Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a343030303a3a2f33342d3334203d3e203631373037.roa
File:                     323830343a316231343a343030303a3a2f33342d3334203d3e203631373037.roa (raw, json)
Hash identifier:          2/hzsi7pUO1qJwpfu/KWBQer4jnGyRnpJkhgHpLvyMo=
Subject key identifier:   C4:0B:8E:4D:EE:7A:E0:89:5D:77:12:DC:01:36:A3:B6:A9:E9:0C:8B
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       7A9408E32660DD0FD1089054BCE47ACE4E62E7C7
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a343030303a3a2f33342d3334203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:07 +0000
ROA not before:           Tue 04 Aug 2026 15:53:07 +0000
ROA not after:            Tue 03 Aug 2027 15:58:07 +0000
asID:                     61707
IP address blocks:        2804:1b14:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:94:08:e3:26:60:dd:0f:d1:08:90:54:bc:e4:7a:ce:4e:62:e7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:07 2026 GMT
            Not After : Aug  3 15:58:07 2027 GMT
        Subject: CN=C40B8E4DEE7AE0895D7712DC0136A3B6A9E90C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:da:d4:95:c7:b2:9b:a3:01:17:e1:64:27:
                    18:a2:d2:38:2e:85:da:0f:3c:f9:e8:aa:82:a0:dc:
                    c2:c4:0a:2b:44:5a:d2:c1:e5:37:ab:d4:4d:a6:93:
                    d2:4e:0d:1a:46:11:dc:b3:12:32:d2:db:3c:00:d6:
                    83:62:8b:6e:67:2c:15:5b:56:27:7e:70:12:c8:86:
                    9f:62:c3:80:65:d5:63:bb:ad:01:e7:ce:8c:98:54:
                    c9:9b:41:91:75:1b:b2:6b:6e:e9:ed:15:c3:e8:72:
                    b4:85:52:91:70:6b:92:57:b8:eb:71:5d:69:b3:5b:
                    53:a1:09:57:6f:ce:09:89:11:be:7f:8b:34:73:af:
                    5b:9f:c2:80:fc:2f:fa:a7:2e:67:56:f3:f5:99:ff:
                    6f:6b:a1:0d:b5:45:73:56:91:6c:81:4d:2e:54:4c:
                    4d:ca:23:75:45:c5:df:9d:04:27:72:80:92:a9:ea:
                    00:19:2f:6c:33:cb:b4:36:37:3b:52:24:e6:8f:fe:
                    92:34:ef:47:c6:d5:d2:b0:db:76:27:bd:08:6e:e7:
                    c0:c0:13:3f:e3:72:e4:b9:c0:58:42:99:32:8f:3b:
                    23:b5:23:0d:41:55:d4:8b:a3:59:2c:44:2a:01:5e:
                    78:ad:08:d7:6e:85:4e:d2:b0:a1:dd:a7:0f:8b:06:
                    b9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0B:8E:4D:EE:7A:E0:89:5D:77:12:DC:01:36:A3:B6:A9:E9:0C:8B
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a343030303a3a2f33342d3334203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b14:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:70:73:d5:e3:95:89:bd:74:7a:73:d5:17:0d:ee:2c:80:
         14:9b:2c:71:ba:e5:10:71:bd:c5:79:d6:1c:4b:54:27:7a:fa:
         46:85:35:09:74:89:4d:5d:4b:c5:b2:9a:20:e0:b1:e6:ba:91:
         52:97:e0:84:78:53:87:77:19:bb:07:b0:45:45:ab:5d:26:15:
         94:23:c2:c8:6b:e8:32:5e:26:f6:d7:41:8f:ff:b1:16:00:f3:
         4d:c3:05:63:ff:43:e5:29:f1:8f:f2:bb:08:79:be:43:11:b4:
         20:61:01:a3:c9:1c:a3:5c:1d:c9:b9:3a:e0:7c:08:17:3f:9b:
         e4:b8:e2:b2:0f:7b:17:2c:78:00:e5:37:64:03:d7:07:3c:79:
         93:87:a2:8f:8b:87:12:7b:f1:fa:80:17:62:61:52:22:09:92:
         dd:4e:45:e8:16:9f:63:d6:5e:8f:ed:69:ce:ec:59:d1:5e:eb:
         d6:5f:87:5e:73:1d:01:ac:7b:5b:e4:df:c6:1b:64:ff:71:82:
         53:0f:49:e8:f1:66:45:c1:83:bf:70:52:56:e6:8a:45:73:ac:
         c4:c6:6a:ab:eb:cf:65:82:29:c0:a8:d8:2f:f1:ac:18:5f:04:
         8b:97:c9:b9:47:25:2a:fd:b3:b9:55:26:96:44:77:de:37:22:
         82:50:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:52 2026 by rpki-client