Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          3eS838FjdMgqDlR10WdqpEk9VdOHytPYblGL9mE406U=
Subject key identifier:   2D:52:4E:B5:EB:B6:CA:ED:E1:58:6A:03:2C:0D:DC:B0:FC:1F:F8:4B
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       121994996E1FEA9FAA9D5FA6843FE73E34E46492
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:50 +0000
ROA not before:           Mon 07 Jul 2025 15:14:50 +0000
ROA not after:            Mon 06 Jul 2026 15:19:50 +0000
asID:                     264425
IP address blocks:        2804:1e60:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:19:94:99:6e:1f:ea:9f:aa:9d:5f:a6:84:3f:e7:3e:34:e4:64:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:50 2025 GMT
            Not After : Jul  6 15:19:50 2026 GMT
        Subject: CN=2D524EB5EBB6CAEDE1586A032C0DDCB0FC1FF84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:a1:f3:c2:60:07:41:c0:06:ee:e9:c0:b7:
                    a7:97:71:c2:32:d4:a9:aa:83:a0:a7:88:d1:b1:fa:
                    fb:c6:79:3d:e5:71:a7:34:be:7a:0f:b6:7e:ac:8e:
                    22:e1:8d:d2:24:58:0e:62:29:08:8e:ea:ba:6c:9e:
                    38:9c:53:85:39:11:de:e1:b5:3b:e1:ae:95:6b:dd:
                    16:52:20:aa:80:a8:00:0d:d8:19:17:dd:2b:ed:5a:
                    05:30:f8:c3:f6:69:ce:69:f8:5b:9f:ef:bb:0c:d0:
                    f7:4e:06:32:59:ef:73:87:95:1b:45:25:d3:6d:db:
                    0a:2f:83:3c:7b:74:e8:e2:69:28:97:2b:08:a6:eb:
                    4f:b5:a2:75:e6:d4:d5:f4:05:82:9b:94:83:e4:2d:
                    9d:b0:58:98:71:be:d0:cb:85:35:15:2d:8f:a6:58:
                    ff:81:4f:63:03:39:63:10:48:77:c3:26:6c:4e:f0:
                    e6:52:bf:44:05:3a:a4:1f:3c:6a:f2:f8:2c:67:8f:
                    cd:c2:fb:46:b1:3f:0c:0c:36:ed:01:57:e2:53:8b:
                    aa:c9:62:e4:3b:1d:41:66:c0:56:bc:db:c3:eb:7b:
                    4e:c5:9a:42:eb:b8:94:03:48:40:74:41:a5:82:60:
                    3d:ee:72:ed:9c:81:27:06:9d:27:22:c4:f0:07:38:
                    98:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:4E:B5:EB:B6:CA:ED:E1:58:6A:03:2C:0D:DC:B0:FC:1F:F8:4B
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a623030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c5:69:f7:eb:9d:c0:1d:72:d6:50:68:46:3b:ab:67:c7:6c:83:
         c5:46:bc:46:27:91:ad:98:cc:4f:8e:24:8a:75:f2:bc:bb:db:
         75:cd:b5:c5:b5:2a:b3:2d:2e:a3:2a:5f:ca:51:ac:74:af:51:
         87:58:40:df:89:ef:30:fe:32:9c:1f:af:ef:9d:20:62:ca:ea:
         52:aa:84:4b:60:2a:5e:ec:7b:5e:0b:cf:61:23:e8:19:b3:fe:
         4e:06:46:7d:f9:58:d5:a9:65:38:e1:b5:03:37:59:cf:80:71:
         a2:98:a8:f5:89:a4:ba:78:bc:9b:29:11:b8:a1:50:a7:cc:6a:
         22:47:53:93:08:c7:8a:29:b3:14:d2:7b:3a:45:84:26:a6:65:
         d4:f3:73:11:03:9d:ab:a6:d8:da:55:60:8b:9a:83:dc:a3:68:
         af:a5:c6:14:1f:75:33:4a:2c:34:78:17:95:8b:20:d8:dc:90:
         3e:77:71:9a:c6:19:a2:c6:b6:3e:6e:d4:50:13:00:23:ee:43:
         e2:8d:9c:05:f0:76:c5:99:38:62:fa:b2:2f:50:9d:e6:38:52:
         1d:1d:b0:cb:85:ad:1f:b3:7b:7e:a6:2d:3a:4b:c2:8a:49:81:
         a7:5a:31:bc:4d:20:3d:c0:81:4f:83:5f:d2:53:80:9c:c0:c8:
         31:37:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:34:05 2025 by rpki-client