Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          od8spc3n03Xvjw7zEgnd9D52+3ANot4i0AjwZ0UbRlg=
Subject key identifier:   79:AC:5D:BB:FA:E3:0A:06:00:8A:CC:5B:38:4E:53:7C:1A:80:56:C9
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       1F2030FCF327C5CA8FFE2D2DFBB5B2197ACB78E0
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:13:57 +0000
ROA not before:           Fri 22 Aug 2025 21:08:57 +0000
ROA not after:            Fri 21 Aug 2026 21:13:57 +0000
asID:                     52706
IP address blocks:        2804:c70:403c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:30:fc:f3:27:c5:ca:8f:fe:2d:2d:fb:b5:b2:19:7a:cb:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:08:57 2025 GMT
            Not After : Aug 21 21:13:57 2026 GMT
        Subject: CN=79AC5DBBFAE30A06008ACC5B384E537C1A8056C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:c8:2c:ec:94:f4:72:20:14:74:b2:4f:16:
                    a1:17:b8:22:05:ab:c3:cd:6d:34:e7:53:2e:0b:6a:
                    ed:0f:a0:35:b3:f2:53:d0:36:e3:2e:d6:48:84:0f:
                    9c:22:a0:08:9d:fc:ea:17:7a:e7:c3:cd:4f:71:e4:
                    16:0a:dd:f2:98:00:69:be:4e:15:ed:92:b7:c2:12:
                    26:e6:87:21:e9:9a:37:35:c1:01:c3:23:a3:0a:af:
                    2a:5c:d2:57:06:02:0d:3f:05:3b:d9:c4:ed:91:a0:
                    31:a3:32:e7:a9:9c:c1:b2:30:ab:8a:7e:74:7a:b6:
                    3a:60:e8:57:19:4a:16:d9:71:34:d6:46:99:19:82:
                    6d:d1:6e:92:d3:98:e0:86:aa:84:ee:4e:b5:7f:eb:
                    29:93:e9:35:e3:2c:82:e7:33:24:ab:30:83:aa:3d:
                    65:55:15:08:da:32:5c:24:1d:3c:93:9c:be:c7:b4:
                    41:61:ea:2b:38:be:0d:ae:8a:85:77:ff:44:ba:85:
                    b5:f1:67:41:e3:f7:de:b8:f0:41:d8:00:c4:bf:f3:
                    89:e7:32:97:9a:3e:4f:8c:8c:11:d3:4b:91:26:29:
                    c0:c5:2d:fb:ce:23:7b:83:56:66:a4:d7:3e:93:07:
                    0d:17:c3:1a:3a:b1:87:26:97:b1:b8:0d:b8:c0:fd:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AC:5D:BB:FA:E3:0A:06:00:8A:CC:5B:38:4E:53:7C:1A:80:56:C9
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343033633a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:403c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:b8:d4:77:cf:71:94:e5:4e:cc:34:d6:98:9d:78:b8:d7:
         a9:1e:70:92:35:b8:bc:f7:88:d0:9e:12:75:42:6a:b9:f1:89:
         2a:5c:7e:be:f5:ea:cd:07:82:01:3c:65:12:eb:c5:cf:1a:dc:
         85:db:a2:5c:de:82:84:c4:26:da:1f:8e:74:53:2d:e9:a7:ef:
         8d:1e:e4:73:cb:db:7e:55:78:a8:86:70:32:66:47:6a:6c:ce:
         57:94:4d:39:53:4a:44:4d:dd:91:c0:96:44:7a:8a:45:bf:46:
         78:be:86:8b:a1:92:31:3b:9a:2f:bd:63:bc:be:2c:da:4c:a0:
         68:3e:ca:bd:17:3b:a7:2b:96:be:e9:39:b2:52:5d:f7:4b:cd:
         73:67:0d:55:79:0f:ca:8e:c1:36:71:ac:0a:70:a5:6a:1d:21:
         6a:81:a6:a2:77:b0:4c:de:02:71:f4:cf:69:7c:57:7a:f5:18:
         aa:41:d7:4a:46:72:92:4c:80:54:4b:c9:41:ca:c1:b8:07:3a:
         16:87:a1:89:8d:f0:59:5d:cc:c7:07:04:0b:3a:9c:3f:be:3c:
         09:c9:f1:7f:82:a6:08:2e:64:e5:d9:ad:3f:85:dc:42:97:c1:
         34:ae:b3:00:23:f1:54:d5:3c:fb:e8:dc:1f:15:3b:52:56:e6:
         f1:21:59:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:25 2025 by rpki-client