c8:47:63:5c:0f:a7:71:09:5c:11:7c:56:1c:c2:0a:8d:9c:c5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:02:32 2025 GMT
            Not After : Aug 21 18:07:32 2026 GMT
        Subject: CN=E2CAA863E0231CF578D55BDC86DCD016A369D294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:53:ef:0c:da:89:1a:df:b0:46:25:bd:72:
                    27:a7:c5:c1:b7:44:2e:ce:5b:ff:0a:bd:05:98:4d:
                    9c:ee:2f:c1:46:e3:25:7a:a6:bb:6b:1c:81:0e:04:
                    f3:17:8a:62:a6:2e:1e:36:84:7c:27:04:ed:60:14:
                    3b:68:45:6b:b4:ba:b2:79:aa:de:e9:01:25:17:38:
                    8f:c7:c7:b9:b3:87:9c:46:8e:42:e1:12:a0:8a:51:
                    04:9a:6f:20:40:5e:8a:10:12:53:37:88:95:d4:15:
                    d2:21:61:c7:2c:38:74:67:88:61:85:2e:c2:f9:36:
                    95:f8:e8:3c:18:c1:4c:5b:17:aa:97:19:e7:ce:9c:
                    31:b8:73:71:2f:43:5f:a1:ff:23:09:f7:f9:f4:ae:
                    0b:c1:2f:42:1a:a3:1a:96:48:52:38:42:65:a9:c4:
                    3f:89:d8:5d:51:c5:1c:91:c2:10:bb:5d:a3:73:0c:
                    03:18:a8:cc:1b:7a:3d:84:d2:67:50:18:03:7c:c7:
                    ac:d0:8d:b0:66:86:8b:5c:fd:ce:b1:2c:ba:21:55:
                    02:6b:6d:ea:46:e8:cb:cf:b3:c7:65:1a:63:6d:f1:
                    45:ae:07:dd:1c:69:28:cf:57:cd:12:4c:75:45:97:
                    1b:6d:d2:a8:27:99:28:72:74:5e:f7:d0:3a:44:ac:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CA:A8:63:E0:23:1C:F5:78:D5:5B:DC:86:DC:D0:16:A3:69:D2:94
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:af:a1:18:db:9f:c9:68:0a:06:5e:aa:a7:0e:c5:43:0e:
         49:42:79:c8:a8:bc:a6:a4:b3:ed:d2:e8:42:46:34:1e:0b:32:
         66:03:45:7b:77:48:a5:ac:fc:7b:9e:65:1f:7f:d7:62:b9:b4:
         07:6b:43:19:64:65:cd:7b:de:0e:ac:b0:db:fb:8d:36:27:8f:
         4d:0e:57:3c:19:f6:00:2c:e2:fb:9f:ab:46:99:bc:49:ca:95:
         d2:e5:45:74:39:64:a8:1a:c9:16:1f:b2:67:e9:4f:74:f4:e2:
         83:f6:69:2f:ad:63:5a:c5:23:68:dc:f6:d0:b2:a9:87:ed:29:
         1e:4b:6d:b0:74:fa:38:01:28:3b:50:67:4f:c7:6a:2c:47:8f:
         a0:02:89:57:4e:2d:5d:e5:33:a6:44:0e:13:5a:9c:b7:f2:2f:
         6d:96:55:ea:8e:5c:29:82:ee:52:23:b2:0d:15:dd:f5:02:ee:
         f7:b8:e7:db:f7:d5:45:21:03:f3:60:09:e1:77:4d:9b:7d:14:
         11:4c:4b:c6:4e:6a:55:a7:21:7b:08:0c:06:d2:19:7d:bf:9f:
         9d:a8:4e:51:31:0f:f2:1b:88:e3:b9:53:75:c5:70:cf:d4:39:
         4d:bb:12:d0:e6:23:5d:0e:2e:07:cc:2e:d1:05:5d:bd:9b:50:
         84:99:a4:55
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURchHY1wPp3EJXBF8VhzCCo2cxScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIxODAyMzJaFw0yNjA4MjExODA3MzJaMDMxMTAvBgNV
BAMTKEUyQ0FBODYzRTAyMzFDRjU3OEQ1NUJEQzg2RENEMDE2QTM2OUQyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoY1PvDNqJGt+wRiW9cienxcG3
RC7OW/8KvQWYTZzuL8FG4yV6prtrHIEOBPMXimKmLh42hHwnBO1gFDtoRWu0urJ5
qt7pASUXOI/Hx7mzh5xGjkLhEqCKUQSabyBAXooQElM3iJXUFdIhYccsOHRniGGF
LsL5NpX46DwYwUxbF6qXGefOnDG4c3EvQ1+h/yMJ9/n0rgvBL0IaoxqWSFI4QmWp
xD+J2F1RxRyRwhC7XaNzDAMYqMwbej2E0mdQGAN8x6zQjbBmhotc/c6xLLohVQJr
bepG6MvPs8dlGmNt8UWuB90caSjPV80STHVFlxtt0qgnmShydF730DpErPCTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU4sqoY+AjHPV41VvchtzQFqNp0pQwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzIzNzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAoBAxwAAAwDQYJKoZIhvcNAQELBQADggEBAB5pr6EY25/J
aAoGXqqnDsVDDklCeciovKaks+3S6EJGNB4LMmYDRXt3SKWs/HueZR9/12K5tAdr
QxlkZc173g6ssNv7jTYnj00OVzwZ9gAs4vufq0aZvEnKldLlRXQ5ZKgayRYfsmfp
T3T04oP2aS+tY1rFI2jc9tCyqYftKR5LbbB0+jgBKDtQZ0/HaixHj6ACiVdOLV3l
M6ZEDhNanLfyL22WVeqOXCmC7lIjsg0V3fUC7ve459v31UUhA/NgCeF3TZt9FBFM
S8ZOalWnIXsIDAbSGX2/n52oTlExD/IbiOO5U3XFcM/UOU27EtDmI10OLgfMLtEF
Xb2bUISZpFU=
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:05:12 2025 by rpki-client