Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030373a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030373a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          PbYGLpszjUCqn/eq+dv9O6Q0Oyzw1IbK8VMMd5ElK4c=
Subject key identifier:   67:74:20:C5:11:4B:D6:2E:B2:10:02:50:56:8A:C6:D8:75:6D:56:D1
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       1B0D70C568A81757DE5B1A951F9CBF4883340F41
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030373a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:19:51 +0000
ROA not before:           Fri 22 Aug 2025 21:14:51 +0000
ROA not after:            Fri 21 Aug 2026 21:19:51 +0000
asID:                     52706
IP address blocks:        2804:c70:6007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0d:70:c5:68:a8:17:57:de:5b:1a:95:1f:9c:bf:48:83:34:0f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:14:51 2025 GMT
            Not After : Aug 21 21:19:51 2026 GMT
        Subject: CN=677420C5114BD62EB2100250568AC6D8756D56D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:88:d9:14:b7:ec:e1:4b:e7:5b:b9:6e:8b:
                    bb:d6:6a:68:78:7b:7c:66:3e:9a:ff:2a:b8:ae:ab:
                    93:4c:5e:20:ae:a4:18:99:88:79:a3:dd:64:7d:75:
                    84:da:ee:ff:c7:e0:d7:ed:39:17:a1:b5:39:a4:29:
                    c8:85:f7:28:a2:a1:4c:75:b1:66:f4:de:82:4f:6f:
                    4e:91:45:ff:b3:90:9e:7f:4a:f7:45:b5:f3:22:bc:
                    cd:e6:7e:90:bb:17:c6:3c:1c:bb:fd:c0:c8:37:6e:
                    1b:b4:2c:9e:85:a9:c1:e3:56:7d:2d:c5:22:bf:c4:
                    ad:6a:20:f6:9b:7f:8f:1f:2b:7d:a4:83:01:fc:bc:
                    9b:06:ba:a3:99:2b:97:e9:22:a1:76:ba:21:0b:4e:
                    4d:ea:3b:8c:08:1b:2d:e0:3f:cd:d8:d6:33:91:55:
                    44:97:f8:a2:2c:5b:dc:d0:cf:ef:ca:68:ad:a0:bc:
                    67:a4:dd:2a:41:30:e7:dc:a2:a9:77:2c:15:1a:a1:
                    a7:d0:34:78:17:6b:98:a0:63:2c:67:ee:1d:df:74:
                    9c:35:a4:1d:57:2a:fe:e6:e3:71:1c:fe:a3:2b:a4:
                    3a:d8:ab:85:7d:ea:87:3a:59:8c:6b:d3:d6:cc:39:
                    13:a6:6e:70:37:ac:11:5b:93:34:13:30:35:00:02:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:74:20:C5:11:4B:D6:2E:B2:10:02:50:56:8A:C6:D8:75:6D:56:D1
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030373a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:fe:bd:79:87:0c:7e:6b:b5:2b:48:0e:69:dc:73:ff:8e:
         2e:7b:22:8c:95:7a:b0:f6:88:68:3d:3d:59:b3:cf:6a:9e:32:
         89:2a:d3:d5:85:be:d6:9d:1d:74:18:2d:14:d8:b0:9e:9f:f7:
         b7:d9:3b:01:fb:07:98:95:37:7f:b9:92:39:86:03:26:b5:dd:
         0c:47:d8:6a:92:8e:5e:7e:3e:1e:ae:ec:df:fc:fe:8e:72:ff:
         83:43:9b:78:46:6b:1b:66:80:c5:ca:5c:f1:df:ea:00:e3:09:
         93:5a:1e:fd:e4:00:05:ab:1d:44:4e:51:91:0d:59:76:9e:fd:
         d4:fb:f6:69:af:18:1e:20:f2:9e:da:f8:2a:12:9a:f3:f4:b7:
         22:e2:e2:e2:5e:35:4b:13:21:d8:75:85:23:86:65:99:69:b8:
         ea:4c:c7:f2:f7:2d:d2:48:9c:49:30:dd:a2:a4:26:f3:30:e6:
         30:4c:cc:be:96:25:48:49:ad:d1:46:a7:e7:42:5d:e7:c8:aa:
         60:ed:10:a5:61:bb:89:82:4a:75:67:44:eb:b8:82:1c:55:4e:
         23:09:fd:0a:99:3a:cc:48:1b:19:df:14:c2:c8:22:1f:80:b3:
         eb:97:e1:10:5f:6c:e7:03:74:c5:46:51:85:e6:e2:bd:58:c4:
         03:d6:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:10 2025 by rpki-client