Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          855zePlpnrvKyDGLjuVb488AjNM2ZkNKCCdF2v0Hgzc=
Subject key identifier:   8C:19:B0:48:ED:E4:67:06:F2:83:5B:35:D8:F0:56:BA:CE:47:E2:AE
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       0731C113EDE294EF01976AE04501E2659B58B86B
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:47 +0000
ROA not before:           Mon 07 Jul 2025 15:14:47 +0000
ROA not after:            Mon 06 Jul 2026 15:19:47 +0000
asID:                     264425
IP address blocks:        2804:1e60:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:31:c1:13:ed:e2:94:ef:01:97:6a:e0:45:01:e2:65:9b:58:b8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:47 2025 GMT
            Not After : Jul  6 15:19:47 2026 GMT
        Subject: CN=8C19B048EDE46706F2835B35D8F056BACE47E2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:38:fb:9a:42:8d:af:59:bf:9a:6f:7d:3c:8c:
                    86:4c:df:db:e2:b9:83:3f:83:74:07:e9:50:95:d7:
                    e4:df:a4:ab:16:1f:b2:f8:dd:db:fc:0b:7a:69:61:
                    6e:00:d6:42:89:76:00:46:13:d5:04:5c:fe:eb:3a:
                    bf:e9:70:5b:21:bd:75:15:dd:fa:cc:23:2b:41:2c:
                    44:06:22:b5:41:c1:b4:9f:fa:f7:15:5a:9f:be:4c:
                    80:44:0f:8f:1b:1b:0e:56:02:16:df:82:19:78:a0:
                    48:09:c4:dc:f3:3f:ee:b8:46:27:f3:c0:76:27:71:
                    bb:d7:80:f0:33:2e:c4:74:25:41:9f:a0:e4:50:06:
                    01:17:0f:e4:de:23:c7:28:58:9e:cb:99:30:5f:13:
                    a7:51:a5:e1:7e:a3:45:e6:36:72:e0:97:e2:3f:22:
                    f8:f5:ad:b4:9f:a0:95:ba:93:df:c1:42:a6:dc:01:
                    10:5f:e6:a9:d1:92:bd:7b:57:c9:8e:b1:da:98:5a:
                    37:5c:04:e2:df:1b:ca:29:4f:80:e2:eb:6d:d7:f4:
                    02:e1:ab:0f:4a:2c:3a:6b:36:83:0f:81:19:07:cf:
                    dc:10:d6:04:71:d0:82:c3:08:14:32:35:7c:aa:53:
                    f3:d8:8f:32:bd:8a:b8:47:10:96:3a:51:d4:53:51:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:19:B0:48:ED:E4:67:06:F2:83:5B:35:D8:F0:56:BA:CE:47:E2:AE
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a333030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:dc:d4:ee:94:f8:de:ec:a4:23:a9:44:79:ab:e1:c9:22:
         7d:e5:64:12:f4:84:63:9f:70:ec:f1:86:d4:91:16:c7:4e:5f:
         ba:5f:1d:83:0f:2a:d6:21:9a:c3:4a:67:f8:cc:4b:b5:46:a7:
         8e:ed:3d:55:37:46:30:18:06:01:92:c5:07:3a:ff:89:2f:73:
         a1:0b:76:37:5a:ee:34:1c:6c:e5:5f:ef:8b:49:34:bd:73:5b:
         ad:20:dd:0f:4a:9f:72:7c:1b:1b:2b:82:a0:93:f2:33:8b:d3:
         cc:a1:8a:61:14:bf:d1:1a:6a:c3:ee:b9:17:f5:83:c4:ff:b7:
         0f:b7:96:a4:4e:a9:22:6f:d3:61:c4:c3:49:87:8c:b9:c9:4f:
         70:87:a8:ae:c8:9f:1e:4d:80:fb:95:25:10:8d:39:80:0c:f1:
         75:e2:ff:3f:a5:d2:91:4b:b2:27:91:4b:55:d1:4b:a2:5a:7b:
         bd:e3:70:dd:62:2b:59:5e:8d:ae:e1:fa:73:ba:37:fb:3a:a4:
         20:3b:16:87:f2:0b:7f:03:b0:61:a1:96:7a:c7:6d:89:1b:e0:
         b8:74:76:69:10:50:70:2c:05:6f:68:6b:75:b2:0d:8b:10:cf:
         b7:4b:7c:ed:b3:e8:3b:9b:c8:42:c7:aa:69:50:31:87:76:7d:
         73:f7:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:26:36 2025 by rpki-client