Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a6361633a3a2f34382d3438203d3e203238313731.roa
File:                     323830343a6438343a6361633a3a2f34382d3438203d3e203238313731.roa (raw, json)
Hash identifier:          0UIwVmSQGPtwWj9QiwsWV6BUlTVict5Ys8oEOBW5gP8=
Subject key identifier:   1A:1D:54:64:47:FC:BC:E2:97:90:94:49:5E:44:9A:BF:26:8E:D8:F8
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       48B3C1DCD61E0A15E9ADB759E868BD4EDEBC3F83
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a6361633a3a2f34382d3438203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:18 +0000
ROA not before:           Mon 10 Aug 2026 17:35:18 +0000
ROA not after:            Mon 09 Aug 2027 17:40:18 +0000
asID:                     28171
IP address blocks:        2804:d84:cac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b3:c1:dc:d6:1e:0a:15:e9:ad:b7:59:e8:68:bd:4e:de:bc:3f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:18 2026 GMT
            Not After : Aug  9 17:40:18 2027 GMT
        Subject: CN=1A1D546447FCBCE2979094495E449ABF268ED8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7c:a1:c9:23:d1:40:89:4c:3c:14:86:a6:1a:
                    8c:9f:a9:bc:77:c1:24:d6:6f:8a:01:9f:33:6d:e2:
                    c9:b5:3a:e1:30:04:f3:09:bd:c0:05:49:94:0f:12:
                    f1:2f:c1:0b:e0:c0:b8:a5:27:3f:aa:88:90:a5:e5:
                    17:c3:e4:df:d5:a0:3a:07:2f:c4:40:7f:ad:06:dd:
                    84:bc:8a:56:5e:ac:01:d6:9e:47:9f:e4:f0:1c:eb:
                    a6:67:6c:f6:4d:18:00:a4:a7:c2:b2:97:38:14:7a:
                    78:25:38:a3:e0:12:fd:25:6c:5a:78:92:67:f4:81:
                    04:00:ef:57:c4:26:bd:91:6e:40:24:f7:d4:7d:cd:
                    bb:30:1b:05:c6:e4:6e:f1:42:45:3d:61:b5:91:d7:
                    0b:6d:78:e2:73:6d:ed:7c:bf:5d:4f:9e:7f:c6:09:
                    ad:ec:f0:03:75:ce:74:18:db:52:65:fa:99:d5:99:
                    9f:f6:dd:a0:2e:71:b1:81:63:c7:9a:94:a2:6f:ed:
                    85:ca:6f:76:cd:46:83:ae:88:40:f3:ca:22:9c:54:
                    53:03:52:b3:0b:f7:a7:a1:6a:cc:2c:fa:ec:cd:6e:
                    2d:52:38:05:91:c9:2c:0d:15:93:eb:eb:9c:91:9d:
                    59:80:b3:f0:59:e9:32:91:89:2b:c8:72:2f:cb:af:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1D:54:64:47:FC:BC:E2:97:90:94:49:5E:44:9A:BF:26:8E:D8:F8
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a6361633a3a2f34382d3438203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:cac::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:67:5e:6c:54:e8:55:e9:9c:25:55:b1:6c:7c:1b:99:e7:42:
         f4:92:72:41:f6:c8:cb:09:e0:f9:39:a5:93:8c:68:5b:e7:b1:
         35:76:53:16:5c:7b:c2:22:dd:3f:87:97:3e:10:b7:b2:c2:30:
         7a:88:e7:88:a3:11:2f:0c:29:5b:f2:e9:78:5f:2e:25:64:43:
         cd:ab:d8:75:e0:d8:40:b5:c3:ad:bd:ae:7c:69:af:5d:98:36:
         9c:83:2d:4a:c6:3b:89:5a:b3:8f:ce:48:c5:a1:55:ae:c6:e4:
         d6:79:8c:93:c7:2c:e6:a6:8a:df:ad:f3:99:01:e1:60:54:b7:
         67:3b:b6:15:2f:9d:49:e9:90:11:14:5a:f8:c6:a8:22:b2:81:
         dd:92:02:1b:d3:ef:43:ba:79:75:c1:59:3a:72:ea:80:87:70:
         54:ad:72:2a:85:2d:ff:30:28:0d:82:ee:f7:88:d3:ac:d3:f1:
         bd:ae:95:95:93:2c:07:44:ea:44:c2:63:5f:9b:0d:21:46:d4:
         76:28:08:34:3d:f7:53:6c:14:ac:a3:4c:0c:c4:f5:5a:da:fe:
         db:4f:95:18:3c:54:93:35:7f:20:e4:15:57:d3:e7:94:c8:de:
         c7:41:22:a6:67:c2:5e:81:ce:45:d9:1f:8a:28:2e:16:78:bf:
         9d:fb:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:51:23 2026 by rpki-client