Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          FuNRcFupo+T4186kevAlp6jNvFqF4g/I60RiXkNES9A=
Subject key identifier:   B8:C6:BB:64:8F:42:B9:E8:D3:D7:4B:EE:ED:A0:C4:15:14:40:FC:7C
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       2D5C759B9F118CD21D7B17C1446CA86D4820D0C1
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 18:03:12 +0000
ROA not before:           Fri 22 Aug 2025 17:58:12 +0000
ROA not after:            Fri 21 Aug 2026 18:03:12 +0000
asID:                     52706
IP address blocks:        2804:c70:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5c:75:9b:9f:11:8c:d2:1d:7b:17:c1:44:6c:a8:6d:48:20:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 17:58:12 2025 GMT
            Not After : Aug 21 18:03:12 2026 GMT
        Subject: CN=B8C6BB648F42B9E8D3D74BEEEDA0C4151440FC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:43:a5:6e:d7:27:0f:3f:b1:89:65:13:8c:
                    d4:02:b0:ca:16:2a:9b:88:54:73:24:ab:50:5c:2a:
                    0a:f2:94:26:45:24:d1:8e:14:d3:f0:c8:e2:22:00:
                    1d:ad:06:b6:5a:29:52:d5:38:87:ba:5e:ea:82:e6:
                    f1:2f:d6:36:28:7c:e8:b6:e2:39:8d:f9:31:90:9b:
                    fa:d2:63:39:74:f3:87:7f:27:81:5c:02:3e:c7:8b:
                    e2:6a:b7:4e:30:f6:21:64:c0:ed:fb:7b:c4:0d:8d:
                    0a:4e:a7:50:01:9d:67:f9:0a:93:f7:76:ae:ad:8c:
                    4f:39:1a:58:6c:be:3e:19:f3:3e:68:85:40:8b:26:
                    b9:c9:fb:9a:70:8f:b9:4b:b9:8f:05:9f:83:66:82:
                    12:b3:42:0e:23:25:c5:95:d2:b2:15:8e:bd:3c:14:
                    ef:04:ac:52:7b:9b:34:39:e1:f2:c5:77:ed:52:c1:
                    0a:68:d5:7b:09:b5:af:83:fe:f4:9b:c4:c3:57:a7:
                    7d:9c:27:91:80:a5:9a:7c:d0:c1:e7:7d:0f:89:3a:
                    24:37:40:76:4e:ec:3c:65:02:72:73:1c:d8:a2:89:
                    b0:b3:d5:c6:65:51:cf:19:0b:9a:89:67:4d:27:c5:
                    67:e9:7a:4b:89:25:50:71:2b:6e:53:cc:c5:23:e6:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C6:BB:64:8F:42:B9:E8:D3:D7:4B:EE:ED:A0:C4:15:14:40:FC:7C
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a313030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:65:2f:f7:af:f6:07:76:a0:5a:a5:0c:90:f8:7d:ee:44:2c:
         09:14:c6:ea:f3:f4:8b:6e:80:d2:74:64:51:72:ff:85:65:64:
         0a:34:e9:08:d1:19:bd:8d:b0:5b:d6:b9:5b:e6:a9:9c:f6:9b:
         f8:56:91:8e:c4:77:1e:7f:b8:82:f7:b3:f2:bb:2c:64:e3:02:
         6b:82:14:ad:5c:20:5d:cf:2d:13:84:d5:10:aa:a9:43:a0:71:
         9e:10:a7:b3:09:1d:a3:03:21:ae:cb:a1:f6:32:68:36:57:70:
         bd:08:25:20:32:dc:fa:74:9a:f4:a2:cc:cf:46:62:a9:2f:2e:
         8a:cb:9f:b7:0c:5d:b5:4e:69:d3:89:7e:72:aa:d5:a4:19:6b:
         f4:32:84:f7:54:9f:38:64:fb:e9:c4:b1:18:e9:1b:27:b4:6e:
         28:d2:29:e0:85:34:44:da:4a:d4:2b:96:c5:10:ed:43:06:aa:
         e8:75:86:af:b6:4b:02:d2:ba:86:24:13:65:ef:81:a7:f2:54:
         cd:a6:02:bc:23:6c:5f:ce:c2:a0:62:94:4b:3c:d0:ac:0f:6e:
         a3:47:63:28:02:28:db:35:12:2a:d6:fa:8d:88:e1:28:c4:05:
         07:2b:2b:3e:60:85:57:21:1b:c5:bf:86:67:fc:1a:4c:45:0b:
         d2:92:19:87
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIULVx1m58RjNIdexfBRGyobUgg0MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIxNzU4MTJaFw0yNjA4MjExODAzMTJaMDMxMTAvBgNV
BAMTKEI4QzZCQjY0OEY0MkI5RThEM0Q3NEJFRUVEQTBDNDE1MTQ0MEZDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10EOlbtcnDz+xiWUTjNQCsMoW
KpuIVHMkq1BcKgrylCZFJNGOFNPwyOIiAB2tBrZaKVLVOIe6XuqC5vEv1jYofOi2
4jmN+TGQm/rSYzl084d/J4FcAj7Hi+Jqt04w9iFkwO37e8QNjQpOp1ABnWf5CpP3
dq6tjE85Glhsvj4Z8z5ohUCLJrnJ+5pwj7lLuY8Fn4NmghKzQg4jJcWV0rIVjr08
FO8ErFJ7mzQ54fLFd+1SwQpo1XsJta+D/vSbxMNXp32cJ5GApZp80MHnfQ+JOiQ3
QHZO7DxlAnJzHNiiibCz1cZlUc8ZC5qJZ00nxWfpekuJJVBxK25TzMUj5szbAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUuMa7ZI9CuejT10vu7aDEFRRA/HwwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQMcBAwDQYJKoZIhvcNAQELBQADggEB
AHhlL/ev9gd2oFqlDJD4fe5ELAkUxurz9ItugNJ0ZFFy/4VlZAo06QjRGb2NsFvW
uVvmqZz2m/hWkY7Edx5/uIL3s/K7LGTjAmuCFK1cIF3PLROE1RCqqUOgcZ4Qp7MJ
HaMDIa7LofYyaDZXcL0IJSAy3Pp0mvSizM9GYqkvLorLn7cMXbVOadOJfnKq1aQZ
a/QyhPdUnzhk++nEsRjpGye0bijSKeCFNETaStQrlsUQ7UMGquh1hq+2SwLSuoYk
E2XvgafyVM2mArwjbF/OwqBilEs80KwPbqNHYygCKNs1EirW+o2I4SjEBQcrKz5g
hVchG8W/hmf8GkxFC9KSGYc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:06 2025 by rpki-client