Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a383030303a3a2f33332d3333203d3e203631373037.roa
File:                     323830343a316231343a383030303a3a2f33332d3333203d3e203631373037.roa (raw, json)
Hash identifier:          HPOyUfWBHFjBRcP2VEGt0ObglTcm8V8OCATE5l6fA28=
Subject key identifier:   7A:AD:06:E1:23:C4:7F:6A:68:CE:0C:DD:8F:A9:7B:83:5E:E0:79:01
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       4863EB7EB80862DABB5F5A2F238940DCF4AFF1DD
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a383030303a3a2f33332d3333203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:07 +0000
ROA not before:           Tue 04 Aug 2026 15:53:07 +0000
ROA not after:            Tue 03 Aug 2027 15:58:07 +0000
asID:                     61707
IP address blocks:        2804:1b14:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:63:eb:7e:b8:08:62:da:bb:5f:5a:2f:23:89:40:dc:f4:af:f1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:07 2026 GMT
            Not After : Aug  3 15:58:07 2027 GMT
        Subject: CN=7AAD06E123C47F6A68CE0CDD8FA97B835EE07901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:aa:0a:71:b7:1c:13:30:b2:ce:e2:55:62:5f:
                    20:72:d2:8e:88:05:4f:5c:8e:90:36:6f:9b:35:0d:
                    55:64:a5:57:37:8b:87:b0:e6:dd:f3:27:f4:db:2a:
                    79:88:f8:db:b3:2e:77:41:92:e4:92:9c:58:de:58:
                    7c:da:1c:cf:6e:a7:7d:02:79:6f:32:74:c3:0a:72:
                    a3:04:fa:0d:0a:a9:75:ec:c2:dd:78:91:2c:38:47:
                    e6:db:a7:29:59:55:c8:39:b0:e0:a8:4d:fd:39:10:
                    b0:94:34:7b:76:f5:cd:ae:6e:cd:1a:dc:94:2e:93:
                    a8:9d:c7:29:02:57:c0:b9:d7:a5:99:ff:cc:8a:31:
                    2a:0b:ea:2c:50:0b:b7:cd:9f:c1:1e:19:c4:ab:03:
                    93:a2:76:35:fa:5b:6c:0e:64:b3:72:0a:40:67:ed:
                    f5:be:23:2f:f2:75:a6:b2:6a:9e:88:ff:cb:9e:59:
                    c2:16:24:3e:ab:38:c4:39:c6:e1:26:ab:69:96:14:
                    51:03:17:ee:d6:56:75:4e:3a:26:e3:d2:d9:cb:fd:
                    84:d8:22:d2:49:69:88:a9:4f:fe:e9:ed:58:5e:61:
                    22:41:d4:8b:71:bd:d5:3d:1d:97:3f:f6:db:f3:7a:
                    a1:b4:e2:8d:78:58:d6:16:81:80:c8:d5:c4:4a:1b:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AD:06:E1:23:C4:7F:6A:68:CE:0C:DD:8F:A9:7B:83:5E:E0:79:01
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a383030303a3a2f33332d3333203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b14:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:1b:48:8c:e3:bd:99:69:32:ce:65:db:aa:ef:46:d8:17:
         bc:3c:6e:26:30:18:e1:b0:e2:39:be:15:4a:16:2a:7f:64:8f:
         46:67:35:d4:44:82:f4:95:16:58:0f:9a:64:a3:04:94:91:68:
         92:87:2e:31:87:23:e4:d8:80:96:7d:64:4d:1b:c8:7d:43:c3:
         f4:2c:00:3e:ed:bc:25:65:bb:0f:b0:68:d3:2c:ac:15:5d:d0:
         98:36:6b:85:e1:05:15:9a:cf:63:6c:82:7d:c7:ce:6d:9c:d2:
         ef:cb:23:6f:59:49:e8:b6:28:a6:cf:d1:24:f2:37:3c:1c:81:
         15:db:d0:d9:d2:d0:39:83:98:e8:06:4d:83:27:ba:6c:2a:84:
         9e:32:fd:0d:18:22:ad:02:ba:c5:21:d7:df:10:45:c7:14:db:
         a2:23:b5:3b:d8:60:63:39:20:ff:96:e1:30:50:a8:54:d3:43:
         a3:c3:8c:8f:57:5f:08:09:b5:b3:ec:a8:1d:99:c3:e1:d5:c1:
         3a:52:0d:27:9a:5d:f6:32:7c:ed:ae:b7:bf:de:a2:5f:58:65:
         af:b5:c3:62:d6:97:cb:04:ce:3d:56:76:19:a9:81:8c:0e:88:
         d2:4e:e1:57:91:c6:81:63:ed:57:63:fb:15:31:03:5c:be:b2:
         4e:72:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 23:45:23 2026 by rpki-client