Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138312e302f32342d3234203d3e203631373037.roa
File:                     3133312e302e3138312e302f32342d3234203d3e203631373037.roa (raw, json)
Hash identifier:          9iNRY146HxlA56SSTj2URmAsu5Z5BdgLPwpYFK9sWQE=
Subject key identifier:   C1:C7:85:D7:5B:17:A6:1D:27:9C:E5:20:BD:07:6A:A1:EB:EB:70:03
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       1EB4BEE00126A35C923BA9EA633825578CDFFBEB
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138312e302f32342d3234203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:08 +0000
ROA not before:           Tue 04 Aug 2026 15:53:08 +0000
ROA not after:            Tue 03 Aug 2027 15:58:08 +0000
asID:                     61707
IP address blocks:        131.0.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b4:be:e0:01:26:a3:5c:92:3b:a9:ea:63:38:25:57:8c:df:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:08 2026 GMT
            Not After : Aug  3 15:58:08 2027 GMT
        Subject: CN=C1C785D75B17A61D279CE520BD076AA1EBEB7003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:10:bf:87:07:2f:ea:2a:af:7a:76:03:e2:
                    aa:73:8f:54:cd:c4:9e:5b:9f:8b:2c:ad:ed:8d:6f:
                    77:3a:e5:6d:04:24:90:39:03:61:24:10:29:b4:99:
                    e4:9e:69:a2:66:c8:c9:d5:21:cb:14:b9:69:f0:36:
                    07:b4:a1:9f:a0:41:a6:d5:5c:f1:68:f0:60:80:cd:
                    31:93:2a:fc:8e:65:10:53:6c:ca:54:b6:b5:72:77:
                    7d:18:d8:3e:b3:28:f9:19:f1:13:38:3f:1d:48:10:
                    ea:cd:c5:03:54:43:2d:73:7c:a5:41:5a:0c:02:11:
                    42:5c:ea:a2:3b:cc:33:d7:29:24:de:dc:9e:b0:d9:
                    e2:a2:2c:28:0c:cf:a8:6e:ab:cb:43:a4:48:92:74:
                    35:1a:5b:e3:91:91:47:b0:74:7b:98:67:94:52:5d:
                    f1:c2:9b:81:93:51:8d:a6:85:5f:45:76:09:fe:92:
                    00:3f:9c:c8:6a:16:8d:63:46:53:27:a2:f8:4e:f8:
                    a7:74:2b:b0:e7:39:07:e9:8e:bf:0b:bd:84:c0:ba:
                    3e:ab:e0:d7:c3:67:5d:fc:12:ed:f2:66:4f:ee:57:
                    e2:84:40:8d:cf:9e:0f:e6:4e:ac:e9:f1:db:4f:df:
                    56:44:f2:ae:dd:0e:e6:85:66:78:b0:7e:af:33:c3:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C7:85:D7:5B:17:A6:1D:27:9C:E5:20:BD:07:6A:A1:EB:EB:70:03
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138312e302f32342d3234203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e8:eb:ad:af:40:3e:45:12:9a:d7:54:ab:58:79:15:a3:5e:
         93:1c:f3:5a:67:be:d6:d2:5b:cc:fe:73:90:cc:b5:c9:a3:14:
         12:9d:21:c2:44:00:00:13:f0:68:3a:3c:e6:17:7a:59:ca:5c:
         86:3c:12:61:ad:69:c9:c4:68:5d:91:f6:1a:7b:48:cf:27:76:
         4d:32:db:2f:08:99:cb:b8:fe:53:c0:b5:2d:5f:ba:b1:cc:e5:
         02:a3:4d:61:85:2c:fc:01:d8:32:14:43:e2:c4:e3:6d:6b:a0:
         55:15:ac:58:91:ef:e2:b2:42:f2:af:18:d0:c6:42:95:95:49:
         fa:1d:be:f3:12:61:e2:2f:59:18:8f:52:db:ba:e5:3c:ac:29:
         b8:53:a2:ce:3d:bb:34:59:fa:7d:c8:6f:23:01:92:1b:9e:95:
         29:2d:37:b2:ea:5b:23:0d:aa:16:aa:1b:dd:03:5f:9c:1f:30:
         9e:9e:72:df:8d:0a:ce:00:09:ca:7d:9b:45:ec:db:b9:f5:83:
         84:28:0d:ad:79:c8:70:72:35:20:e4:a1:f7:a9:47:20:ba:e8:
         9f:27:02:61:0a:4d:a6:00:7b:cc:02:ab:3d:3b:19:ba:ee:71:
         6f:70:ff:f1:5f:7b:1c:7b:45:5c:62:ef:5e:15:07:78:c7:f8:
         ca:66:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 01:23:03 2026 by rpki-client