Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa
File:                     3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa (raw, json)
Hash identifier:          ddPsf7HoySWuW+n8rcKp8zQhdpsE+d/RJx40rQbfm6Y=
Subject key identifier:   C5:64:A8:65:22:D2:A9:F0:E0:48:F7:0C:68:1A:61:21:FA:66:30:9C
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       01FBEAE65A6294B1B50A57D7F3220B1F55488313
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:47 +0000
ROA not before:           Tue 29 Jul 2025 19:55:47 +0000
ROA not after:            Tue 28 Jul 2026 20:00:47 +0000
asID:                     28198
IP address blocks:        170.238.176.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fb:ea:e6:5a:62:94:b1:b5:0a:57:d7:f3:22:0b:1f:55:48:83:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:47 2025 GMT
            Not After : Jul 28 20:00:47 2026 GMT
        Subject: CN=C564A86522D2A9F0E048F70C681A6121FA66309C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4a:e8:68:61:c7:95:2a:c0:0b:7a:20:ab:37:
                    3c:74:94:5f:ad:be:6c:f6:23:b7:24:57:3b:3b:52:
                    88:45:a8:05:1f:90:3a:55:08:4c:62:4d:6c:44:4a:
                    25:0a:3e:93:e9:9e:57:c6:84:60:a1:c6:73:bd:6f:
                    45:ba:98:c3:fe:d1:41:b6:14:2b:bc:b8:8e:8f:fa:
                    de:68:9e:a9:c7:32:78:7a:29:47:00:4d:9f:10:9e:
                    2b:e6:95:24:fe:e9:e4:75:dc:73:8c:32:a7:3e:fd:
                    61:80:36:23:a8:27:50:59:01:4f:43:b8:fc:90:9c:
                    2b:f3:c5:35:b1:9b:d3:b5:2a:8e:98:d7:d9:37:30:
                    5b:d9:62:50:9c:32:db:98:e7:61:9c:03:b7:2b:4e:
                    81:60:0a:63:e4:59:a3:d7:b6:a8:9b:31:3b:ec:de:
                    97:1b:10:81:ee:12:84:0e:f9:a4:f0:01:a3:9b:56:
                    6b:5e:09:43:b1:cc:d7:d5:de:fa:b1:71:5c:fb:30:
                    4b:f3:79:40:26:ae:3f:32:94:cb:01:c0:8f:d2:39:
                    cb:af:ad:19:69:71:02:21:c8:b7:f5:e1:d9:47:20:
                    50:5a:57:aa:85:9a:b9:c7:43:a7:5d:54:ee:f2:31:
                    e9:80:57:16:da:98:59:6a:78:c2:49:ed:72:f8:b6:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:A8:65:22:D2:A9:F0:E0:48:F7:0C:68:1A:61:21:FA:66:30:9C
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:21:b3:45:cc:01:d2:c0:d7:58:5c:39:11:5c:c8:8b:db:f8:
         99:80:83:6c:c7:fd:75:e8:5e:eb:f5:1b:78:c1:dd:1f:3f:fa:
         e1:8d:22:41:07:fc:b2:ec:bb:f1:34:31:b3:39:3d:5d:ba:d3:
         0a:d7:84:cc:6d:38:8c:6b:4f:24:0e:1b:d2:6a:f3:a4:1a:81:
         08:8a:13:0a:e6:bc:00:9b:aa:6e:47:70:17:ef:4c:fe:42:e6:
         98:ca:04:0b:fc:52:a1:5a:03:7e:9a:4a:07:d8:39:a4:54:4b:
         1f:18:82:2d:d7:2b:5e:0e:48:39:b6:0d:d6:0c:b7:7c:6a:91:
         38:8f:cc:5a:5c:01:21:0c:69:49:2b:8e:f1:36:79:be:32:2c:
         6b:c8:d4:04:b3:a6:80:85:7f:57:51:cc:97:7c:01:7c:c0:a2:
         35:65:c5:77:ea:b5:6a:22:f7:db:a1:01:76:ce:e8:d9:c4:1b:
         03:77:9b:3f:9f:36:29:34:99:8e:45:91:94:02:59:bb:a0:61:
         18:a5:b9:f7:0a:de:72:fc:05:e3:fa:67:9f:a6:9a:cf:c8:73:
         06:ee:a6:fe:2a:a7:49:19:d0:28:c5:d0:f6:0c:c3:68:ef:93:
         19:8e:9e:f8:de:2d:7c:b9:45:84:b7:75:6b:13:c1:06:66:79:
         ad:f5:75:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAfvq5lpilLG1ClfX8yILH1VIgxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBQTcxODhFQURDQzhDM0M3OThCMDQ2MEYyMTg1NjRE
QTA0Q0NBRDAeFw0yNTA3MjkxOTU1NDdaFw0yNjA3MjgyMDAwNDdaMDMxMTAvBgNV
BAMTKEM1NjRBODY1MjJEMkE5RjBFMDQ4RjcwQzY4MUE2MTIxRkE2NjMwOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSuhoYceVKsALeiCrNzx0lF+t
vmz2I7ckVzs7UohFqAUfkDpVCExiTWxESiUKPpPpnlfGhGChxnO9b0W6mMP+0UG2
FCu8uI6P+t5onqnHMnh6KUcATZ8QnivmlST+6eR13HOMMqc+/WGANiOoJ1BZAU9D
uPyQnCvzxTWxm9O1Ko6Y19k3MFvZYlCcMtuY52GcA7crToFgCmPkWaPXtqibMTvs
3pcbEIHuEoQO+aTwAaObVmteCUOxzNfV3vqxcVz7MEvzeUAmrj8ylMsBwI/SOcuv
rRlpcQIhyLf14dlHIFBaV6qFmrnHQ6ddVO7yMemAVxbamFlqeMJJ7XL4tsOxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxWSoZSLSqfDgSPcMaBphIfpmMJwwHwYDVR0j
BBgwFoAUbKpxiOrcyMPHmLBGDyGFZNoEzK0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC82Q0FBNzE4OEVBRENDOEMzQzc5OEIwNDYwRjIxODU2NERBMDRDQ0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQUE3MTg4RUFEQ0M4QzND
Nzk4QjA0NjBGMjE4NTY0REEwNENDQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzUyMDNkM2UyMDMy
MzgzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq7rAwDQYJKoZIhvcNAQELBQADggEBACIhs0XM
AdLA11hcORFcyIvb+JmAg2zH/XXoXuv1G3jB3R8/+uGNIkEH/LLsu/E0MbM5PV26
0wrXhMxtOIxrTyQOG9Jq86QagQiKEwrmvACbqm5HcBfvTP5C5pjKBAv8UqFaA36a
SgfYOaRUSx8Ygi3XK14OSDm2DdYMt3xqkTiPzFpcASEMaUkrjvE2eb4yLGvI1ASz
poCFf1dRzJd8AXzAojVlxXfqtWoi99uhAXbO6NnEGwN3mz+fNik0mY5FkZQCWbug
YRilufcK3nL8BeP6Z5+mms/Icwbupv4qp0kZ0CjF0PYMw2jvkxmOnvjeLXy5RYS3
dWsTwQZmea31dTk=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:32:21 2025 by rpki-client