Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a393030303a3a2f33362d3336203d3e203238313731.roa
File:                     323830343a6438343a393030303a3a2f33362d3336203d3e203238313731.roa (raw, json)
Hash identifier:          nuMfjL8lSvWSzME83sblP5s+AWTr0qo8U8bF/7sJVz4=
Subject key identifier:   87:82:A8:2C:86:8F:F8:55:18:8C:2A:3B:5F:4E:B0:33:20:0B:33:A0
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       3392376F19865E20A181940E6045F32ECACFA161
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a393030303a3a2f33362d3336203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:27 +0000
ROA not before:           Mon 10 Aug 2026 17:35:27 +0000
ROA not after:            Mon 09 Aug 2027 17:40:27 +0000
asID:                     28171
IP address blocks:        2804:d84:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 04:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:92:37:6f:19:86:5e:20:a1:81:94:0e:60:45:f3:2e:ca:cf:a1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:27 2026 GMT
            Not After : Aug  9 17:40:27 2027 GMT
        Subject: CN=8782A82C868FF855188C2A3B5F4EB033200B33A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:10:8d:5e:48:b3:90:c7:e8:45:c6:1e:c6:
                    15:18:d0:1c:9c:29:e2:83:3f:fb:28:35:78:b2:7e:
                    75:f8:81:ee:cc:bf:a1:44:90:ef:61:09:c9:08:11:
                    77:ff:df:8b:14:5a:f3:2f:5a:65:99:36:e8:28:ee:
                    b6:a2:f2:5d:67:21:8d:88:27:79:75:da:c2:49:e6:
                    81:06:35:b1:ff:5d:56:68:3e:71:64:18:7d:d0:17:
                    a7:ad:87:69:69:fa:13:7a:f1:a8:e2:fe:d1:82:14:
                    ba:ef:ec:e6:39:53:77:e9:ae:c6:8c:bf:86:91:cf:
                    e8:13:e8:dc:94:4c:fd:76:99:b2:71:08:20:05:9e:
                    95:37:01:78:be:06:d6:5f:b7:a5:b2:37:28:6f:fb:
                    01:95:28:92:72:68:b4:49:0c:df:ff:3d:e5:c5:81:
                    2f:54:3e:84:59:95:46:94:68:1b:3a:ee:d0:a9:c1:
                    ba:33:e1:9d:b9:22:cc:7e:b4:d6:d2:56:63:eb:e6:
                    3c:6d:a5:f0:d1:fb:7b:e2:79:cd:20:d9:40:2f:dd:
                    ee:ce:f9:b4:7e:45:58:c6:d3:8b:bd:15:aa:62:ae:
                    d0:54:60:ac:d0:02:51:2d:07:94:9f:b8:6e:d0:5c:
                    33:0a:a6:66:73:24:34:11:91:9a:54:19:63:ae:c5:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:A8:2C:86:8F:F8:55:18:8C:2A:3B:5F:4E:B0:33:20:0B:33:A0
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a393030303a3a2f33362d3336203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:05:9f:c4:c8:6c:eb:0e:b8:8f:4f:f7:53:db:3e:61:29:66:
         01:1b:7f:50:dd:84:4a:86:8e:94:ed:86:1e:61:a6:f3:95:8a:
         ec:00:05:96:45:e7:ca:ab:e8:a8:f1:18:69:56:9c:59:ca:47:
         0d:f4:2f:81:90:73:ed:11:ce:0a:dc:83:52:3c:3a:35:8d:72:
         50:30:34:38:5c:01:a5:9c:51:dd:60:97:b9:fd:c0:b2:fb:6e:
         e9:47:b3:19:ef:67:ad:84:95:e6:94:56:bf:c8:4a:dd:61:8b:
         66:fe:3c:61:6c:c4:5d:b2:8b:5b:23:a9:f2:28:a9:75:e9:08:
         9d:a4:4d:04:61:6a:1b:80:9f:19:22:98:a4:66:b2:d2:81:2e:
         e4:7b:a6:b1:3d:64:b7:84:c0:15:9f:7b:c4:cb:20:61:fd:76:
         3f:53:48:00:c7:fc:3c:1a:80:0d:82:47:6e:5c:fa:0e:e5:88:
         96:73:33:d6:f4:54:79:db:73:29:eb:a0:47:64:a9:a8:ba:d9:
         2c:92:99:66:6c:ea:9a:c8:91:04:75:17:21:cb:c7:9b:e6:46:
         21:d3:f2:75:a2:cc:e0:5e:ef:84:d9:88:38:a8:5e:b7:43:d9:
         9a:06:31:ac:f6:a3:b4:b8:39:7d:d1:62:97:7b:21:98:ed:ed:
         6d:3d:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:34 2026 by rpki-client