Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a363030303a3a2f33352d3335203d3e203238313731.roa
File:                     323830343a6438343a363030303a3a2f33352d3335203d3e203238313731.roa (raw, json)
Hash identifier:          nij2/hM5xIEhY2Co9GLOQ2l7NisjOWSA7v4ngyCXExo=
Subject key identifier:   3D:83:35:18:CF:F0:61:A2:07:08:E3:A6:C5:BE:F7:2B:5C:33:9B:7E
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       555A4DD3D0FAB90C3CBBA980E2B44BE0459BCD13
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a363030303a3a2f33352d3335203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:24 +0000
ROA not before:           Mon 10 Aug 2026 17:35:24 +0000
ROA not after:            Mon 09 Aug 2027 17:40:24 +0000
asID:                     28171
IP address blocks:        2804:d84:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5a:4d:d3:d0:fa:b9:0c:3c:bb:a9:80:e2:b4:4b:e0:45:9b:cd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:24 2026 GMT
            Not After : Aug  9 17:40:24 2027 GMT
        Subject: CN=3D833518CFF061A20708E3A6C5BEF72B5C339B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:49:32:ae:b1:11:d7:52:60:cc:6b:22:e1:
                    c6:2a:76:9a:a1:66:64:f9:94:40:8d:da:ae:14:22:
                    f6:6d:ee:37:13:b3:66:65:11:a7:f1:38:ea:a0:d8:
                    57:23:da:09:fe:95:9d:4d:26:3b:bb:93:d3:4a:bb:
                    30:25:0f:39:dc:c0:f0:1b:c4:6b:cd:ab:69:d7:62:
                    5e:5b:ea:2d:40:c1:92:7d:e6:bf:b5:19:92:18:bf:
                    22:2e:0a:eb:45:ad:19:75:17:00:b0:a2:4d:41:d6:
                    9a:a6:a2:88:a1:97:81:74:7f:6e:a1:bf:d9:db:2a:
                    41:a2:ab:12:af:5f:08:71:20:35:fa:2d:87:64:07:
                    c8:c6:74:32:6d:fb:b1:0a:c1:d7:05:a3:bb:eb:c0:
                    c0:58:2e:db:d9:f7:80:96:64:9a:c8:21:12:96:8e:
                    59:c7:f4:4f:53:3b:a1:f6:ca:5b:8d:e9:03:a9:92:
                    93:11:df:96:71:e5:86:4e:dc:59:14:37:1f:ea:66:
                    4c:46:7b:8d:9b:67:13:c7:eb:91:2e:cc:1e:84:31:
                    0b:81:7f:2b:74:78:09:34:21:0e:14:4c:f5:8f:3b:
                    6c:b8:8f:ad:4e:66:b5:ca:3f:1b:94:33:07:4e:b8:
                    f8:ca:52:0e:c4:de:48:58:62:7d:7b:3a:97:c1:36:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:83:35:18:CF:F0:61:A2:07:08:E3:A6:C5:BE:F7:2B:5C:33:9B:7E
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a363030303a3a2f33352d3335203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         02:db:58:8c:d7:67:d8:b2:da:4d:1d:5e:49:fb:bb:4f:e9:a6:
         40:66:a4:48:91:66:15:f7:f7:13:82:14:e3:e4:ba:db:29:a2:
         26:5f:30:ff:bd:96:bd:8f:28:f2:4c:a2:3f:15:cc:65:6f:20:
         d0:23:b3:a5:a8:ef:c1:2b:2b:18:4f:0d:58:34:b5:1a:0b:51:
         bb:c8:8c:7f:56:99:40:58:c9:4e:be:cb:c7:a7:db:b1:96:3b:
         32:56:39:50:af:c2:a8:82:cf:f4:d6:1c:5a:b2:6f:4a:f3:6e:
         b4:44:d7:09:52:76:0f:7f:96:26:98:f8:61:0a:de:69:74:59:
         4b:af:cf:2f:d9:16:52:ca:03:f8:64:6d:ec:33:cf:31:8e:b0:
         68:c9:04:1a:92:32:55:b8:7b:22:5c:5f:05:0a:a7:fb:5d:7a:
         c9:48:3c:49:30:15:9f:c9:24:84:85:37:8c:bb:74:62:61:62:
         ed:0b:27:d4:7e:46:5c:37:1d:78:7a:0c:c0:63:15:f0:56:d9:
         81:ff:bf:98:02:37:2c:ce:43:d0:fe:f1:66:f3:ba:34:26:55:
         8a:d0:38:47:3e:c5:27:d0:43:2d:27:f8:51:e1:39:a8:75:81:
         1e:0a:57:97:9f:16:93:e4:29:25:ea:59:1a:e0:c3:80:be:cc:
         01:e0:07:14
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUVVpN09D6uQw8u6mA4rRL4EWbzRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxQUE2RDA0OTY4RTIyMjJDODE0OTlDNDZEMDM4MTNG
MTA3MDQwMDAeFw0yNjA4MTAxNzM1MjRaFw0yNzA4MDkxNzQwMjRaMDMxMTAvBgNV
BAMTKDNEODMzNTE4Q0ZGMDYxQTIwNzA4RTNBNkM1QkVGNzJCNUMzMzlCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5J0kyrrER11JgzGsi4cYqdpqh
ZmT5lECN2q4UIvZt7jcTs2ZlEafxOOqg2Fcj2gn+lZ1NJju7k9NKuzAlDzncwPAb
xGvNq2nXYl5b6i1AwZJ95r+1GZIYvyIuCutFrRl1FwCwok1B1pqmooihl4F0f26h
v9nbKkGiqxKvXwhxIDX6LYdkB8jGdDJt+7EKwdcFo7vrwMBYLtvZ94CWZJrIIRKW
jlnH9E9TO6H2yluN6QOpkpMR35Zx5YZO3FkUNx/qZkxGe42bZxPH65EuzB6EMQuB
fyt0eAk0IQ4UTPWPO2y4j61OZrXKPxuUMwdOuPjKUg7E3khYYn17OpfBNv5tAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUPYM1GM/wYaIHCOOmxb73K1wzm34wHwYDVR0j
BBgwFoAU9hqm0Elo4iIsgUmcRtA4E/EHBAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0poRzZYOWpkUEdBdGRQUno2Nnl0czJjaEViaFpBaGJncFRZRkNlTUJ1
WWovMC9GNjFBQTZEMDQ5NjhFMjIyMkM4MTQ5OUM0NkQwMzgxM0YxMDcwNDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MUFBNkQwNDk2OEUyMjIy
QzgxNDk5QzQ2RDAzODEzRjEwNzA0MDAuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKaEc2WDlqZFBHQXRkUFJ6NjZ5dHMyY2hFYmhaQWhiZ3BUWUZDZU1CdVlqLzAv
MzIzODMwMzQzYTY0MzgzNDNhMzYzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNl
MjAzMjM4MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKAQNhGAwDQYJKoZIhvcNAQELBQADggEB
AALbWIzXZ9iy2k0dXkn7u0/ppkBmpEiRZhX39xOCFOPkutspoiZfMP+9lr2PKPJM
oj8VzGVvINAjs6Wo78ErKxhPDVg0tRoLUbvIjH9WmUBYyU6+y8en27GWOzJWOVCv
wqiCz/TWHFqyb0rzbrRE1wlSdg9/liaY+GEK3ml0WUuvzy/ZFlLKA/hkbewzzzGO
sGjJBBqSMlW4eyJcXwUKp/tdeslIPEkwFZ/JJISFN4y7dGJhYu0LJ9R+Rlw3HXh6
DMBjFfBW2YH/v5gCNyzOQ9D+8WbzujQmVYrQOEc+xSfQQy0n+FHhOah1gR4KV5ef
FpPkKSXqWRrgw4C+zAHgBxQ=
-----END CERTIFICATE-----
Generated at Tue Aug 25 01:21:49 2026 by rpki-client