Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a373030303a3a2f33362d3336203d3e203238313731.roa
File:                     323830343a6438343a373030303a3a2f33362d3336203d3e203238313731.roa (raw, json)
Hash identifier:          5jkYW365IWFhCsNHWAON04LW8KAj3zVBzxQWXybsldw=
Subject key identifier:   D6:2C:FD:92:02:27:34:8C:AF:35:0A:0D:30:25:8B:EE:FF:DA:C9:36
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       0E358A1C96AADF5EC7DEC4ACA788476D13D1B84F
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a373030303a3a2f33362d3336203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:18 +0000
ROA not before:           Mon 10 Aug 2026 17:35:18 +0000
ROA not after:            Mon 09 Aug 2027 17:40:18 +0000
asID:                     28171
IP address blocks:        2804:d84:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:35:8a:1c:96:aa:df:5e:c7:de:c4:ac:a7:88:47:6d:13:d1:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:18 2026 GMT
            Not After : Aug  9 17:40:18 2027 GMT
        Subject: CN=D62CFD920227348CAF350A0D30258BEEFFDAC936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:c7:d9:20:15:d9:84:6a:8e:1e:88:68:b4:
                    9d:e0:16:79:07:b8:67:64:98:24:3c:7d:d1:71:91:
                    57:7f:e3:aa:35:fb:71:eb:0e:ff:e4:96:cf:36:0e:
                    f0:d5:d4:9e:cc:d6:df:48:bd:4c:cc:b3:a8:c5:4f:
                    f2:26:29:93:f1:cd:5d:f1:ba:d8:97:d3:95:fc:f4:
                    e7:62:c2:74:c6:85:c6:bb:47:c8:ce:62:c3:6d:6e:
                    d0:e6:6a:d9:40:25:dd:46:43:83:c2:aa:40:93:f7:
                    50:e5:b8:70:87:2c:a2:e6:24:f3:e7:21:b8:d0:ca:
                    4c:5d:68:ca:85:f3:43:87:93:81:b8:54:2d:ac:ab:
                    91:39:0d:a7:56:f0:24:df:f6:52:81:c8:2d:5b:d6:
                    37:14:e9:82:53:e1:5e:6d:88:f5:ce:89:0f:f3:9a:
                    23:f7:e2:b2:5c:0c:0d:9a:9b:9d:8e:91:56:ea:a5:
                    7e:b5:3a:4a:53:12:11:9c:89:b3:a7:9a:ee:6b:ff:
                    78:1e:14:0d:2b:65:a4:b8:c5:85:ac:7d:8e:d9:2f:
                    95:f1:b1:8b:44:65:74:55:3d:4a:5b:27:88:f6:ea:
                    3d:29:02:b6:67:ea:1b:a2:c3:41:2f:32:bc:cb:d6:
                    b9:d8:fb:d7:2c:00:5e:e9:6b:d2:21:08:e5:39:6c:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:FD:92:02:27:34:8C:AF:35:0A:0D:30:25:8B:EE:FF:DA:C9:36
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a373030303a3a2f33362d3336203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:24:0f:54:d5:b4:d4:b6:11:d1:10:62:e1:fb:27:37:0f:95:
         b4:3c:a3:5a:6c:ca:66:c1:4f:3e:b8:3f:88:87:1b:99:ed:b9:
         66:2c:ad:08:7b:56:25:ac:e7:a5:fd:31:89:f5:2d:67:a5:e3:
         85:62:a7:57:23:bc:8d:02:fe:6a:90:86:b3:d7:27:26:e2:26:
         7e:8e:e5:ee:f7:8b:52:88:3f:fe:3d:74:81:c5:be:9f:7a:fd:
         c3:2d:db:15:74:06:4f:33:f5:a7:10:81:05:c9:88:d5:61:24:
         c7:58:27:5c:17:da:9c:a1:28:d8:96:7a:70:e9:c7:f8:2d:8d:
         8d:aa:c4:60:de:a4:0c:8e:c4:92:93:87:86:c8:42:02:6a:8d:
         45:01:73:a7:d4:29:dd:bf:c9:08:7c:eb:1e:d1:54:51:52:c4:
         9a:fc:c5:19:31:98:91:15:ff:82:01:a3:be:95:1c:9d:6c:88:
         91:e3:96:9a:48:7c:73:96:9d:fc:f6:9b:86:36:4d:d8:ae:ab:
         2e:74:f6:24:15:4a:2a:a6:85:2f:4c:e7:6a:8b:3d:94:52:4e:
         c3:53:db:1c:37:97:ed:14:d0:5c:58:1b:fc:8b:b2:ab:de:86:
         97:f7:f7:0d:51:a4:54:92:1c:65:53:45:f6:60:db:1c:00:d9:
         85:ef:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 21:30:30 2026 by rpki-client