Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          QY4Gl65jJ+uz3DWgvpVPbZPvA7FBSDZtGkfQ24s6ZzY=
Subject key identifier:   A9:FF:08:14:89:6D:87:71:CE:79:29:09:F4:42:08:94:12:A0:8C:B8
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       4AF01BF409C2AA5CF8A52B6CBFFB24010BE1D96D
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:20:21 +0000
ROA not before:           Fri 22 Aug 2025 21:15:21 +0000
ROA not after:            Fri 21 Aug 2026 21:20:21 +0000
asID:                     52706
IP address blocks:        2804:c70:6008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f0:1b:f4:09:c2:aa:5c:f8:a5:2b:6c:bf:fb:24:01:0b:e1:d9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:15:21 2025 GMT
            Not After : Aug 21 21:20:21 2026 GMT
        Subject: CN=A9FF0814896D8771CE792909F442089412A08CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:59:f4:f5:00:ea:3f:5a:48:6b:15:5c:4a:
                    dc:81:4f:83:3c:08:7e:9e:06:39:5e:a1:b8:f4:32:
                    4c:76:97:f6:ea:4c:36:98:fc:fc:ab:ff:43:2b:d2:
                    b5:a0:ad:0a:6d:57:08:67:09:0a:a7:4f:28:13:eb:
                    a3:97:1d:85:aa:df:e3:73:01:a7:93:62:57:d0:c0:
                    f3:21:1e:66:b5:7d:25:58:c8:e8:e3:09:87:7e:b5:
                    68:ab:85:25:03:e0:87:88:47:b4:4d:b8:22:fb:b9:
                    eb:5d:f6:e5:aa:d5:87:7b:f3:ba:88:9e:47:8c:94:
                    98:f1:7a:fd:38:0b:cb:f6:ea:8d:9f:8e:53:41:f9:
                    b2:18:1a:b6:fa:86:4d:d3:d1:41:80:af:b2:68:1e:
                    02:a0:b9:bd:2d:2c:37:8c:f9:aa:8c:c5:94:c6:9f:
                    f3:51:2c:27:85:e0:93:cf:19:86:75:07:95:a4:26:
                    50:f3:84:85:fa:04:8f:50:59:7a:a9:dc:27:ea:f2:
                    68:aa:9e:1c:d8:77:e8:a4:ac:b7:82:70:5c:3b:51:
                    a0:c9:42:81:20:46:32:b1:8f:c9:cb:82:66:b4:1b:
                    10:62:66:0d:23:09:e5:a4:89:56:41:91:57:55:47:
                    58:98:92:9d:fb:92:24:fb:56:9d:8d:c3:2c:c8:65:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:08:14:89:6D:87:71:CE:79:29:09:F4:42:08:94:12:A0:8C:B8
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030383a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:c8:72:7d:1f:e4:3f:da:2e:77:47:d6:85:39:f9:a4:86:
         b4:8c:df:7c:cf:49:aa:ee:35:8a:cd:04:9b:76:e2:5d:1e:f1:
         6a:e6:bb:26:de:20:69:f0:0c:6b:d1:41:a5:9a:cd:3b:39:da:
         c1:e9:89:b0:a5:fc:c7:43:4b:be:18:ce:d5:f5:56:42:c7:dc:
         10:46:66:43:9d:ae:84:8e:48:f7:b3:96:28:d3:e1:7c:bd:bb:
         6e:28:69:43:29:f1:b9:68:63:a7:72:e4:c5:67:3f:2e:7a:d0:
         07:a8:ea:8c:cf:7a:71:e0:ca:46:87:00:dc:48:0d:cc:cb:80:
         54:67:68:22:3e:48:ed:61:ee:d1:26:d1:23:91:99:96:a5:e1:
         6f:be:dc:29:8b:bb:30:7d:d8:43:63:28:62:31:b7:7a:bb:16:
         dc:e9:b9:eb:56:3b:c5:e5:19:62:5f:8f:ac:5e:3d:de:25:6c:
         c9:aa:4e:04:ee:20:b2:5f:bb:dc:35:57:cb:d2:89:35:da:e8:
         46:f1:ee:d1:6a:a0:dd:f8:71:74:a3:13:aa:98:e6:5c:7d:d0:
         fd:ac:50:62:a1:9c:54:7e:5f:59:e0:98:9a:32:d6:10:df:d4:
         a7:32:40:49:75:6c:67:ea:66:e6:85:13:a1:d6:79:30:98:5d:
         ca:81:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:04 2025 by rpki-client