Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3232322e3234302e302f32312d3235203d3e203238313938.roa
File:                     3137372e3232322e3234302e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          d4Fhzxs4elbmAEHDTUjmX0bYMxgEn73PFe262ZYmziU=
Subject key identifier:   29:D6:3F:7A:7D:E8:6C:52:BD:BA:CC:01:FD:CE:09:D3:4D:5A:4C:3E
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       2F52077CA8AE20B8DCF891F29DC2632BDF74443D
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3232322e3234302e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:55 +0000
ROA not before:           Tue 29 Jul 2025 19:55:55 +0000
ROA not after:            Tue 28 Jul 2026 20:00:55 +0000
asID:                     28198
IP address blocks:        177.222.240.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:52:07:7c:a8:ae:20:b8:dc:f8:91:f2:9d:c2:63:2b:df:74:44:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:55 2025 GMT
            Not After : Jul 28 20:00:55 2026 GMT
        Subject: CN=29D63F7A7DE86C52BDBACC01FDCE09D34D5A4C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:07:f9:c7:40:bf:af:79:dc:b2:ce:f6:78:
                    82:61:7c:5b:4c:da:3d:18:11:49:24:57:65:1f:0a:
                    cb:c9:38:81:43:17:d8:c7:39:1e:3a:a6:0c:bf:02:
                    b1:66:f6:f7:73:6b:49:91:cb:ee:d3:e1:3c:33:67:
                    2f:a9:87:a0:da:bc:df:bc:22:1b:08:3d:20:39:9c:
                    ed:00:1b:d2:05:c3:c5:f1:7b:39:51:cf:c6:5f:db:
                    8f:88:b9:47:00:3e:99:6b:f4:c9:d4:2b:cf:e1:c7:
                    04:73:e1:ca:e1:d0:41:b6:67:f3:d5:3c:0d:76:6d:
                    17:b5:61:7e:87:06:cb:09:39:02:8b:28:08:c8:81:
                    e2:6f:5a:e9:49:c0:b5:28:11:cb:d6:87:92:f1:d5:
                    d2:f2:5b:a8:58:94:00:e0:45:d1:14:2f:c7:04:16:
                    7c:5c:8a:92:64:4b:e9:f5:73:a8:9d:75:47:13:87:
                    96:ad:02:6f:0f:8f:20:67:57:25:d4:5c:3f:a8:4a:
                    9f:a5:3f:cf:ed:b8:93:c5:a6:17:42:f6:1a:1f:33:
                    53:cb:cd:33:79:17:8c:69:1a:84:f6:24:f0:8a:c5:
                    22:fc:c7:a2:88:b7:c9:73:1d:9f:ab:f6:a0:12:87:
                    c0:94:77:e5:70:40:4c:eb:2c:4d:1e:82:26:39:17:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D6:3F:7A:7D:E8:6C:52:BD:BA:CC:01:FD:CE:09:D3:4D:5A:4C:3E
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3232322e3234302e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:b2:26:9e:61:53:ee:0a:57:af:d9:5e:10:46:84:ad:76:
         85:86:39:7f:4f:5b:7a:f2:c4:bb:ed:68:af:cb:0c:0c:da:5d:
         03:06:b4:9c:4e:93:e7:4f:5a:84:57:f5:10:83:b3:85:54:ef:
         b2:c9:4b:4b:b3:82:b1:d5:27:3f:17:7d:32:e5:d4:61:4e:0b:
         99:b2:18:72:76:8e:63:dd:be:40:aa:01:98:10:91:20:44:7f:
         c3:a4:b0:f3:1a:65:ed:9a:a9:f5:93:08:c1:0f:c5:be:c0:f2:
         a6:36:a5:ff:17:cd:18:36:46:ea:84:ef:e9:71:90:bd:ea:68:
         50:c2:40:46:66:87:1a:0a:a0:33:34:1b:37:b6:83:12:73:53:
         97:8d:79:44:81:ed:ab:fb:dd:f0:d2:56:7e:a2:ba:ed:5f:3e:
         ce:75:4b:57:2a:0e:af:8b:18:c1:af:a6:89:f5:97:4e:3e:40:
         5a:5f:35:88:bf:0e:03:b3:f1:52:d4:3e:01:e6:e8:5f:62:04:
         a8:f6:21:5b:7e:43:38:bb:e9:aa:00:bc:f5:54:9e:4f:40:f5:
         ef:85:8f:6f:2e:b0:a5:3a:b0:84:60:f3:00:20:f5:0d:29:73:
         71:57:01:e1:79:11:03:b2:e9:fb:2c:e6:18:89:95:fa:ea:f7:
         7a:0f:08:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL1IHfKiuILjc+JHyncJjK990RD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBQTcxODhFQURDQzhDM0M3OThCMDQ2MEYyMTg1NjRE
QTA0Q0NBRDAeFw0yNTA3MjkxOTU1NTVaFw0yNjA3MjgyMDAwNTVaMDMxMTAvBgNV
BAMTKDI5RDYzRjdBN0RFODZDNTJCREJBQ0MwMUZEQ0UwOUQzNEQ1QTRDM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ewf5x0C/r3ncss72eIJhfFtM
2j0YEUkkV2UfCsvJOIFDF9jHOR46pgy/ArFm9vdza0mRy+7T4TwzZy+ph6DavN+8
IhsIPSA5nO0AG9IFw8XxezlRz8Zf24+IuUcAPplr9MnUK8/hxwRz4crh0EG2Z/PV
PA12bRe1YX6HBssJOQKLKAjIgeJvWulJwLUoEcvWh5Lx1dLyW6hYlADgRdEUL8cE
FnxcipJkS+n1c6iddUcTh5atAm8PjyBnVyXUXD+oSp+lP8/tuJPFphdC9hofM1PL
zTN5F4xpGoT2JPCKxSL8x6KIt8lzHZ+r9qASh8CUd+VwQEzrLE0egiY5F/mfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKdY/en3obFK9uswB/c4J001aTD4wHwYDVR0j
BBgwFoAUbKpxiOrcyMPHmLBGDyGFZNoEzK0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC82Q0FBNzE4OEVBRENDOEMzQzc5OEIwNDYwRjIxODU2NERBMDRDQ0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQUE3MTg4RUFEQ0M4QzND
Nzk4QjA0NjBGMjE4NTY0REEwNENDQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzNzM3MmUzMjMyMzIyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzUyMDNkM2UyMDMy
MzgzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOx3vAwDQYJKoZIhvcNAQELBQADggEBAIUrsiae
YVPuClev2V4QRoStdoWGOX9PW3ryxLvtaK/LDAzaXQMGtJxOk+dPWoRX9RCDs4VU
77LJS0uzgrHVJz8XfTLl1GFOC5myGHJ2jmPdvkCqAZgQkSBEf8OksPMaZe2aqfWT
CMEPxb7A8qY2pf8XzRg2RuqE7+lxkL3qaFDCQEZmhxoKoDM0Gze2gxJzU5eNeUSB
7av73fDSVn6iuu1fPs51S1cqDq+LGMGvpon1l04+QFpfNYi/DgOz8VLUPgHm6F9i
BKj2IVt+Qzi76aoAvPVUnk9A9e+Fj28usKU6sIRg8wAg9Q0pc3FXAeF5EQOy6fss
5hiJlfrq93oPCH8=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:21:12 2025 by rpki-client