Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a343030303a3a2f33342d3334203d3e203238313731.roa
File:                     323830343a6438343a343030303a3a2f33342d3334203d3e203238313731.roa (raw, json)
Hash identifier:          cajMW5KxHBd+OXFI17AJheYSPPsiOmtwcDrDRY7IwBg=
Subject key identifier:   44:40:8C:4F:92:AC:70:31:F6:63:9A:F1:ED:FE:00:8D:4F:D8:DA:D4
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       7F55825D79F14E1E457CBE54B0323CF446A8DE8E
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a343030303a3a2f33342d3334203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:16 +0000
ROA not before:           Mon 10 Aug 2026 17:35:16 +0000
ROA not after:            Mon 09 Aug 2027 17:40:16 +0000
asID:                     28171
IP address blocks:        2804:d84:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:55:82:5d:79:f1:4e:1e:45:7c:be:54:b0:32:3c:f4:46:a8:de:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:16 2026 GMT
            Not After : Aug  9 17:40:16 2027 GMT
        Subject: CN=44408C4F92AC7031F6639AF1EDFE008D4FD8DAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:af:92:33:38:b4:ed:6c:f3:59:e6:96:cc:
                    bc:c8:7f:a9:f6:69:e8:1f:09:92:f0:75:b9:9c:ca:
                    3f:a2:3f:af:2e:b1:4d:ea:92:bf:8e:d4:b0:44:d5:
                    d5:4d:88:3e:a4:36:2d:8f:2a:49:82:1a:de:3d:e5:
                    a9:89:19:c8:e0:0c:c8:e7:bf:a4:3e:f7:44:de:f1:
                    5d:80:f4:6a:c4:d5:b5:27:87:7b:8c:3d:44:cc:2d:
                    94:b2:db:2c:ef:3e:9d:c2:06:6d:8e:2c:23:48:d1:
                    9f:2a:74:2d:6b:55:a9:c5:b9:a3:6f:90:3c:95:59:
                    97:cd:30:df:aa:fd:42:83:97:fb:ba:9e:49:a0:d7:
                    61:aa:48:21:ce:8b:07:d4:47:51:62:94:6b:c6:b7:
                    a8:8b:a8:f7:ba:26:cc:48:2c:62:16:63:55:11:1c:
                    8f:fe:32:aa:ee:0a:09:f4:f1:49:65:f0:c6:81:9e:
                    1b:40:8b:b1:d7:87:46:4c:c2:2a:d5:1e:55:83:31:
                    31:d1:88:98:99:a6:20:59:e8:f9:88:fc:ca:dc:40:
                    0f:9c:c6:39:d7:f8:89:1c:00:b4:91:43:2c:91:dd:
                    51:c5:ce:ac:a5:29:ef:58:c0:00:8a:9e:5b:f9:4b:
                    9a:9d:bc:1a:7b:ad:36:39:a1:02:e5:77:d6:9e:92:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:8C:4F:92:AC:70:31:F6:63:9A:F1:ED:FE:00:8D:4F:D8:DA:D4
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a343030303a3a2f33342d3334203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:d1:a7:11:68:7d:10:07:10:0f:09:65:32:46:47:fe:ca:
         3f:d2:83:dc:b6:a1:f6:37:7a:52:c1:05:58:67:bd:c9:52:81:
         9f:03:49:0c:ea:34:fa:39:11:ad:b6:85:4a:8f:ec:1f:c9:34:
         f8:41:00:18:5a:f0:43:02:41:77:ee:a2:e6:8b:49:7b:f9:ef:
         0a:c4:a7:e6:b8:b4:a7:9b:aa:58:d7:f8:bd:c4:43:d8:34:76:
         1b:96:35:e3:2d:c6:72:03:74:79:de:a5:2f:08:c2:b0:85:89:
         f4:bd:c1:a1:dd:f4:0f:0b:59:86:67:4c:ae:f3:92:b3:ec:66:
         bc:f2:79:02:95:99:bb:4c:39:0a:c5:3c:34:a1:ba:6f:71:75:
         0c:e8:97:6e:fa:1d:9c:b5:36:db:d8:e7:8f:ec:d7:90:66:aa:
         9e:44:43:f9:38:71:3d:dd:18:cf:fd:a6:90:c9:24:de:d1:03:
         34:2f:34:87:6c:c2:37:05:a8:f2:2c:87:30:a7:f7:65:95:53:
         f9:f8:60:2d:f3:8d:4a:11:4d:e4:b2:bc:58:b5:1f:6d:2a:18:
         88:93:4f:42:18:3a:ea:47:38:11:09:e8:45:45:2b:ab:3b:a7:
         c6:24:8e:d4:db:78:2b:ae:70:e1:70:33:e4:92:2b:c1:74:44:
         db:d2:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:13:18 2026 by rpki-client