Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          MaQlj4kO8WwU6yCWa6bNATbRlB+o5zHTytSmQ9rxJ9o=
Subject key identifier:   A8:3F:54:71:2D:A9:9B:3B:82:5C:1D:F6:F3:50:BC:0B:71:4D:F0:26
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       543B33E686C4BC9458A4A7968C29EEEFE4270F69
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 19:04:53 +0000
ROA not before:           Fri 22 Aug 2025 18:59:53 +0000
ROA not after:            Fri 21 Aug 2026 19:04:53 +0000
asID:                     52706
IP address blocks:        2804:c70:2008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3b:33:e6:86:c4:bc:94:58:a4:a7:96:8c:29:ee:ef:e4:27:0f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 18:59:53 2025 GMT
            Not After : Aug 21 19:04:53 2026 GMT
        Subject: CN=A83F54712DA99B3B825C1DF6F350BC0B714DF026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:71:40:d4:f5:ca:66:73:cb:43:65:94:97:
                    ea:92:43:0e:48:db:0e:0c:d8:be:69:a5:ee:0c:41:
                    fe:e5:20:f8:f9:91:63:b3:98:37:c1:ce:41:37:17:
                    76:73:a0:86:43:31:d2:da:46:a2:77:00:31:59:7d:
                    68:41:23:67:32:b8:ed:7f:16:1c:d3:4f:c3:9d:1d:
                    3d:80:6b:18:83:16:82:cb:20:84:6a:8e:28:e8:b1:
                    25:86:63:25:34:54:c3:06:f1:66:e5:f9:33:82:10:
                    ee:bd:c3:41:1f:8c:1f:84:fe:96:fd:8b:67:1a:9f:
                    5c:bf:16:c4:e1:d3:d0:b2:55:78:85:ba:d8:68:d6:
                    d1:75:e9:02:62:19:dc:db:20:c0:ec:bd:64:c7:9b:
                    ea:59:e2:6b:a2:17:1c:21:c8:ff:5d:e3:e7:81:a6:
                    27:3e:f5:b4:1e:74:cf:e4:ae:c3:41:1b:8a:db:ec:
                    5b:ee:e8:f9:9d:f8:23:8b:16:4a:db:ff:22:67:a2:
                    cd:27:dd:d9:cb:63:e2:d1:bf:67:24:57:9d:05:61:
                    73:bf:27:4e:13:0e:38:f7:d6:2a:af:f7:c6:44:1f:
                    68:d5:a6:17:1b:62:93:a0:6d:db:01:db:1e:f9:0a:
                    fe:70:c2:f5:39:4d:ed:ab:24:90:d7:ec:00:8f:66:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3F:54:71:2D:A9:9B:3B:82:5C:1D:F6:F3:50:BC:0B:71:4D:F0:26
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2008::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:44:d6:5f:44:98:40:f1:ab:3f:2d:28:d9:d8:f8:46:10:88:
         38:11:c9:ab:b0:ba:d7:c0:e5:b4:63:92:9c:4c:db:85:dc:e1:
         1d:68:a7:85:b7:eb:8e:d0:ed:e8:db:fa:95:c4:18:4a:1e:bb:
         90:b5:34:be:41:47:53:d1:59:51:a9:e2:6f:ad:24:3e:f2:5f:
         78:98:39:07:bb:63:86:7c:62:68:09:09:ba:bd:95:8d:8b:4f:
         7a:a8:ab:75:ea:d2:e6:8c:1c:7a:d3:08:7a:25:1c:d1:58:71:
         96:5b:ec:e8:ce:ff:5d:b4:36:b1:19:ed:26:5c:31:74:87:ad:
         15:b4:78:df:08:7e:eb:4d:05:ec:07:74:b4:f7:a1:99:2e:6a:
         93:eb:70:f5:0a:4a:1a:62:60:c9:41:29:51:0e:b3:3d:dc:6a:
         21:d4:97:4a:05:c0:1d:12:ce:2d:7e:1f:27:62:81:cd:56:f6:
         9a:48:f9:82:b0:2c:ed:2f:20:d5:b4:12:3e:be:fa:5e:01:2f:
         33:39:2f:e5:af:1b:bf:cf:e0:0e:51:72:bd:0f:10:64:c4:09:
         0d:87:76:25:5b:65:3d:fe:08:1e:c7:e2:09:39:c6:c5:a4:1b:
         b6:8d:37:8b:e1:00:56:61:65:a3:23:80:09:eb:f2:0e:0d:ad:
         44:40:11:a0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUVDsz5obEvJRYpKeWjCnu7+QnD2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIxODU5NTNaFw0yNjA4MjExOTA0NTNaMDMxMTAvBgNV
BAMTKEE4M0Y1NDcxMkRBOTlCM0I4MjVDMURGNkYzNTBCQzBCNzE0REYwMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZnFA1PXKZnPLQ2WUl+qSQw5I
2w4M2L5ppe4MQf7lIPj5kWOzmDfBzkE3F3ZzoIZDMdLaRqJ3ADFZfWhBI2cyuO1/
FhzTT8OdHT2AaxiDFoLLIIRqjijosSWGYyU0VMMG8Wbl+TOCEO69w0EfjB+E/pb9
i2can1y/FsTh09CyVXiFutho1tF16QJiGdzbIMDsvWTHm+pZ4muiFxwhyP9d4+eB
pic+9bQedM/krsNBG4rb7Fvu6Pmd+COLFkrb/yJnos0n3dnLY+LRv2ckV50FYXO/
J04TDjj31iqv98ZEH2jVphcbYpOgbdsB2x75Cv5wwvU5Te2rJJDX7ACPZqV5AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUqD9UcS2pmzuCXB3281C8C3FN8CYwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzIzMDMwMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcCAIMA0GCSqGSIb3DQEBCwUAA4IB
AQAyRNZfRJhA8as/LSjZ2PhGEIg4EcmrsLrXwOW0Y5KcTNuF3OEdaKeFt+uO0O3o
2/qVxBhKHruQtTS+QUdT0VlRqeJvrSQ+8l94mDkHu2OGfGJoCQm6vZWNi096qKt1
6tLmjBx60wh6JRzRWHGWW+zozv9dtDaxGe0mXDF0h60VtHjfCH7rTQXsB3S096GZ
LmqT63D1CkoaYmDJQSlRDrM93Goh1JdKBcAdEs4tfh8nYoHNVvaaSPmCsCztLyDV
tBI+vvpeAS8zOS/lrxu/z+AOUXK9DxBkxAkNh3YlW2U9/ggex+IJOcbFpBu2jTeL
4QBWYWWjI4AJ6/IODa1EQBGg
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:40:53 2025 by rpki-client