Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33352d3335203d3e203238313731.roa
File:                     323830343a6438343a633030303a3a2f33352d3335203d3e203238313731.roa (raw, json)
Hash identifier:          sJG9RGhUiaqfL10EsUWKZgyrsQA2Y/FaSevhSX0o11o=
Subject key identifier:   79:FD:97:F7:27:B0:8D:34:B3:D2:50:18:27:3D:3B:E0:9D:53:33:A1
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       6A6FAD11391A60C7835AA6EC2A5B7A517CBCD24A
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33352d3335203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:26 +0000
ROA not before:           Mon 10 Aug 2026 17:35:26 +0000
ROA not after:            Mon 09 Aug 2027 17:40:26 +0000
asID:                     28171
IP address blocks:        2804:d84:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6f:ad:11:39:1a:60:c7:83:5a:a6:ec:2a:5b:7a:51:7c:bc:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:26 2026 GMT
            Not After : Aug  9 17:40:26 2027 GMT
        Subject: CN=79FD97F727B08D34B3D25018273D3BE09D5333A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:d2:d7:c2:1b:7a:19:78:31:49:6a:34:30:
                    b2:e6:a3:3b:a3:43:84:6d:6b:fc:9a:5e:36:c2:8a:
                    f2:5f:77:24:8c:a7:c4:29:14:5e:fa:40:00:76:3f:
                    de:c7:cc:28:36:af:d1:8c:2c:47:13:a0:1a:b7:e5:
                    e4:71:07:67:b0:df:45:ac:56:d4:3e:e6:83:13:28:
                    2b:17:70:ec:05:4f:3a:ba:4d:e3:fa:96:c4:11:8b:
                    16:1f:9e:c4:60:d5:2c:af:ca:8f:e8:53:92:35:5b:
                    98:84:0e:74:f1:43:5d:55:46:dd:9b:d6:e9:cf:4a:
                    6b:bd:70:37:52:d9:a4:98:31:70:b4:95:08:57:5f:
                    59:f4:ce:27:73:27:c1:1d:a6:09:3d:24:11:6b:8c:
                    6e:3e:b0:6c:ad:e3:c3:9c:52:28:30:2e:b1:40:3f:
                    1f:58:e0:fa:33:79:de:83:b8:2e:02:5d:ec:76:e8:
                    f1:6f:ad:1e:cd:56:ae:ee:59:aa:62:40:97:63:5d:
                    02:42:47:98:c7:90:49:21:28:e1:f1:84:cd:4c:91:
                    5b:22:10:9d:d6:5b:e1:bd:25:72:a9:06:c5:6b:4f:
                    25:ae:4b:3e:13:f1:e8:e7:97:e1:a9:f1:ed:6b:cc:
                    bd:da:1c:45:0e:ba:fc:7c:85:21:9f:c1:b1:9c:94:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FD:97:F7:27:B0:8D:34:B3:D2:50:18:27:3D:3B:E0:9D:53:33:A1
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a633030303a3a2f33352d3335203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         70:60:ad:19:18:6f:34:02:44:e4:73:ad:32:c3:33:53:a9:f0:
         89:9d:b0:e4:7d:d2:11:bb:9f:59:4c:71:3f:e1:f5:3f:9f:31:
         af:c9:fb:5b:b2:70:6e:35:09:92:d3:7e:8b:da:cb:14:51:ed:
         59:1f:76:2f:25:d3:75:e6:b5:bc:fb:7e:02:2c:55:58:40:0b:
         57:90:f6:e8:13:f1:db:dd:a7:d9:5d:ed:29:83:4c:7b:2c:df:
         a4:ce:34:72:72:9c:6d:6d:5f:5e:df:47:a7:32:15:7f:72:6f:
         36:93:fe:ae:b3:05:23:78:02:54:3d:9b:57:ba:e7:84:38:7b:
         69:d9:0e:56:a4:56:ba:60:b7:15:4e:c8:b9:12:cd:77:32:e6:
         43:1b:7d:c0:1a:29:5a:67:ba:41:fb:a5:2f:ff:b9:bf:9f:07:
         62:54:5f:cf:ee:f7:e8:eb:c4:38:66:f5:72:7c:c7:33:83:ea:
         8d:e8:e5:57:c2:c0:44:19:4e:43:80:64:40:fc:68:27:49:5c:
         86:7b:83:03:9d:be:eb:20:6e:1f:40:e3:fc:14:02:63:c9:9a:
         54:ed:89:52:57:04:8d:16:ec:0f:30:54:77:6e:f6:41:1b:ec:
         71:ae:23:7b:f0:a3:b7:2e:13:6b:8f:07:33:a2:00:64:63:56:
         7d:00:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:52 2026 by rpki-client