Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e35322e34382e302f32312d3235203d3e203238313938.roa
File:                     3137372e35322e34382e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          6ZGPiE0tijiyLlia/qdmDdkexWIGBBiNcqvLCokHDDQ=
Subject key identifier:   C4:E2:30:30:29:75:33:3D:44:BA:F1:A7:47:C5:09:AD:C5:13:F9:BC
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       6A3027735024853E57C681F42B79E62A55626902
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e35322e34382e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:54 +0000
ROA not before:           Tue 29 Jul 2025 19:55:54 +0000
ROA not after:            Tue 28 Jul 2026 20:00:54 +0000
asID:                     28198
IP address blocks:        177.52.48.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:30:27:73:50:24:85:3e:57:c6:81:f4:2b:79:e6:2a:55:62:69:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:54 2025 GMT
            Not After : Jul 28 20:00:54 2026 GMT
        Subject: CN=C4E230302975333D44BAF1A747C509ADC513F9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:b9:8b:61:ef:cf:85:68:37:54:09:62:1e:
                    2c:4e:ac:0f:85:83:ad:66:bb:d6:ba:93:60:17:29:
                    88:3f:5f:36:33:3a:b2:a5:ad:47:13:f7:05:aa:c2:
                    e7:cd:d1:18:79:65:fe:15:29:da:2e:e7:3c:c8:f9:
                    bb:88:34:6a:aa:02:b1:a7:7b:9b:af:e1:51:dc:ef:
                    27:6b:4a:79:a4:c9:d9:04:1c:d9:0c:3c:eb:e7:e8:
                    4b:29:12:b5:22:08:06:eb:f7:67:e3:f7:7a:13:6d:
                    ae:44:2c:06:8c:c8:b9:60:67:b9:93:fc:c4:d8:b7:
                    c2:b2:83:5a:47:6b:4d:a3:2c:39:ab:00:9a:cb:6e:
                    47:90:90:87:f0:a7:e8:ec:d8:5e:21:ac:56:7a:47:
                    8e:f4:66:e2:cd:77:89:d1:b4:3f:17:e3:f8:a3:d9:
                    50:86:53:d4:2b:a5:4b:59:44:29:9b:b8:52:b4:ed:
                    bd:81:fb:dc:3a:78:08:15:1f:5b:75:6b:8c:d4:e0:
                    cf:dd:fa:5b:f3:81:dc:65:dc:30:8c:4c:99:ba:46:
                    28:16:3a:d8:d7:39:02:c2:1c:7c:f3:48:a1:04:29:
                    77:76:82:74:1d:22:ef:03:b1:66:54:1a:60:31:65:
                    95:17:48:c4:4b:e3:c2:22:6a:79:93:2e:43:a4:0a:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:30:30:29:75:33:3D:44:BA:F1:A7:47:C5:09:AD:C5:13:F9:BC
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e35322e34382e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:79:0d:79:a5:fe:b9:9a:e5:51:7a:3a:3c:1b:f3:63:51:
         2e:f6:e1:68:27:9b:f9:49:9d:b1:c4:52:aa:60:d0:2e:ca:93:
         a5:18:b3:f5:6e:02:de:fa:bc:04:5d:fd:95:dd:52:ab:6b:89:
         85:e7:87:6e:50:ae:df:98:49:a2:9d:7d:5a:c5:19:db:ac:10:
         9c:a2:4c:6e:47:2c:39:45:2d:47:04:02:92:d7:67:39:53:2f:
         7d:20:e9:a3:41:75:3d:61:6e:e0:b8:05:f0:7e:b4:d0:fd:78:
         8d:9f:85:59:bf:61:52:0f:c4:25:2e:33:36:3d:5b:40:81:f0:
         88:bf:0c:44:65:f9:7a:ac:f0:eb:4d:b3:8a:18:9d:01:45:b7:
         64:e2:97:56:32:22:59:19:29:40:f8:f7:5e:cb:04:70:bd:5a:
         36:9f:c7:54:ea:7b:97:ed:c1:73:74:84:90:f5:53:cd:a0:c2:
         0f:5d:6b:c9:6d:79:b4:d7:75:df:b4:dd:30:39:8e:92:7e:62:
         58:a5:dd:20:49:2f:1d:55:a4:7e:ce:8d:b2:96:ae:3f:37:ec:
         37:5a:1c:46:bd:68:ff:20:13:95:c4:c9:16:4a:45:7b:e5:03:
         d8:c3:e2:e2:06:3b:b4:a6:9b:a5:50:2a:d6:30:d1:07:04:ad:
         99:52:3f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:20:27 2025 by rpki-client