Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a313030303a3a2f33362d3336203d3e203238313731.roa
File:                     323830343a6438343a313030303a3a2f33362d3336203d3e203238313731.roa (raw, json)
Hash identifier:          4naXysA3qGuHeuwxXPvQJmBn5hJpM2KOF8GjDiOb/jY=
Subject key identifier:   81:9F:21:24:71:83:16:C9:0E:6D:67:4B:2A:AE:AD:28:1C:54:6F:87
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       537F1D3506C301BEE92BEBFDEE530D5175758BEA
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a313030303a3a2f33362d3336203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:27 +0000
ROA not before:           Mon 10 Aug 2026 17:35:27 +0000
ROA not after:            Mon 09 Aug 2027 17:40:27 +0000
asID:                     28171
IP address blocks:        2804:d84:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 04:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7f:1d:35:06:c3:01:be:e9:2b:eb:fd:ee:53:0d:51:75:75:8b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:27 2026 GMT
            Not After : Aug  9 17:40:27 2027 GMT
        Subject: CN=819F2124718316C90E6D674B2AAEAD281C546F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:07:a2:ab:cf:c7:c4:d1:22:35:ac:40:1f:
                    cf:26:5d:42:12:43:bd:eb:99:13:d5:8d:2b:eb:86:
                    d0:43:f7:dc:e9:3a:98:1b:5c:65:e9:f1:8b:5e:26:
                    97:c4:d9:00:77:e4:55:e7:6e:2e:6a:55:56:50:a3:
                    a2:5a:25:62:cf:68:49:c7:86:96:7f:e3:2f:fe:bf:
                    4e:18:ce:74:88:1e:4b:ab:c7:65:a1:65:78:32:f1:
                    5b:ee:59:5d:9d:c8:d3:05:ef:13:d7:ed:e5:37:f6:
                    18:16:f7:15:8c:57:4e:57:fc:fe:7e:08:bc:0e:06:
                    f8:52:11:b1:29:3f:54:7a:a9:2f:3d:9e:ac:84:63:
                    4f:de:77:a5:32:b4:82:58:21:22:1e:6b:84:40:4f:
                    a2:f5:d7:10:12:57:4f:8f:42:8e:49:dd:de:88:a7:
                    d6:50:07:52:e3:c4:26:aa:81:18:38:56:a7:68:7a:
                    81:9a:09:69:55:d3:7d:92:f5:9f:31:d4:d8:ef:98:
                    9a:63:64:19:37:a2:5f:ea:b6:83:3e:35:85:e7:b4:
                    fb:1e:38:7c:b6:e7:7e:c5:46:41:17:80:59:97:52:
                    58:ab:a9:24:4c:98:95:02:81:0a:8d:49:e8:32:15:
                    9c:21:8a:d5:90:97:6d:d5:eb:88:b0:76:37:49:85:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9F:21:24:71:83:16:C9:0E:6D:67:4B:2A:AE:AD:28:1C:54:6F:87
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a313030303a3a2f33362d3336203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:25:e8:a9:8f:b2:22:97:33:b6:32:40:9e:0b:7b:11:43:
         f5:9a:87:9d:e8:07:cc:d7:eb:3f:a8:5a:e5:3d:d4:3a:73:9e:
         72:7e:07:7c:b8:d6:c8:27:dc:11:98:42:76:a9:a9:49:cd:87:
         9f:34:e9:17:b2:e4:84:de:a4:7b:2d:54:28:fa:e6:6a:67:ac:
         dd:6f:6a:28:4d:42:6f:47:0d:81:d1:7b:7a:44:fe:9e:1c:5b:
         f2:2e:55:88:86:a4:70:53:0f:1c:48:98:4a:7f:95:27:b8:b6:
         0a:84:1e:75:0f:cc:a3:fd:a8:20:95:91:2b:45:22:01:e7:d6:
         70:9d:c8:50:85:6c:80:fc:29:5c:16:77:81:0d:4e:43:8a:47:
         0b:3f:1f:87:71:a9:d6:c2:a3:dc:6b:53:19:3c:bd:50:40:4c:
         92:bd:56:99:6f:1d:c9:2d:91:7f:53:19:53:1a:20:d0:4b:e4:
         13:cb:22:57:9f:4b:0f:b2:9c:1c:43:d2:96:b3:75:6d:9a:29:
         28:26:67:d7:28:a4:68:41:2d:84:18:78:32:e5:6a:a4:5f:ab:
         2b:55:8b:0c:7f:3d:42:23:0c:3d:87:3b:a2:5f:1c:ea:9f:d3:
         93:ff:5f:76:0a:84:20:56:53:26:1e:37:35:d3:88:53:5c:7b:
         75:0a:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:35 2026 by rpki-client