Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363035303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363035303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          lTnLSfoYBJk0KL03nwVZrYFDXro9Mep4gcgm2s1kZps=
Subject key identifier:   16:EB:56:9A:2E:87:A6:A5:E4:19:CF:A3:FF:A4:C5:B2:60:46:DC:E1
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       51F36F60783E361A2794967337DE998B2C2EA024
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363035303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:22:04 +0000
ROA not before:           Fri 22 Aug 2025 21:17:04 +0000
ROA not after:            Fri 21 Aug 2026 21:22:04 +0000
asID:                     52706
IP address blocks:        2804:c70:6050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f3:6f:60:78:3e:36:1a:27:94:96:73:37:de:99:8b:2c:2e:a0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:17:04 2025 GMT
            Not After : Aug 21 21:22:04 2026 GMT
        Subject: CN=16EB569A2E87A6A5E419CFA3FFA4C5B26046DCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:93:e0:84:ba:49:98:44:16:c4:44:75:3b:43:
                    70:04:96:be:92:0b:8c:ce:ae:c2:da:3a:e1:f1:49:
                    a2:2e:cb:21:36:7d:a9:34:bd:1d:c5:c1:19:c1:04:
                    19:4c:25:7f:2c:88:6a:6a:27:1c:4c:a8:22:a9:05:
                    86:ba:f8:be:0f:1f:d4:bd:05:73:5a:da:de:97:7f:
                    95:34:41:aa:fa:6f:ec:49:0d:ff:69:35:d0:db:c6:
                    6b:11:87:64:da:a3:cb:11:a5:86:89:0e:4a:dc:2d:
                    ad:c7:cb:63:43:08:c6:bc:e7:48:06:88:27:d1:d2:
                    b0:74:f7:0c:33:84:47:03:4d:a4:27:f2:e5:bd:54:
                    34:55:fa:a0:1b:7d:9b:3b:bd:a1:52:6d:c3:d5:81:
                    f4:7e:74:d6:5b:e8:cb:3e:6d:35:be:2f:0a:b4:04:
                    21:d9:72:15:01:32:c4:29:52:32:78:ff:f2:cc:bf:
                    7b:45:9e:bf:85:33:07:a1:91:7a:88:0c:6e:1d:c6:
                    e1:a2:5d:e4:9b:d2:24:dc:91:d2:0a:22:b9:cc:fa:
                    0c:63:0d:c5:e1:2e:3c:5e:14:86:bf:fa:ec:2d:f7:
                    f9:0e:c1:e7:de:9a:44:f1:f7:b0:69:70:42:d2:78:
                    d5:d1:69:83:0e:eb:7f:73:2d:d2:56:91:6a:15:1c:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:56:9A:2E:87:A6:A5:E4:19:CF:A3:FF:A4:C5:B2:60:46:DC:E1
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363035303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6050::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:65:16:ec:78:ca:a3:d4:b8:a4:f0:96:80:70:a6:33:12:
         b2:72:75:11:7b:c7:5f:5f:63:f3:49:a4:4e:b7:76:6e:76:9e:
         e3:8c:8d:5b:5a:87:93:02:02:48:91:d5:aa:95:37:7e:46:fc:
         bd:f4:5e:bf:76:e4:06:fe:c2:3f:39:d1:82:c3:0f:cc:2d:f2:
         57:7c:fb:bb:96:7d:67:af:40:3f:50:05:02:0a:67:41:2a:36:
         63:ca:e4:9f:f7:98:92:4b:43:63:f5:2f:e7:19:9a:4d:ad:f5:
         e8:cd:57:c1:0b:ee:c9:da:33:78:d5:45:74:95:c2:68:9a:4b:
         bd:1c:9c:50:1c:8f:20:96:63:f2:ba:d2:71:cc:81:58:67:41:
         82:89:9e:f3:2c:20:ce:1b:74:62:4a:04:08:44:28:57:2e:d9:
         99:a6:2f:ad:c3:85:4a:e1:f9:3a:cd:03:9e:8f:d7:1f:12:41:
         99:b5:5f:66:1e:5c:dc:81:47:6b:3f:25:bf:86:b7:69:85:c8:
         35:0f:e8:40:a2:6f:90:bf:da:0a:23:7b:7a:ec:ad:af:4f:d2:
         fd:1e:44:d7:1b:1a:35:a1:42:e0:e2:84:94:6c:e1:aa:81:ba:
         79:18:e4:ca:cd:24:4c:64:03:2f:19:00:78:42:f5:d1:04:b6:
         50:c8:72:ad
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUUfNvYHg+NhonlJZzN96ZiywuoCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIyMTE3MDRaFw0yNjA4MjEyMTIyMDRaMDMxMTAvBgNV
BAMTKDE2RUI1NjlBMkU4N0E2QTVFNDE5Q0ZBM0ZGQTRDNUIyNjA0NkRDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDok+CEukmYRBbERHU7Q3AElr6S
C4zOrsLaOuHxSaIuyyE2fak0vR3FwRnBBBlMJX8siGpqJxxMqCKpBYa6+L4PH9S9
BXNa2t6Xf5U0Qar6b+xJDf9pNdDbxmsRh2Tao8sRpYaJDkrcLa3Hy2NDCMa850gG
iCfR0rB09wwzhEcDTaQn8uW9VDRV+qAbfZs7vaFSbcPVgfR+dNZb6Ms+bTW+Lwq0
BCHZchUBMsQpUjJ4//LMv3tFnr+FMwehkXqIDG4dxuGiXeSb0iTckdIKIrnM+gxj
DcXhLjxeFIa/+uwt9/kOwefemkTx97BpcELSeNXRaYMO639zLdJWkWoVHHa3AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUFutWmi6HpqXkGc+j/6TFsmBG3OEwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzIzODMwMzQzYTYzMzczMDNhMzYzMDM1MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcGBQMA0GCSqGSIb3DQEBCwUAA4IB
AQBuR2UW7HjKo9S4pPCWgHCmMxKycnURe8dfX2PzSaROt3Zudp7jjI1bWoeTAgJI
kdWqlTd+Rvy99F6/duQG/sI/OdGCww/MLfJXfPu7ln1nr0A/UAUCCmdBKjZjyuSf
95iSS0Nj9S/nGZpNrfXozVfBC+7J2jN41UV0lcJomku9HJxQHI8glmPyutJxzIFY
Z0GCiZ7zLCDOG3RiSgQIRChXLtmZpi+tw4VK4fk6zQOej9cfEkGZtV9mHlzcgUdr
PyW/hrdphcg1D+hAom+Qv9oKI3t67K2vT9L9HkTXGxo1oULg4oSUbOGqgbp5GOTK
zSRMZAMvGQB4QvXRBLZQyHKt
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:41:08 2025 by rpki-client