Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030613a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030613a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          MCTa/U454r3XBDJyIejsrdbfUXhB5Qx78YD+D98IJ3o=
Subject key identifier:   1B:4E:FB:12:93:90:B1:14:15:50:1E:F6:C5:8E:F7:82:71:90:4D:25
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       10177281DCEF1F147249F9FDD5EAA91F75668845
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030613a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:21:09 +0000
ROA not before:           Fri 22 Aug 2025 21:16:09 +0000
ROA not after:            Fri 21 Aug 2026 21:21:09 +0000
asID:                     52706
IP address blocks:        2804:c70:600a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:17:72:81:dc:ef:1f:14:72:49:f9:fd:d5:ea:a9:1f:75:66:88:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:16:09 2025 GMT
            Not After : Aug 21 21:21:09 2026 GMT
        Subject: CN=1B4EFB129390B11415501EF6C58EF78271904D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:d1:ab:29:57:3a:58:c0:8e:c9:39:76:8d:
                    73:7e:ce:13:d1:a0:03:85:83:0c:da:68:a0:f4:ec:
                    4f:8c:ca:b3:80:ed:f8:4b:33:87:79:20:38:85:7b:
                    fb:c9:df:aa:84:af:fa:70:38:f2:93:08:2b:33:93:
                    29:8f:b9:21:71:6e:a3:cc:c9:40:a2:dd:af:68:02:
                    9e:c2:0d:d5:17:ce:53:91:11:e9:40:d6:37:b9:97:
                    fa:24:31:b0:ac:35:36:05:3b:b8:dd:df:c5:e5:50:
                    12:d9:6e:85:0a:51:79:58:ea:ef:23:16:88:65:5a:
                    34:a0:24:8a:56:48:e2:e1:4a:9d:66:98:8a:1d:e1:
                    85:76:af:9e:f9:e7:99:47:b6:7e:6d:79:88:32:2e:
                    dd:4c:d5:b2:7b:ba:23:33:2f:4d:45:54:19:f2:37:
                    8d:1d:56:b5:b6:33:f8:60:15:4f:45:15:20:b5:ff:
                    d3:22:df:1e:45:67:41:c8:be:f5:6c:ff:cf:9a:b0:
                    2c:ca:88:05:b4:42:dc:49:6d:60:a5:2e:1d:5b:11:
                    00:17:73:e0:d7:d2:53:5c:f3:69:af:b1:92:8e:de:
                    2d:f5:ee:73:57:49:ec:64:df:8d:f4:dd:70:ff:fe:
                    14:eb:72:7c:17:a0:6c:ca:7a:96:ab:1b:0e:e1:47:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4E:FB:12:93:90:B1:14:15:50:1E:F6:C5:8E:F7:82:71:90:4D:25
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030613a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:600a::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:ae:ab:81:f7:7d:4e:65:b0:90:85:43:db:5e:d6:1b:ca:
         24:ce:95:bd:47:9a:a7:ca:cc:f4:7d:92:24:22:ae:9c:3e:23:
         28:cd:4f:9b:a6:cf:bc:f0:90:85:93:61:cc:57:b4:da:37:94:
         48:f6:0c:09:19:a1:9d:0e:5e:6b:a4:c8:dd:06:b0:8f:8a:ed:
         6d:46:93:c1:30:93:fa:30:76:33:4b:6e:8a:5e:39:32:5c:db:
         70:ed:19:db:a4:e4:4c:b5:54:0f:08:43:96:c5:b0:5d:91:74:
         2b:f5:39:a2:94:e8:fa:d2:03:fc:97:f8:96:92:f2:60:6c:32:
         03:4a:4d:08:e6:32:c7:f3:57:37:9b:eb:da:33:d1:9f:5d:b0:
         6b:ef:49:89:24:4c:ec:f4:6c:c6:65:9f:e0:90:82:15:c3:5f:
         d0:6f:a9:ae:00:31:96:22:1e:06:73:c9:e7:5f:b8:31:db:1e:
         0a:81:17:ca:30:95:ea:ae:94:6b:e5:22:19:ec:5d:0c:d7:a8:
         5f:bf:a7:ab:70:86:44:33:33:35:ed:97:6c:8e:05:ab:0a:d3:
         56:ae:fe:d4:0e:a9:13:15:f5:76:3c:3d:89:34:87:59:23:13:
         fd:6c:aa:3f:02:b5:4d:52:c9:7b:d0:cb:15:af:47:29:84:16:
         1e:67:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:24 2025 by rpki-client