Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          3Kcsj2g/G8MJDKKYZTUxHTu4BgyjiAQBo5FzZzhZ71I=
Subject key identifier:   73:6A:65:B9:A6:03:45:5E:19:5A:14:33:C8:85:78:4D:4F:A3:0B:C7
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       36DEAFAEF28E6BD712DF2C6428A506D018CB2C74
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:50 +0000
ROA not before:           Mon 07 Jul 2025 15:14:50 +0000
ROA not after:            Mon 06 Jul 2026 15:19:50 +0000
asID:                     264425
IP address blocks:        2804:1e60:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:af:ae:f2:8e:6b:d7:12:df:2c:64:28:a5:06:d0:18:cb:2c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:50 2025 GMT
            Not After : Jul  6 15:19:50 2026 GMT
        Subject: CN=736A65B9A603455E195A1433C885784D4FA30BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:75:54:dc:2b:c3:8d:94:b9:b3:bb:f0:e4:
                    67:40:0d:90:be:8c:89:05:e0:74:e9:e2:f5:98:23:
                    83:cc:5f:87:7b:a1:97:9b:47:8b:c2:1f:0f:47:f7:
                    f1:4a:76:69:b4:e6:f4:0f:b9:1c:40:e7:03:63:09:
                    3a:08:eb:9e:6f:32:6c:af:52:e5:81:ec:4d:51:2a:
                    02:be:57:bc:47:8d:24:8e:a2:d9:2b:4c:8b:93:95:
                    20:e5:fa:76:ed:9a:06:50:d7:f3:12:c9:7a:ec:c0:
                    b5:fc:a3:65:84:6e:63:28:d2:d0:ef:9c:06:c9:c7:
                    bb:15:70:6a:e5:a5:a3:e8:8d:df:66:07:f4:d0:0b:
                    70:5a:27:e8:1a:19:1a:ca:c8:58:8d:73:4f:00:1e:
                    b5:16:92:64:18:d1:a5:01:34:6e:6a:9e:71:79:3f:
                    ea:46:2a:a8:92:87:6c:7e:2a:29:fa:d4:52:ff:bf:
                    55:5e:6b:de:97:56:82:78:bc:15:93:9c:c1:37:58:
                    2c:e2:0f:f9:19:b4:0f:69:d0:13:37:01:54:c6:ad:
                    5b:99:63:4a:50:6d:0e:27:91:e2:ee:d2:27:61:3b:
                    68:cd:1b:cb:e7:d2:6c:84:91:49:8e:eb:5f:c5:eb:
                    68:d1:e0:5d:d2:90:b7:00:49:06:c5:25:fb:a0:23:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6A:65:B9:A6:03:45:5E:19:5A:14:33:C8:85:78:4D:4F:A3:0B:C7
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a383030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:36:b9:2e:75:b2:21:5d:f8:88:f7:a4:b4:60:6f:b4:46:49:
         f6:24:18:e0:1e:29:25:c0:65:47:0f:5d:9c:66:c0:88:6d:3b:
         05:d1:db:36:d2:3e:c0:c9:55:36:2b:37:ac:40:28:a9:b5:86:
         77:71:6b:f1:d6:1a:b7:fe:87:1a:e0:f1:58:32:ec:00:3c:91:
         b2:49:23:a9:db:84:f7:95:70:53:90:9b:07:09:05:22:dc:c5:
         01:df:7f:4a:d7:b8:91:77:a7:25:f2:62:88:56:d7:21:b7:bb:
         d9:f7:a9:66:a8:ec:72:4f:96:07:73:68:ae:a2:43:16:da:df:
         6b:f0:32:f0:4c:69:6e:82:63:0c:ae:c4:c2:9e:16:52:b4:96:
         46:51:a7:b3:cb:dc:56:88:c2:fe:59:ef:d9:ab:b9:4b:7b:a8:
         ed:15:33:b2:6f:6b:cd:71:8d:dc:84:07:d3:89:92:bd:4e:9f:
         b1:48:f1:f2:03:d2:9e:c9:5a:1f:5e:23:8a:0a:a8:57:d3:7c:
         e0:a9:2c:c1:e9:88:ec:fa:c3:a9:5e:84:47:bc:18:02:47:59:
         9f:21:c4:43:17:42:ec:49:e7:71:3f:94:e6:a3:3d:35:e0:84:
         a9:13:8f:ba:61:8a:1f:96:8c:ee:35:8b:2e:e7:32:cd:b7:13:
         ec:59:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:22 2025 by rpki-client