Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a383030303a3a2f33332d3333203d3e203238313731.roa
File:                     323830343a6438343a383030303a3a2f33332d3333203d3e203238313731.roa (raw, json)
Hash identifier:          Bw9RcURUe12nCCP2b6FWlHBrtlLeJB2n/S33dPkTE78=
Subject key identifier:   51:44:D9:34:81:DE:AE:DD:4E:59:8E:A2:01:1A:8E:C4:80:16:E5:B3
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       43FC1C0C4892B05CBFC2619CFC03C90823247F63
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a383030303a3a2f33332d3333203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:19 +0000
ROA not before:           Mon 10 Aug 2026 17:35:19 +0000
ROA not after:            Mon 09 Aug 2027 17:40:19 +0000
asID:                     28171
IP address blocks:        2804:d84:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 04:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:1c:0c:48:92:b0:5c:bf:c2:61:9c:fc:03:c9:08:23:24:7f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:19 2026 GMT
            Not After : Aug  9 17:40:19 2027 GMT
        Subject: CN=5144D93481DEAEDD4E598EA2011A8EC48016E5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:81:30:9f:13:54:e5:0f:f2:5a:e5:70:e5:
                    05:77:4b:b2:76:a1:20:1f:49:5c:84:c4:82:23:14:
                    24:ec:e3:63:45:e7:9d:0e:6a:9a:28:3d:2b:5e:ea:
                    43:a6:07:aa:7a:8b:73:59:f2:58:77:ef:8a:10:bb:
                    4c:22:b1:76:f9:15:28:82:ff:35:55:7c:c6:cf:2e:
                    9f:ec:f0:c0:06:ee:71:09:42:0b:44:76:f4:8f:73:
                    88:3b:41:2a:75:f3:ff:a9:c7:bb:4b:17:a6:7c:03:
                    da:1a:08:43:d1:2f:1c:82:55:95:84:7e:04:a9:3e:
                    30:1b:cf:bf:b5:f6:5b:79:76:4b:98:6e:f4:07:38:
                    25:4a:f7:4e:95:01:cb:79:b9:03:78:d2:3d:97:2b:
                    69:78:57:b0:1b:5a:74:dc:3a:c2:ef:de:f0:bd:73:
                    1c:c2:60:b4:d9:f4:31:43:13:d3:14:45:a0:96:52:
                    06:7d:19:66:51:4e:50:34:40:50:75:49:c0:5b:7f:
                    84:b9:71:b2:31:26:7f:dd:e6:61:dc:47:7f:d4:b1:
                    8d:43:b3:ee:3d:a5:58:a8:76:1d:f2:e5:21:0c:e6:
                    c7:d2:10:57:7b:ad:f7:ff:f1:f2:ae:ab:74:f0:99:
                    e7:01:ae:73:b6:c9:bd:c2:da:e3:9e:04:be:cc:5d:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:44:D9:34:81:DE:AE:DD:4E:59:8E:A2:01:1A:8E:C4:80:16:E5:B3
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a383030303a3a2f33332d3333203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:f2:8b:1e:91:59:c4:db:05:a5:e8:91:d1:3d:7e:13:4e:
         ac:cd:7a:42:ff:ea:35:b8:cf:af:0c:6d:a7:4b:95:4a:78:d5:
         0e:82:55:37:91:55:fc:51:5c:7a:7d:23:a2:e1:5c:c2:7d:b1:
         18:34:8e:ac:f5:24:a5:85:3b:8b:2b:cd:aa:f8:00:6a:32:f7:
         ae:e4:74:28:b5:ab:85:dc:31:07:53:df:64:cd:0e:65:14:a4:
         4b:c1:36:d5:ff:f8:b0:0e:0f:ce:86:ca:0d:ec:89:f9:94:88:
         89:78:db:be:8b:e8:87:81:95:1f:43:db:73:c1:45:fa:e9:c2:
         4e:8a:12:35:b6:44:be:f7:19:26:9a:2f:0b:29:aa:bb:c6:a1:
         3f:aa:88:38:4c:8b:a8:f2:6f:b5:50:ce:9b:f7:0e:8f:d8:7c:
         f8:7b:58:f4:ce:21:5c:04:3e:e4:f7:03:a9:e2:c2:81:a0:3b:
         11:73:56:12:79:b8:40:d8:82:4d:4c:b2:47:f5:5c:22:00:2f:
         b9:df:ee:ab:e8:ab:ba:bc:b9:74:57:99:02:bc:f6:35:09:09:
         de:1e:96:82:dd:70:1c:b5:b9:fd:ec:b4:11:81:2f:c4:b1:02:
         09:a0:af:0a:cd:e1:8a:1b:f8:ef:ff:6e:cc:23:45:4b:89:4d:
         b4:0c:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:16 2026 by rpki-client