Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          GM6iyZ8YxaYFp6L3cVtGNBXml0zBPvfjS5i8k5dck4o=
Subject key identifier:   66:0D:2E:4D:AA:0F:A9:CC:2F:E4:08:31:8A:E2:44:C0:7C:82:18:67
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       4811D9E4C1C27842855921374199A329D56F930B
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:46 +0000
ROA not before:           Mon 07 Jul 2025 15:14:46 +0000
ROA not after:            Mon 06 Jul 2026 15:19:46 +0000
asID:                     264425
IP address blocks:        2804:1e60:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:11:d9:e4:c1:c2:78:42:85:59:21:37:41:99:a3:29:d5:6f:93:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:46 2025 GMT
            Not After : Jul  6 15:19:46 2026 GMT
        Subject: CN=660D2E4DAA0FA9CC2FE408318AE244C07C821867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:e7:b6:9b:29:a5:4b:45:b2:44:d0:34:0d:
                    e4:06:4d:dc:c6:4e:bd:23:c0:b4:91:30:87:ad:68:
                    97:4a:3c:92:d5:98:c0:fc:24:ad:d4:63:f9:f6:2b:
                    65:57:e9:9b:88:10:81:be:de:dc:54:60:b7:21:0e:
                    ec:66:82:c7:15:44:88:a4:7d:7c:72:fb:14:2f:68:
                    f1:cb:b8:8d:d3:c1:94:bb:08:81:33:7f:9b:65:9c:
                    49:83:96:13:15:78:df:66:57:52:92:c6:ac:e6:6b:
                    06:8f:d7:9b:2c:ce:25:7a:7d:be:be:f4:ce:e1:04:
                    cd:7f:07:aa:e8:7f:b1:67:b0:cf:00:61:8f:3e:67:
                    ca:c8:a5:a3:53:15:e0:85:1b:99:3a:18:62:f4:da:
                    44:1d:8e:59:cf:f4:30:14:06:9b:dc:ab:d6:92:7a:
                    3b:c9:4b:94:bf:5f:44:cf:9d:21:88:a3:49:7f:18:
                    ec:86:f2:33:5d:ab:78:df:e7:65:7f:8c:22:6a:d6:
                    3f:60:3f:85:a3:b8:be:ca:e2:d9:59:a5:cc:8a:7e:
                    9c:ef:c7:42:b4:30:c5:09:35:b9:74:40:cc:da:13:
                    90:3a:81:55:7a:99:df:86:cf:8d:a4:ae:44:1e:b8:
                    4a:9c:49:a8:60:58:62:6c:33:98:88:1b:b7:7f:2a:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0D:2E:4D:AA:0F:A9:CC:2F:E4:08:31:8A:E2:44:C0:7C:82:18:67
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a343030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:36:1d:b2:06:83:55:64:4b:1d:8a:fb:cb:d3:b9:63:5a:
         c1:d8:ae:1e:8e:78:a8:b8:f4:a5:81:6d:05:4e:89:c1:7a:fe:
         2f:e7:ab:bf:03:09:92:9d:fe:68:8e:88:cd:63:b0:04:df:7a:
         ac:0c:17:7b:9e:f4:22:39:35:3b:09:be:6f:21:40:bd:c1:a9:
         c7:cf:46:5d:84:c9:dd:c8:a0:37:d7:e7:8e:6b:d0:72:10:a2:
         91:13:f7:53:e9:bc:24:29:1c:7a:b4:db:65:6a:5b:9e:77:bb:
         72:41:b6:60:8d:eb:25:36:4e:ce:5f:f3:85:db:3b:e0:5c:89:
         35:38:a9:8a:94:5b:9f:e3:8e:49:e6:b0:e8:a8:7e:dd:a9:56:
         0d:43:d4:41:f0:59:ee:2c:b1:39:03:31:b7:b1:77:98:bb:51:
         8f:a1:69:5f:cf:47:94:c9:5d:90:c8:ba:72:b7:94:38:74:12:
         9e:8a:5d:20:e1:6e:5d:5f:be:7b:ce:aa:a7:b4:c6:88:28:6e:
         60:d1:a8:05:37:9c:77:23:22:5d:1a:d0:4b:3c:59:c0:3c:7a:
         77:95:11:14:3e:ae:02:e1:78:c5:18:3b:c3:43:d4:d6:a5:11:
         1e:b4:43:0b:e2:89:32:09:3d:d2:97:09:7f:2a:3f:b8:6d:4e:
         9f:59:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:11 2025 by rpki-client