Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          8Sg3SjRFL8ua2axQNHw01rMLcfGWA+KFIZH8a12/hSI=
Subject key identifier:   F7:D6:41:8D:35:1A:86:16:68:FF:9B:8E:11:65:3E:C9:B1:36:DB:CB
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       24EA6EBACF2FA1AD8203B871F771AE564D1D37B3
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:50 +0000
ROA not before:           Mon 07 Jul 2025 15:14:50 +0000
ROA not after:            Mon 06 Jul 2026 15:19:50 +0000
asID:                     264425
IP address blocks:        2804:1e60:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ea:6e:ba:cf:2f:a1:ad:82:03:b8:71:f7:71:ae:56:4d:1d:37:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:50 2025 GMT
            Not After : Jul  6 15:19:50 2026 GMT
        Subject: CN=F7D6418D351A861668FF9B8E11653EC9B136DBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0d:38:83:57:52:ac:27:5c:4a:83:d2:55:2c:
                    83:03:47:ca:39:bc:49:38:cc:0b:40:b6:da:58:62:
                    68:aa:d1:16:22:c0:8b:87:a4:c8:8b:71:c9:4d:a5:
                    c6:85:67:e5:88:dc:f5:6a:11:f8:81:a0:bf:77:3f:
                    b1:87:a2:a7:59:f3:90:01:04:6d:06:21:55:3b:03:
                    5a:69:bb:de:5c:6e:5a:53:54:28:83:cc:86:bc:3d:
                    39:e7:ca:72:18:08:36:59:36:a4:5d:62:3c:9c:8f:
                    54:68:13:fe:dd:f6:18:5e:97:37:e9:bd:db:26:b3:
                    06:6b:d0:67:ae:1f:94:a3:c7:a2:4d:45:69:76:d9:
                    e2:ee:76:d6:e3:5e:7f:53:d1:cd:e0:06:24:ff:a3:
                    a8:39:e6:7a:cb:db:9b:ba:be:61:dc:69:02:10:27:
                    e5:d9:80:74:bb:2d:58:44:b2:85:3c:36:71:02:a4:
                    07:20:ff:9b:f2:9e:a6:49:2c:88:0c:b4:5d:4c:a5:
                    d6:bb:d7:bf:f0:08:fe:d4:71:fe:a5:be:6c:0b:40:
                    77:44:f4:06:3b:1d:c7:7b:66:88:a7:aa:31:de:0e:
                    61:70:86:47:15:19:49:b3:e7:c1:8f:2c:03:ce:29:
                    b4:78:70:8b:20:9c:fa:9e:3a:9e:03:43:27:04:1a:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:41:8D:35:1A:86:16:68:FF:9B:8E:11:65:3E:C9:B1:36:DB:CB
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a323030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:28:64:75:3b:7d:b2:8b:2f:36:67:b1:fd:18:6e:14:f3:30:
         fa:aa:6e:b5:ac:67:51:e0:a2:cd:91:66:51:31:66:bc:44:d1:
         c8:1d:18:4c:5a:9c:6d:d3:d8:53:4c:8a:1d:a6:28:ac:0e:15:
         ee:ab:f1:34:73:cf:d7:a9:c2:88:bb:a0:8f:7b:2e:6c:63:78:
         59:2d:c3:1a:03:5e:53:af:e6:ba:51:e1:1e:ed:fc:bd:ba:fc:
         b0:fc:14:ae:75:68:11:9c:f6:6d:69:b9:e3:5c:39:11:91:e8:
         0b:97:df:59:2b:64:2c:9d:87:bd:cb:8a:c6:2d:09:9d:ed:b3:
         53:9c:96:ef:93:1c:b8:61:e9:fd:a1:30:d0:31:8f:e1:30:83:
         dc:2c:8d:b9:12:ca:52:a3:29:9a:78:fb:cf:d2:d0:1a:bf:7f:
         b0:06:bd:5d:a0:a9:b9:aa:c7:81:1b:b7:a2:b1:29:35:31:e6:
         76:2e:d9:f6:68:1f:ad:36:62:ed:c9:a3:b4:90:6f:11:a7:a6:
         cd:a0:b8:a9:2f:e3:89:8b:ed:0a:c1:54:bb:86:dc:04:f2:55:
         6c:b1:f2:a1:1e:c1:15:d0:43:c6:d6:98:fb:ec:8a:34:7c:40:
         b5:b2:3d:f2:bb:fe:3b:e7:16:32:93:aa:a0:e7:b5:99:00:57:
         23:a7:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:33 2025 by rpki-client