Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a333030303a3a2f33362d3336203d3e203238313731.roa
File:                     323830343a6438343a333030303a3a2f33362d3336203d3e203238313731.roa (raw, json)
Hash identifier:          j99INu5fFmrR4S0RHYkjpPQMoaoVfJZOYhY9F9220jI=
Subject key identifier:   7B:42:7D:98:5E:39:E8:DD:B4:96:3E:7A:E7:CE:27:86:8D:C3:33:4E
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       72458D3FD6B1219FF2FC1DDC2D093CC1480F88D1
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a333030303a3a2f33362d3336203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:20 +0000
ROA not before:           Mon 10 Aug 2026 17:35:20 +0000
ROA not after:            Mon 09 Aug 2027 17:40:20 +0000
asID:                     28171
IP address blocks:        2804:d84:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:45:8d:3f:d6:b1:21:9f:f2:fc:1d:dc:2d:09:3c:c1:48:0f:88:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:20 2026 GMT
            Not After : Aug  9 17:40:20 2027 GMT
        Subject: CN=7B427D985E39E8DDB4963E7AE7CE27868DC3334E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:d5:9e:3c:53:63:68:80:5a:31:ac:63:90:
                    2e:8c:2b:76:88:33:72:ee:c6:0f:8f:8a:63:f1:68:
                    c4:c1:cc:be:41:a5:24:33:0b:2a:69:4a:ae:6a:2f:
                    0e:41:b0:d4:8b:70:ca:41:5e:74:ee:b3:c9:cb:2d:
                    31:ca:d8:6d:ec:43:7b:6a:3c:39:e8:74:fa:8c:cf:
                    cb:83:f8:04:0c:bf:ae:a0:74:37:ed:76:59:b6:0c:
                    3b:2b:7e:ea:32:9a:77:9d:07:2d:1d:2e:c5:51:c5:
                    e1:f5:f6:77:3b:70:75:9b:e8:b3:d5:b6:76:b3:ec:
                    00:8e:0d:66:1f:95:17:0d:d2:8f:c4:94:5b:90:10:
                    63:2c:ec:9f:13:06:81:0e:10:ef:34:e1:84:f2:79:
                    c5:7d:1f:99:73:06:73:5c:a0:f7:17:32:65:f9:ce:
                    1a:7a:56:d5:ba:fc:fa:54:80:cc:78:87:4b:9b:89:
                    4c:f4:e9:d2:e5:87:80:46:13:8b:6d:3c:8b:84:73:
                    e5:d4:57:2b:2f:3d:6c:14:d0:b0:b6:dd:ab:9b:ec:
                    25:60:53:d2:6d:ce:4a:0d:85:27:cf:d1:5b:e1:30:
                    4b:ae:6b:dd:0b:68:0d:e7:25:10:b6:5b:73:0d:ba:
                    4d:7e:96:db:ab:83:23:9d:aa:fc:d5:57:25:8e:be:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:7D:98:5E:39:E8:DD:B4:96:3E:7A:E7:CE:27:86:8D:C3:33:4E
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a333030303a3a2f33362d3336203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:d9:11:a2:5b:df:13:d5:86:d8:57:e7:d0:96:a1:20:b5:
         17:0a:47:db:b0:63:16:52:e4:98:fd:88:8c:f5:5f:90:fe:9a:
         13:fb:79:dc:51:df:d1:0f:06:00:e6:4b:83:44:20:bd:a0:09:
         69:c0:e9:17:e9:4b:16:d8:dc:45:4b:02:08:54:6a:8f:e1:a2:
         f1:83:4d:43:bc:8d:72:61:d0:7e:b9:70:7c:bb:72:d0:ee:e3:
         1d:b2:79:99:bc:51:59:0a:ba:a8:0c:33:7a:e5:29:59:11:5a:
         9a:18:22:4e:e8:bc:41:a0:96:8d:8f:f3:31:f9:e4:63:02:c8:
         29:17:03:aa:9c:a5:17:c7:fe:c0:52:c4:c9:65:f9:7e:56:60:
         cb:a7:39:45:b4:73:8d:e7:ea:41:38:73:45:38:50:8a:bc:81:
         e0:10:a9:a1:7b:e3:90:52:f3:6a:7a:9a:c0:3f:b1:fd:ed:a5:
         36:12:ce:f2:91:03:cf:c0:3a:ef:5d:fd:3f:bc:de:e2:93:e4:
         ea:7e:4d:05:9f:06:c4:80:a4:11:aa:93:74:47:b9:36:82:46:
         c5:bf:1b:5c:9c:87:e7:6e:68:23:f2:81:54:13:30:46:fd:2d:
         ed:71:57:32:74:c1:5d:94:ae:a9:80:49:6e:6e:50:15:0d:cf:
         40:c6:5c:aa
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUckWNP9axIZ/y/B3cLQk8wUgPiNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxQUE2RDA0OTY4RTIyMjJDODE0OTlDNDZEMDM4MTNG
MTA3MDQwMDAeFw0yNjA4MTAxNzM1MjBaFw0yNzA4MDkxNzQwMjBaMDMxMTAvBgNV
BAMTKDdCNDI3RDk4NUUzOUU4RERCNDk2M0U3QUU3Q0UyNzg2OERDMzMzNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkNWePFNjaIBaMaxjkC6MK3aI
M3Luxg+PimPxaMTBzL5BpSQzCyppSq5qLw5BsNSLcMpBXnTus8nLLTHK2G3sQ3tq
PDnodPqMz8uD+AQMv66gdDftdlm2DDsrfuoymnedBy0dLsVRxeH19nc7cHWb6LPV
tnaz7ACODWYflRcN0o/ElFuQEGMs7J8TBoEOEO804YTyecV9H5lzBnNcoPcXMmX5
zhp6VtW6/PpUgMx4h0ubiUz06dLlh4BGE4ttPIuEc+XUVysvPWwU0LC23aub7CVg
U9JtzkoNhSfP0VvhMEuua90LaA3nJRC2W3MNuk1+lturgyOdqvzVVyWOvnclAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUe0J9mF456N20lj56584nho3DM04wHwYDVR0j
BBgwFoAU9hqm0Elo4iIsgUmcRtA4E/EHBAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0poRzZYOWpkUEdBdGRQUno2Nnl0czJjaEViaFpBaGJncFRZRkNlTUJ1
WWovMC9GNjFBQTZEMDQ5NjhFMjIyMkM4MTQ5OUM0NkQwMzgxM0YxMDcwNDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MUFBNkQwNDk2OEUyMjIy
QzgxNDk5QzQ2RDAzODEzRjEwNzA0MDAuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKaEc2WDlqZFBHQXRkUFJ6NjZ5dHMyY2hFYmhaQWhiZ3BUWUZDZU1CdVlqLzAv
MzIzODMwMzQzYTY0MzgzNDNhMzMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM4MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQNhDAwDQYJKoZIhvcNAQELBQADggEB
AB/g2RGiW98T1YbYV+fQlqEgtRcKR9uwYxZS5Jj9iIz1X5D+mhP7edxR39EPBgDm
S4NEIL2gCWnA6RfpSxbY3EVLAghUao/hovGDTUO8jXJh0H65cHy7ctDu4x2yeZm8
UVkKuqgMM3rlKVkRWpoYIk7ovEGglo2P8zH55GMCyCkXA6qcpRfH/sBSxMll+X5W
YMunOUW0c43n6kE4c0U4UIq8geAQqaF745BS82p6msA/sf3tpTYSzvKRA8/AOu9d
/T+83uKT5Op+TQWfBsSApBGqk3RHuTaCRsW/G1ych+duaCPygVQTMEb9Le1xVzJ0
wV2UrqmASW5uUBUNz0DGXKo=
-----END CERTIFICATE-----
Generated at Mon Aug 24 22:50:06 2026 by rpki-client