Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa
File:                     3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          lW8aIlyiPuFPb+zPbfqe8TbEH58lulVI+tVF+zssDOo=
Subject key identifier:   67:48:34:04:28:45:C8:BF:CD:76:76:BF:C7:CA:0E:CF:2A:4B:BA:74
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       12F529C045D04FBC4EBADEE515B1C071796863CC
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:58 +0000
ROA not before:           Tue 29 Jul 2025 19:55:58 +0000
ROA not after:            Tue 28 Jul 2026 20:00:58 +0000
asID:                     28198
IP address blocks:        177.137.152.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f5:29:c0:45:d0:4f:bc:4e:ba:de:e5:15:b1:c0:71:79:68:63:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:58 2025 GMT
            Not After : Jul 28 20:00:58 2026 GMT
        Subject: CN=674834042845C8BFCD7676BFC7CA0ECF2A4BBA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:b8:ee:2c:d9:a3:00:ee:14:22:f6:72:b0:
                    9e:0d:ae:90:fc:2e:cf:ea:ef:f1:a0:69:cd:98:73:
                    c6:6e:59:0a:61:56:2e:9c:c6:98:d0:c5:5b:86:5b:
                    de:c7:45:73:bb:86:56:0c:be:8a:5c:4a:b3:bf:6d:
                    85:68:c6:94:bd:60:41:a7:80:51:20:24:c9:ca:36:
                    d3:f5:de:d6:0e:8a:6c:de:f8:1a:6f:6f:cd:60:93:
                    84:08:46:31:10:ed:6a:61:5d:92:56:fc:59:c3:28:
                    ac:b6:d2:7b:db:03:3c:89:ed:a2:10:d3:35:88:3e:
                    7e:ac:6f:92:94:0b:d1:f0:ee:4f:c7:ac:72:74:c0:
                    b6:80:89:ce:fc:39:25:fc:ad:be:d0:ac:ca:da:c6:
                    93:cf:6e:7f:e4:96:bc:23:5d:db:dc:55:5e:d8:27:
                    50:ea:5a:ff:30:bc:85:15:64:50:35:e6:95:c2:dc:
                    79:6d:40:e4:0e:ba:4d:b5:1c:c5:a1:ba:d6:f9:17:
                    bd:da:64:04:17:9f:97:f3:30:12:bd:30:4e:0d:52:
                    48:d2:01:f6:cd:71:8e:6e:0e:f9:d5:0d:ec:1b:36:
                    77:15:f2:22:6e:b5:9c:49:87:d0:89:de:f4:c7:f1:
                    ba:8c:aa:74:5f:c5:4e:8d:40:55:b2:0e:38:c3:de:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:48:34:04:28:45:C8:BF:CD:76:76:BF:C7:CA:0E:CF:2A:4B:BA:74
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:e3:41:0f:d9:ec:08:3f:54:be:f4:00:1c:0f:7f:f2:52:22:
         68:25:0e:d1:d2:4e:06:8c:cc:3e:72:11:5b:44:9f:c5:5a:47:
         8a:ed:8b:2d:6f:21:5f:ea:96:47:8d:75:56:6d:40:f5:4d:32:
         8d:a0:fe:19:04:27:e1:95:86:14:ff:b7:e7:61:bd:6a:e2:ed:
         fe:4b:78:a2:ca:07:be:9a:67:17:8a:6d:60:c2:bc:10:e8:dc:
         9d:08:65:a4:94:90:7f:c3:a0:37:10:49:88:ea:b1:86:40:26:
         e9:57:c1:82:59:54:fb:e3:f1:cf:cf:23:ec:22:13:0b:05:23:
         0d:3a:a2:f2:66:1b:73:70:89:af:3c:c9:76:8e:f0:b0:6e:13:
         36:c6:58:d2:d3:e7:89:32:e5:8d:62:00:01:af:c3:14:62:4e:
         22:05:0c:25:26:92:61:95:8a:31:e8:4c:cb:76:58:0a:e8:06:
         50:f7:39:94:19:46:49:ce:3c:21:f3:9c:29:9e:ba:ec:29:2f:
         5a:42:b2:5c:d5:db:60:bb:f2:87:74:cc:a3:b9:1b:f4:4d:df:
         7c:18:1d:11:b3:19:90:d3:6e:7f:7d:77:d7:03:c9:78:57:b9:
         af:26:7f:16:86:f7:42:93:f4:0e:2c:a0:ba:92:17:cd:28:41:
         be:b6:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:11 2025 by rpki-client