Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a653030303a3a2f33362d3336203d3e203238313731.roa
File:                     323830343a6438343a653030303a3a2f33362d3336203d3e203238313731.roa (raw, json)
Hash identifier:          cOJ+8kUUZGQL+mVM4veLpVGyPiAqb/cy7pA5HQoljyk=
Subject key identifier:   36:CB:4C:52:8B:C7:8E:5F:28:59:1E:C2:0A:20:46:7A:93:5C:EE:A1
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       4C131C00479D1ED68AF766B008D7D7D3054BD308
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a653030303a3a2f33362d3336203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:40:17 +0000
ROA not before:           Mon 10 Aug 2026 17:35:17 +0000
ROA not after:            Mon 09 Aug 2027 17:40:17 +0000
asID:                     28171
IP address blocks:        2804:d84:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 03:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:13:1c:00:47:9d:1e:d6:8a:f7:66:b0:08:d7:d7:d3:05:4b:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:35:17 2026 GMT
            Not After : Aug  9 17:40:17 2027 GMT
        Subject: CN=36CB4C528BC78E5F28591EC20A20467A935CEEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:92:5d:1d:0c:ec:3b:02:32:c0:0e:95:e9:
                    e5:6e:e5:9a:b3:05:ed:8a:da:4e:0b:ef:42:d1:04:
                    10:bf:3a:7c:ec:ff:70:e4:58:7b:f8:6c:e4:3c:7a:
                    7e:60:0b:45:c5:25:28:aa:06:99:4a:2e:a7:8b:c2:
                    53:23:72:14:3b:f2:61:38:3b:d3:5a:18:94:c5:a9:
                    56:f9:98:bf:c2:40:4d:9d:c3:77:04:5f:c2:7e:85:
                    87:70:2a:d8:bc:c3:fe:7a:c6:41:cc:00:db:2e:a8:
                    11:40:8b:41:44:a0:3e:a0:56:96:f0:61:75:f2:f0:
                    ce:ca:45:3d:da:9c:21:8b:79:11:b7:ae:1c:cf:a7:
                    8b:66:67:70:50:c0:d9:84:12:b9:f2:56:56:07:7e:
                    72:4e:22:ef:96:d3:e6:f3:a8:18:b9:65:ff:5d:28:
                    ab:07:35:10:3c:3e:b8:41:1d:05:05:52:d1:1d:63:
                    e4:23:9b:92:08:79:b2:90:27:bb:b8:c6:13:91:b3:
                    e9:55:60:1c:7e:2d:9b:ce:83:99:2a:57:72:5b:28:
                    b1:58:84:8d:c8:a2:17:ca:14:ce:15:45:46:e1:4f:
                    e6:c1:fe:5a:7c:ed:b5:10:08:d4:e9:a7:d2:9e:49:
                    ca:85:7d:85:56:d2:be:83:25:01:73:90:4c:f5:9a:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:4C:52:8B:C7:8E:5F:28:59:1E:C2:0A:20:46:7A:93:5C:EE:A1
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/323830343a6438343a653030303a3a2f33362d3336203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d84:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:7e:a1:90:ae:e3:61:bb:36:42:69:4c:2a:9f:73:ed:41:
         63:70:0d:b9:ed:2c:85:48:ce:09:18:f2:6b:91:25:10:58:8f:
         8a:dd:81:20:dc:d5:50:25:16:41:45:cd:08:7c:a9:30:4e:8a:
         c0:ad:94:6f:82:81:1d:64:eb:72:87:99:65:32:0d:d3:08:bc:
         de:4c:0a:f4:0d:11:0a:aa:9d:8b:b0:57:ae:07:fa:a3:64:2c:
         53:df:4c:04:20:ee:dd:d9:a6:70:a9:58:4b:fb:73:d3:c2:a8:
         d3:03:da:19:41:40:8f:76:bb:83:dc:78:2c:7b:7c:2d:7f:61:
         4a:6b:b0:27:45:d5:86:03:e9:7b:c5:d9:69:54:13:c1:c1:74:
         cc:51:41:0f:4c:f1:0a:e2:5f:8f:43:22:0a:72:ef:89:60:84:
         b0:96:ab:32:50:a6:e1:eb:4f:22:48:51:97:b9:17:ae:a4:74:
         75:e2:45:e4:30:1d:1c:b5:b1:95:fa:a5:fa:72:16:14:de:cc:
         21:8c:13:65:1a:e0:4a:62:e1:87:42:e9:93:82:2a:20:93:94:
         57:56:2b:13:a1:8a:63:96:70:61:6e:50:d8:11:2f:b9:b0:88:
         07:36:47:3d:4e:be:f0:d5:73:18:8c:25:d9:2b:7a:82:46:9e:
         ad:12:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:52 2026 by rpki-client