Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a383030303a3a2f33342d3334203d3e203631373037.roa
File:                     323830343a316231343a383030303a3a2f33342d3334203d3e203631373037.roa (raw, json)
Hash identifier:          p9AimWO+Cy/kxr65eFTy41Ith2j3kkaRbVsC/n5eMuA=
Subject key identifier:   F5:61:41:31:CF:FC:DA:DE:8E:88:FC:71:E5:FA:E1:69:40:49:52:9F
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       2CEDED6FFF72E05406D8CE7AF8A759CAFE098AB9
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a383030303a3a2f33342d3334203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:08 +0000
ROA not before:           Tue 04 Aug 2026 15:53:08 +0000
ROA not after:            Tue 03 Aug 2027 15:58:08 +0000
asID:                     61707
IP address blocks:        2804:1b14:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ed:ed:6f:ff:72:e0:54:06:d8:ce:7a:f8:a7:59:ca:fe:09:8a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:08 2026 GMT
            Not After : Aug  3 15:58:08 2027 GMT
        Subject: CN=F5614131CFFCDADE8E88FC71E5FAE1694049529F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:d6:58:57:e7:ec:3c:5a:8b:b4:9c:8b:1c:
                    33:1c:12:bb:d8:59:83:86:d6:1b:3b:e1:49:d2:74:
                    bc:0c:a1:df:5c:6d:f2:59:61:a3:e1:6d:0c:55:22:
                    4a:c2:08:47:76:69:17:b6:74:a3:7f:ae:71:70:3f:
                    c2:5d:81:6c:a2:9c:17:7b:ba:33:0d:ac:96:f2:d8:
                    f7:87:22:84:6a:69:d5:4a:ef:d2:d4:ef:be:e7:2f:
                    d3:11:13:e3:58:99:36:3e:d0:a4:b2:c4:f2:7b:b8:
                    de:12:aa:bb:e3:54:af:70:3a:35:63:aa:22:f8:05:
                    cb:35:b3:cf:2b:14:fa:d0:8f:9e:74:84:a7:5e:a3:
                    a5:80:35:7e:02:9e:8a:0f:1c:8e:e2:ee:16:ad:9d:
                    21:bf:44:76:b0:9f:09:2d:ae:08:e6:f8:52:75:6c:
                    7d:15:3e:c4:a5:50:dc:a1:0e:70:b1:6e:2d:ed:84:
                    54:3b:5b:54:77:e7:d4:fd:9d:ba:fd:4f:e3:32:d4:
                    6c:7b:25:d6:b3:73:5a:dd:98:9a:c9:80:e9:68:a0:
                    a4:c3:6d:29:20:d4:9e:7f:3b:d7:68:e5:60:ab:ee:
                    ad:3c:ad:e8:9f:cc:bd:4b:c1:2e:63:23:55:3c:38:
                    4e:d3:8d:c3:a6:80:7f:59:65:69:35:70:e3:47:26:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:41:31:CF:FC:DA:DE:8E:88:FC:71:E5:FA:E1:69:40:49:52:9F
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a383030303a3a2f33342d3334203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b14:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:c2:4a:e0:ed:fc:18:32:f1:76:be:28:33:3f:3d:a8:33:
         73:95:fc:f5:d5:7c:9e:d3:21:8e:75:29:f7:36:da:3b:b2:b4:
         40:01:0c:88:5e:10:6a:1d:b5:ee:b8:f9:8a:d3:72:14:1f:e2:
         8f:bc:49:3f:16:f9:c3:ff:18:34:30:ca:50:29:76:a3:1d:4a:
         64:9b:21:51:a2:8e:27:4d:1a:4d:15:7f:5f:a5:27:4a:e0:d6:
         23:c3:a0:f4:8e:87:db:b7:89:88:d5:ec:91:e7:88:ce:1e:10:
         87:e6:37:ee:5d:00:3d:f7:b7:bd:74:58:68:22:a0:dd:2d:4e:
         d1:d3:74:14:f3:22:cc:43:24:b9:a1:de:17:2e:d9:67:9b:85:
         07:3e:2f:a3:86:c5:fc:0f:53:d3:bd:fa:88:21:f3:53:bf:72:
         11:0a:65:9e:a6:90:27:fd:8c:34:3e:8e:3d:90:b4:1e:84:12:
         a7:07:3f:1f:80:d7:1a:1f:64:ae:d1:b3:c5:46:37:c3:8d:d7:
         82:d7:05:43:7e:05:83:3c:3b:b2:58:a7:b6:5f:05:16:72:12:
         8d:6b:d6:89:aa:29:03:82:a7:e4:a2:23:70:cd:50:c4:04:73:
         38:27:8a:3e:c3:1f:f7:d4:1f:82:c4:90:89:97:56:7c:56:2b:
         16:6d:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:52 2026 by rpki-client