Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          9r/nYBRdqD5FLyueLr8UG3FvCAEKq6015hKBXyMXw40=
Subject key identifier:   F8:18:25:47:B2:76:92:0E:FB:EB:0C:59:33:09:36:F2:93:43:5B:33
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       502257DD8EC0E27C79C5F4CA45C5D19015DF8C15
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:46 +0000
ROA not before:           Mon 07 Jul 2025 15:14:46 +0000
ROA not after:            Mon 06 Jul 2026 15:19:46 +0000
asID:                     264425
IP address blocks:        2804:1e60:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:22:57:dd:8e:c0:e2:7c:79:c5:f4:ca:45:c5:d1:90:15:df:8c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:46 2025 GMT
            Not After : Jul  6 15:19:46 2026 GMT
        Subject: CN=F8182547B276920EFBEB0C59330936F293435B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:14:08:94:8e:0b:f4:f9:ed:df:1d:0c:40:
                    aa:f8:8a:ff:84:d4:53:6c:57:14:7a:1d:33:5e:a1:
                    ca:22:15:5b:4c:50:c4:d9:36:63:13:d7:a9:7c:1e:
                    b6:65:49:d0:b8:b4:ef:22:f7:c2:52:1b:fa:ea:a7:
                    50:4e:1f:23:67:b2:2f:1f:ca:57:5a:1b:e7:98:4f:
                    50:9f:3e:fb:f5:0d:e7:13:b1:c5:75:25:ce:1e:7f:
                    c2:03:e9:62:1b:dc:97:cd:21:05:16:10:61:b4:27:
                    35:e5:aa:30:e4:2e:e0:e4:2a:82:34:19:a3:98:df:
                    42:37:df:c5:8c:7f:31:9f:0d:f9:f6:8c:1d:70:33:
                    21:81:31:66:18:a9:da:22:e4:fc:5e:15:ac:fd:e5:
                    cc:23:f1:b1:12:89:2e:0b:b4:86:f8:85:6b:c2:3c:
                    d1:9c:0c:1a:e0:94:05:b8:70:6b:04:92:91:cf:bf:
                    08:63:e6:21:23:c1:42:f6:4b:dc:93:c7:56:ba:a9:
                    40:fa:34:0a:ff:1a:58:15:c9:e7:78:1b:c2:9e:ed:
                    28:cd:8f:fd:ed:d8:46:75:60:24:2a:56:9e:9a:c1:
                    a1:52:4e:52:7d:4b:df:e0:84:2a:f1:6d:5c:2d:ba:
                    70:3a:9d:67:3d:62:a2:f0:1d:6d:94:7f:b4:2e:79:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:25:47:B2:76:92:0E:FB:EB:0C:59:33:09:36:F2:93:43:5B:33
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a373030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:5f:ec:d0:c4:c7:c5:46:5b:27:55:e3:86:60:a9:c5:a6:60:
         ff:49:2b:35:39:a3:fb:22:ea:18:71:a3:d8:d2:df:2d:c5:46:
         c9:61:e3:30:7c:5a:a5:e2:01:a2:4c:49:68:41:53:7d:a7:44:
         38:6c:e3:53:f5:9d:12:b3:15:1a:b2:d5:be:6f:1d:4c:4a:cb:
         11:12:54:ba:67:b8:91:13:58:13:93:06:c7:0c:de:69:59:6e:
         ab:74:8d:54:6c:2c:fd:c2:34:32:ac:9f:88:48:ef:7c:c4:45:
         d3:d4:7d:21:ae:04:4d:a9:6e:e7:15:66:ce:87:0c:65:c4:53:
         01:87:46:38:08:4e:58:5e:79:b8:7f:c6:da:9d:0d:ec:b1:5d:
         32:25:b0:67:03:3e:a0:29:ab:47:83:af:de:c6:bb:16:2e:9b:
         39:52:0b:77:7d:23:12:94:d3:8e:4f:c7:ea:41:90:ca:49:24:
         58:4b:64:18:03:c2:b9:9d:e0:f7:f0:0a:c0:2b:89:17:69:86:
         b4:ef:68:bb:2b:07:22:a1:8f:56:1e:80:6e:85:58:9d:15:98:
         43:c8:84:31:1c:99:d6:ad:ed:1c:c3:dc:84:b4:9a:40:71:b0:
         54:3c:38:d8:2d:a8:c9:ee:0d:53:6b:38:a9:a2:0a:81:a7:6b:
         68:5c:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:12 2025 by rpki-client