Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030613a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030613a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          iCaKbpPI/P6gsjlVucdeo2ygY5mzWqD0Vyon/jL1d5E=
Subject key identifier:   3A:9B:66:06:C9:74:10:EF:C3:D3:FB:A7:15:C5:49:FD:84:4D:CC:C8
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       4C02B4E918623B35533CAC6BAB569A131DA9FD2C
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030613a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 19:05:48 +0000
ROA not before:           Fri 22 Aug 2025 19:00:48 +0000
ROA not after:            Fri 21 Aug 2026 19:05:48 +0000
asID:                     52706
IP address blocks:        2804:c70:200a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:b4:e9:18:62:3b:35:53:3c:ac:6b:ab:56:9a:13:1d:a9:fd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 19:00:48 2025 GMT
            Not After : Aug 21 19:05:48 2026 GMT
        Subject: CN=3A9B6606C97410EFC3D3FBA715C549FD844DCCC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:81:cb:58:a1:fd:49:13:e9:32:d4:91:8f:
                    5b:30:9e:47:49:df:e8:f9:a6:7a:2c:c5:17:ce:d9:
                    25:19:ba:90:0a:a3:59:88:41:17:10:d4:b3:a2:48:
                    ef:b9:2e:81:d0:68:e6:28:af:82:24:23:a5:7c:85:
                    d5:20:c8:92:3c:db:96:9c:65:d9:fe:c6:cd:d2:06:
                    30:30:b6:36:b5:6c:78:41:f0:48:59:c9:6e:e8:6f:
                    47:9d:04:76:b5:17:5d:61:df:c1:13:92:88:1b:97:
                    1e:27:23:c5:a3:31:3e:16:53:4a:72:df:03:8e:95:
                    91:35:93:b4:a3:dc:21:c9:26:1b:01:8b:7b:9b:fa:
                    e9:81:be:9c:eb:4d:60:8e:9f:c8:7a:e9:4b:61:df:
                    be:3c:44:a5:11:95:11:20:df:c6:5f:e4:73:8d:19:
                    d8:9f:d9:3a:4d:4a:9d:25:e2:bf:80:62:42:4a:3e:
                    ff:66:85:41:20:df:6d:34:db:b8:37:5c:80:b9:ee:
                    92:b5:98:56:9e:ea:cc:85:d5:49:9f:da:fe:09:bc:
                    ee:2c:75:ab:09:48:a3:56:30:0d:4a:b6:61:63:2a:
                    c2:8f:ee:96:d4:ad:de:05:a0:37:0e:0b:3d:7c:68:
                    12:f5:f6:3a:d1:31:da:00:a8:ee:4f:08:16:83:37:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9B:66:06:C9:74:10:EF:C3:D3:FB:A7:15:C5:49:FD:84:4D:CC:C8
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030613a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:200a::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:53:73:ae:ca:e9:d8:04:ed:ef:a6:90:74:a0:0e:88:b5:
         16:59:c4:fb:d4:eb:75:40:15:9e:d2:11:77:81:91:56:91:4a:
         e8:85:1d:fd:41:90:93:ac:7e:8b:e3:9a:e0:f2:44:4b:9d:f4:
         b1:01:cf:50:0e:fd:81:63:d1:c3:74:52:61:7b:ce:68:e2:7a:
         e8:de:4c:3b:c7:69:5a:d4:0a:cc:34:86:0c:4a:a7:9f:17:83:
         ab:02:40:0f:cb:9a:31:bd:65:3f:ac:f4:b8:ac:25:a4:53:ba:
         71:f8:20:06:23:60:46:4b:5c:58:0b:41:3d:4b:2b:82:3c:ef:
         7c:f9:2f:60:1a:c7:86:47:d1:ee:7b:d0:b1:23:a1:40:0f:82:
         69:31:82:89:58:21:df:8a:b3:71:ff:1d:e2:8b:8f:d4:14:c4:
         e5:81:4b:ae:d9:e8:9e:ab:45:f5:c0:19:fc:89:1e:bf:bd:72:
         28:34:90:71:63:f6:13:11:9a:b1:16:e2:82:c3:d2:b1:5d:81:
         23:f2:c4:66:a8:b3:de:22:9b:e3:da:61:37:0e:36:c5:b2:3a:
         92:bd:04:97:64:d6:62:c2:80:27:28:14:f3:38:6a:f3:9b:e2:
         f5:39:1c:f5:b1:2b:4f:60:99:ee:30:32:be:81:2e:44:96:c1:
         93:4a:a3:3f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUTAK06RhiOzVTPKxrq1aaEx2p/SwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIxOTAwNDhaFw0yNjA4MjExOTA1NDhaMDMxMTAvBgNV
BAMTKDNBOUI2NjA2Qzk3NDEwRUZDM0QzRkJBNzE1QzU0OUZEODQ0RENDQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPeIHLWKH9SRPpMtSRj1swnkdJ
3+j5pnosxRfO2SUZupAKo1mIQRcQ1LOiSO+5LoHQaOYor4IkI6V8hdUgyJI825ac
Zdn+xs3SBjAwtja1bHhB8EhZyW7ob0edBHa1F11h38ETkogblx4nI8WjMT4WU0py
3wOOlZE1k7Sj3CHJJhsBi3ub+umBvpzrTWCOn8h66Uth3748RKURlREg38Zf5HON
Gdif2TpNSp0l4r+AYkJKPv9mhUEg320027g3XIC57pK1mFae6syF1Umf2v4JvO4s
dasJSKNWMA1KtmFjKsKP7pbUrd4FoDcOCz18aBL19jrRMdoAqO5PCBaDNxI7AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUOptmBsl0EO/D0/unFcVJ/YRNzMgwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzIzMDMwNjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcCAKMA0GCSqGSIb3DQEBCwUAA4IB
AQAH6FNzrsrp2ATt76aQdKAOiLUWWcT71Ot1QBWe0hF3gZFWkUrohR39QZCTrH6L
45rg8kRLnfSxAc9QDv2BY9HDdFJhe85o4nro3kw7x2la1ArMNIYMSqefF4OrAkAP
y5oxvWU/rPS4rCWkU7px+CAGI2BGS1xYC0E9SyuCPO98+S9gGseGR9Hue9CxI6FA
D4JpMYKJWCHfirNx/x3ii4/UFMTlgUuu2eieq0X1wBn8iR6/vXIoNJBxY/YTEZqx
FuKCw9KxXYEj8sRmqLPeIpvj2mE3DjbFsjqSvQSXZNZiwoAnKBTzOGrzm+L1ORz1
sStPYJnuMDK+gS5ElsGTSqM/
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:08 2025 by rpki-client