Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138322e302f32342d3234203d3e203631373037.roa
File:                     3133312e302e3138322e302f32342d3234203d3e203631373037.roa (raw, json)
Hash identifier:          sQu+gnlE+TEgUBlZS/e1hWRjFJp05HSh/4dHNY65Qpw=
Subject key identifier:   F4:CE:CB:0B:18:74:F3:AA:E3:4A:A0:FC:5E:FE:1E:59:C8:C7:C2:5E
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       41B2AE06316B88BDD0B6D9B16E296F6E4AD79D99
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138322e302f32342d3234203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:08 +0000
ROA not before:           Tue 04 Aug 2026 15:53:08 +0000
ROA not after:            Tue 03 Aug 2027 15:58:08 +0000
asID:                     61707
IP address blocks:        131.0.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b2:ae:06:31:6b:88:bd:d0:b6:d9:b1:6e:29:6f:6e:4a:d7:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:08 2026 GMT
            Not After : Aug  3 15:58:08 2027 GMT
        Subject: CN=F4CECB0B1874F3AAE34AA0FC5EFE1E59C8C7C25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:0f:1a:ac:c5:cd:92:f3:ab:83:35:7e:a3:
                    a0:20:69:f4:1b:35:1a:2c:69:23:3e:61:e0:f2:99:
                    62:32:1d:82:cd:24:87:a5:8f:f1:53:98:12:50:36:
                    27:aa:d0:a4:15:58:8a:45:e4:24:b9:03:f3:4b:8f:
                    84:6e:54:e2:42:ee:98:d4:ec:23:53:d6:6c:ff:0e:
                    2c:f8:3a:4a:86:99:c0:c7:ef:40:c6:43:44:ee:e7:
                    d8:2f:a1:cc:08:7b:df:55:ca:f0:95:29:fe:5d:0f:
                    f5:b9:e1:27:fd:e4:da:ad:07:28:da:40:7a:c3:86:
                    04:b8:89:0c:71:11:7d:4c:43:8f:66:a4:26:de:1e:
                    95:d9:ac:14:7b:fb:fb:14:7e:83:5f:d4:89:30:be:
                    d9:c6:99:e2:fa:8a:84:26:a3:98:00:e6:97:06:aa:
                    5e:de:1f:45:1c:7e:b1:23:35:21:2e:2e:83:0c:77:
                    1a:b6:d2:b4:29:d1:43:37:a4:7e:36:73:4d:86:91:
                    4b:7c:54:7f:08:0a:e2:b4:8b:70:4a:16:42:51:d1:
                    4d:c7:d7:d6:93:93:66:89:ee:c7:89:ba:0d:e0:5d:
                    1e:56:47:9e:4c:f5:6a:41:f7:ad:9d:6a:70:2e:1b:
                    49:d2:a5:d4:7a:5a:bc:cb:2c:b1:40:6c:c4:86:86:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CE:CB:0B:18:74:F3:AA:E3:4A:A0:FC:5E:FE:1E:59:C8:C7:C2:5E
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138322e302f32342d3234203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:86:3b:bc:37:1e:9a:b3:0e:8a:f0:c6:a6:77:b5:f7:6a:
         c8:8f:cc:66:84:35:77:f3:66:68:b4:b8:c4:98:86:49:95:05:
         98:a4:79:b5:5b:b2:85:72:c2:36:78:ae:61:e2:d2:aa:6c:4e:
         c2:28:32:bf:09:cb:23:47:d2:e6:38:52:db:31:da:f3:60:e0:
         f6:77:85:39:8c:73:d3:d3:ab:f8:11:a1:b6:41:81:39:b5:bc:
         77:ec:82:42:05:e8:2b:a4:6b:11:e7:62:9d:c3:14:b0:04:58:
         35:9e:b0:58:96:8f:e8:60:30:26:84:ce:63:a0:04:ff:a4:a3:
         4e:85:14:8c:36:09:ad:21:73:af:f0:cb:66:0a:96:ff:3a:b2:
         4a:f5:71:26:8f:21:09:73:69:7f:c8:c4:52:9f:a7:6d:ed:de:
         07:7d:90:59:70:e7:1f:75:f2:de:24:e7:d1:12:03:7f:5d:23:
         c8:8a:8c:5a:c6:4c:7e:97:05:3a:58:db:00:30:eb:e1:1c:6a:
         cc:38:60:f5:7b:2e:38:af:1c:5e:55:29:20:fc:b8:32:a6:d5:
         ab:9f:ed:98:19:e6:d3:a8:e0:5a:24:c9:66:f5:c4:f6:45:58:
         21:6e:1e:42:16:0f:28:3f:e6:fa:67:fe:d3:1f:7c:dc:3a:00:
         82:d1:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:24:20 2026 by rpki-client