Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa
File:                     323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa (raw, json)
Hash identifier:          9Kaw8YGrXePWZiaz3UxA8Wdrp6dAlYHpdzziomLLoms=
Subject key identifier:   9C:6B:79:2D:D8:92:5D:DB:0C:C3:93:D8:41:C4:91:C0:AA:AF:91:33
Certificate issuer:       /CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
Certificate serial:       488BBDE66BA63755F162741492AE93B1739D2743
Authority key identifier: FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa
Signing time:             Mon 07 Jul 2025 15:19:45 +0000
ROA not before:           Mon 07 Jul 2025 15:14:45 +0000
ROA not after:            Mon 06 Jul 2026 15:19:45 +0000
asID:                     264425
IP address blocks:        2804:1e60:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8b:bd:e6:6b:a6:37:55:f1:62:74:14:92:ae:93:b1:73:9d:27:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F
        Validity
            Not Before: Jul  7 15:14:45 2025 GMT
            Not After : Jul  6 15:19:45 2026 GMT
        Subject: CN=9C6B792DD8925DDB0CC393D841C491C0AAAF9133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:76:18:30:bf:61:50:a4:47:d9:62:c2:60:
                    85:68:38:58:57:76:33:2e:08:0c:8c:13:66:cb:03:
                    b1:66:04:0d:d0:15:32:5b:6a:1a:32:bd:ed:b7:49:
                    9c:f4:24:c0:0d:04:ab:92:7d:1e:6a:f4:7c:f6:5f:
                    52:c8:bd:a0:7c:ec:1c:dd:9f:47:21:bd:66:05:a6:
                    cb:f8:cf:e2:6d:fe:d2:cc:9d:91:13:05:0e:71:4b:
                    1b:73:ad:6c:31:2a:4f:34:5d:f3:33:2d:6d:4f:40:
                    7c:56:fb:37:91:6a:8c:c7:9c:d2:fe:90:c0:b4:12:
                    eb:87:5b:8e:9d:c3:ef:16:b5:8f:d7:d1:cd:2b:2a:
                    a0:c2:1f:e5:ae:cb:c5:c4:9f:7b:b6:af:4d:18:57:
                    fb:ec:15:e5:2a:47:84:8e:32:e1:a3:9e:35:b8:80:
                    37:51:6f:94:64:37:e6:d0:f3:b7:e4:45:43:90:7f:
                    ac:99:1f:80:bc:53:02:9d:d2:37:1e:b2:7b:91:4e:
                    49:37:60:89:d1:46:bf:2a:16:9e:8f:09:08:f1:fb:
                    42:c1:26:92:be:37:29:2b:27:45:a6:71:ef:af:73:
                    b0:16:9c:e5:b5:ad:78:9e:03:92:bd:71:bd:26:f6:
                    c3:cd:a9:b7:d1:57:aa:3d:fb:bb:0b:00:8c:e4:b5:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:79:2D:D8:92:5D:DB:0C:C3:93:D8:41:C4:91:C0:AA:AF:91:33
            X509v3 Authority Key Identifier:
                keyid:FA:1F:E3:BB:76:D2:2F:9B:57:6A:C2:40:FA:8E:05:0A:8D:C9:4A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1FE3BB76D22F9B576AC240FA8E050A8DC94A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/323830343a316536303a643030303a3a2f33362d3336203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e60:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:62:34:1c:06:14:42:5f:b4:bc:8d:da:12:29:cd:36:64:
         bf:cd:ca:c0:39:df:3d:79:d8:17:3c:a3:ec:54:fb:32:76:04:
         88:5c:20:8a:c0:90:2f:c8:8d:01:0f:c8:c1:96:d0:51:45:ad:
         ee:7e:8f:90:57:5a:5d:a3:99:41:e9:a4:1d:7c:18:27:1a:f4:
         1c:e0:80:a9:2e:92:22:04:2b:24:94:67:ce:01:44:a2:54:0d:
         1b:11:68:5c:b3:63:2c:be:5b:16:f2:aa:b3:80:37:16:a4:5b:
         fc:51:af:e3:a4:86:fa:3e:5b:33:27:ad:f5:da:d2:4a:4c:90:
         10:f4:dc:b2:c5:00:59:64:2e:6c:37:90:9d:42:50:44:8d:9e:
         bc:56:c5:37:64:07:af:c1:38:81:dc:6b:03:1f:27:7a:0d:56:
         a7:f8:04:71:ed:02:c1:ae:fc:ce:e8:12:19:af:46:29:4e:0c:
         96:4c:59:6b:fb:5b:e1:c7:42:ef:15:d8:dd:b9:6b:ec:83:d7:
         d7:b9:4b:16:d5:fe:aa:b4:ec:fc:23:05:65:d3:78:fb:a7:2f:
         7e:b3:3d:ee:5c:80:af:85:c4:f7:8f:52:93:f9:29:be:22:d6:
         10:90:8d:ff:5a:20:50:33:d0:47:2f:3c:6f:21:6d:e5:d5:9a:
         46:6c:56:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:26:30 2025 by rpki-client