Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33342d3334203d3e203238313731.roa
File:                     323830343a6438343a633030303a3a2f33342d3334203d3e203238313731.roa (raw, json)
Hash identifier:          Y5EuO1RecAGZrESTsgEVLSI+CTwOyWwja2fo+wtXQPs=
Subject key identifier:   D5:19:EB:37:62:20:3B:51:0F:26:CC:DB:26:EB:E4:41:52:AF:92:77
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       3B7224913D95C7C7311363F28FC908DB8FAF3BFA
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33342d3334203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:18 +0000
ROA not before:           Mon 10 Aug 2026 17:35:18 +0000
ROA not after:            Mon 09 Aug 2027 17:40:18 +0000
asID:                     28171
IP address blocks:        2804:d84:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:72:24:91:3d:95:c7:c7:31:13:63:f2:8f:c9:08:db:8f:af:3b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:18 2026 GMT
            Not After : Aug  9 17:40:18 2027 GMT
        Subject: CN=D519EB3762203B510F26CCDB26EBE44152AF9277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:6e:47:43:d8:b3:f0:ad:50:fc:34:47:0c:
                    46:a8:6f:ae:67:85:9e:2a:f1:3f:db:38:6b:71:93:
                    45:5b:3b:ee:2a:45:ba:e1:a2:09:97:12:dc:10:4e:
                    b4:87:3b:d3:ca:21:ad:01:5d:f4:ea:04:f9:7b:dd:
                    a5:a6:76:a4:e4:88:2d:a5:c1:3d:a3:31:47:d2:ec:
                    b4:09:c7:00:9a:cd:6f:b4:6f:d3:fb:68:6e:17:52:
                    1b:9b:1a:21:6b:04:9b:30:9e:69:76:d1:22:35:00:
                    b7:ae:a7:31:35:0c:af:f5:0d:f6:bf:7a:34:92:3a:
                    f1:b5:d1:3f:31:e9:74:e8:92:6b:82:04:10:dd:da:
                    18:e7:0b:51:7d:c8:c6:4b:d2:66:66:44:13:5e:94:
                    d0:83:ad:db:52:52:c5:b2:72:05:90:df:8d:61:2d:
                    9b:f9:31:15:4d:cf:4a:dc:f8:0e:e2:e7:e3:92:36:
                    bd:5f:bc:05:47:07:6a:14:cd:bc:e2:f6:6f:5d:68:
                    a4:41:80:d9:10:5f:7e:c8:d3:0b:90:f2:04:95:36:
                    9b:8a:65:e2:d6:60:9b:62:a3:74:16:0e:27:c0:d9:
                    08:94:50:3a:3b:f7:98:97:31:0a:88:cc:99:a7:e0:
                    e4:b4:25:a4:0e:11:fb:43:09:49:cb:e9:d4:74:7e:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:19:EB:37:62:20:3B:51:0F:26:CC:DB:26:EB:E4:41:52:AF:92:77
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33342d3334203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:89:28:b4:f8:30:07:c4:6a:28:2a:ff:57:2c:f8:8f:08:07:
         c2:e7:2a:a4:50:4f:73:55:8f:63:ec:fa:d8:ad:36:98:62:d4:
         df:a6:a5:0a:15:0e:b6:f3:3a:eb:e2:b0:b3:d2:7c:61:c4:9c:
         82:d7:8a:dd:b7:f9:42:49:7b:0c:e0:06:8a:6b:f3:72:eb:e4:
         06:dc:ce:87:ca:2c:ab:6f:f7:a5:ca:fd:f6:57:81:f4:b6:3f:
         2d:70:d3:00:c8:fa:7d:ed:db:d6:80:1a:d6:14:60:df:00:c9:
         22:16:e3:19:fe:76:e4:e8:5a:1c:56:45:ef:b6:07:a7:c0:7c:
         98:74:2c:9f:bf:ae:f9:c0:e6:d5:32:8c:25:a1:73:86:2a:29:
         70:89:ce:e5:d8:bf:96:7f:be:f8:0f:b3:de:e0:c6:0b:6b:4d:
         66:0c:24:75:bd:fd:0c:e2:9f:24:ad:4e:cd:ee:58:54:5c:7c:
         bc:c4:45:fb:70:0b:69:b8:32:ac:31:e2:45:9c:a1:7e:86:32:
         1f:6a:35:28:5a:71:00:da:34:bb:0e:b3:cf:cb:fe:a9:f4:2d:
         e8:ac:ac:67:4c:51:83:0c:6d:28:21:91:db:86:df:9c:6a:75:
         4b:63:45:58:45:b8:bb:6c:95:27:d2:2b:f4:5c:1c:24:61:32:
         7e:68:7a:6e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUO3IkkT2Vx8cxE2Pyj8kI24+vO/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYxQUE2RDA0OTY4RTIyMjJDODE0OTlDNDZEMDM4MTNG
MTA3MDQwMDAeFw0yNjA4MTAxNzM1MThaFw0yNzA4MDkxNzQwMThaMDMxMTAvBgNV
BAMTKEQ1MTlFQjM3NjIyMDNCNTEwRjI2Q0NEQjI2RUJFNDQxNTJBRjkyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fm5HQ9iz8K1Q/DRHDEaob65n
hZ4q8T/bOGtxk0VbO+4qRbrhogmXEtwQTrSHO9PKIa0BXfTqBPl73aWmdqTkiC2l
wT2jMUfS7LQJxwCazW+0b9P7aG4XUhubGiFrBJswnml20SI1ALeupzE1DK/1Dfa/
ejSSOvG10T8x6XTokmuCBBDd2hjnC1F9yMZL0mZmRBNelNCDrdtSUsWycgWQ341h
LZv5MRVNz0rc+A7i5+OSNr1fvAVHB2oUzbzi9m9daKRBgNkQX37I0wuQ8gSVNpuK
ZeLWYJtio3QWDifA2QiUUDo795iXMQqIzJmn4OS0JaQOEftDCUnL6dR0fqytAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQU1RnrN2IgO1EPJszbJuvkQVKvkncwHwYDVR0j
BBgwFoAU9hqm0Elo4iIsgUmcRtA4E/EHBAAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0poRzZYOWpkUEdBdGRQUno2Nnl0czJjaEViaFpBaGJncFRZRkNlTUJ1
WWovMC9GNjFBQTZEMDQ5NjhFMjIyMkM4MTQ5OUM0NkQwMzgxM0YxMDcwNDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MUFBNkQwNDk2OEUyMjIy
QzgxNDk5QzQ2RDAzODEzRjEwNzA0MDAuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKaEc2WDlqZFBHQXRkUFJ6NjZ5dHMyY2hFYmhaQWhiZ3BUWUZDZU1CdVlqLzAv
MzIzODMwMzQzYTY0MzgzNDNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM4MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKAQNhMAwDQYJKoZIhvcNAQELBQADggEB
ABeJKLT4MAfEaigq/1cs+I8IB8LnKqRQT3NVj2Ps+titNphi1N+mpQoVDrbzOuvi
sLPSfGHEnILXit23+UJJewzgBopr83Lr5AbczofKLKtv96XK/fZXgfS2Py1w0wDI
+n3t29aAGtYUYN8AySIW4xn+duToWhxWRe+2B6fAfJh0LJ+/rvnA5tUyjCWhc4Yq
KXCJzuXYv5Z/vvgPs97gxgtrTWYMJHW9/QzinyStTs3uWFRcfLzERftwC2m4Mqwx
4kWcoX6GMh9qNShacQDaNLsOs8/L/qn0LeisrGdMUYMMbSghkduG35xqdUtjRVhF
uLtslSfSK/RcHCRhMn5oem4=
-----END CERTIFICATE-----
Generated at Mon Aug 24 21:32:37 2026 by rpki-client