Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a3a2f33342d3334203d3e203631373037.roa
File:                     323830343a316231343a3a2f33342d3334203d3e203631373037.roa (raw, json)
Hash identifier:          XUkw2d8jaPRR1qXGQkN27fRC0tREpoEj2wEmhGhGpbE=
Subject key identifier:   26:FD:60:2F:0B:07:1E:B3:C3:CE:BB:3E:03:9B:E5:A5:B8:46:D0:CA
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       6A0BEEC1411DD063D2B945AC5FC30E6B364AB958
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a3a2f33342d3334203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:07 +0000
ROA not before:           Tue 04 Aug 2026 15:53:07 +0000
ROA not after:            Tue 03 Aug 2027 15:58:07 +0000
asID:                     61707
IP address blocks:        2804:1b14::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:ee:c1:41:1d:d0:63:d2:b9:45:ac:5f:c3:0e:6b:36:4a:b9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:07 2026 GMT
            Not After : Aug  3 15:58:07 2027 GMT
        Subject: CN=26FD602F0B071EB3C3CEBB3E039BE5A5B846D0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:a1:f1:b4:9d:86:8d:1c:dc:e4:8b:ca:11:
                    92:e7:a2:4e:1d:c6:b7:58:fa:9d:30:0a:50:df:e9:
                    58:cf:a8:b2:35:cb:21:c6:99:7a:49:dc:28:73:d0:
                    3e:9a:2e:aa:63:af:39:bd:21:e4:2a:42:4b:d8:57:
                    5d:7e:4b:17:eb:35:a3:32:02:05:2a:a8:17:5d:87:
                    d4:a3:ac:d4:09:84:33:60:e3:09:61:a7:ad:1e:e4:
                    48:de:0b:e6:53:b4:7c:00:4d:47:f2:7e:a0:d6:50:
                    99:0b:13:ef:04:f0:fd:e7:41:bc:63:27:75:7c:33:
                    68:f4:15:54:ee:08:84:58:ec:e4:22:f9:17:7d:4f:
                    1f:f0:38:ae:8c:9e:dd:c5:38:a6:43:bd:fd:a0:84:
                    17:b3:e1:73:6e:89:e4:96:e3:94:91:2a:f5:9a:47:
                    e2:55:4a:81:e6:ae:fb:f5:c6:59:e8:04:37:dc:63:
                    96:5a:8a:07:06:58:6c:c7:e8:49:68:40:21:ef:9c:
                    48:ae:d1:1e:e6:b2:d8:0b:3b:ac:82:dc:86:7c:2c:
                    1c:27:03:79:e8:d5:6f:5e:b3:39:fe:bd:3b:66:68:
                    f4:1c:0c:d1:11:86:32:7c:ea:9a:b1:89:3b:4a:d4:
                    b9:8d:cb:78:28:29:92:f2:0c:86:3c:0d:62:97:b7:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FD:60:2F:0B:07:1E:B3:C3:CE:BB:3E:03:9B:E5:A5:B8:46:D0:CA
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/323830343a316231343a3a2f33342d3334203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b14::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:ef:37:8c:db:46:47:89:79:d2:1a:ba:86:73:68:3c:e2:
         5c:e2:40:aa:ff:ac:d7:bf:4d:d8:55:49:9d:5d:10:81:f0:8b:
         c0:32:cd:74:85:a4:6e:1c:aa:1c:b2:bc:0b:82:26:db:bb:4f:
         4a:07:09:1f:2f:a8:a3:35:ed:77:1b:ee:aa:66:9d:2b:92:8f:
         98:7d:f1:8a:21:47:e4:14:84:26:f0:77:2e:30:7a:48:88:22:
         92:5b:7f:4b:ab:46:de:1b:bf:a0:b3:ad:01:2f:71:39:02:78:
         c4:8a:f7:c5:02:ac:b8:ec:da:8f:82:2e:3d:20:46:5f:eb:ad:
         ff:5a:5d:40:8b:99:21:55:08:63:39:b5:4d:3a:2f:90:43:90:
         01:34:7c:4d:53:1b:48:80:d1:2c:dd:ec:2f:2c:8c:83:5d:ce:
         40:fa:dc:b1:2b:5b:bc:8c:95:69:43:35:17:a1:2b:9c:32:c5:
         b6:94:b1:16:70:8a:08:b6:a0:17:0e:a6:83:22:63:21:05:01:
         b8:20:f7:19:8d:06:60:48:2b:70:c3:f5:bc:d8:50:b6:e3:e6:
         5d:da:db:02:fc:b6:45:7b:aa:fa:bd:f3:0e:c3:d5:3f:35:cf:
         3a:05:1f:08:26:bb:d6:c1:30:45:08:5c:b1:c5:81:31:12:bd:
         7f:c4:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:59 2026 by rpki-client