Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3235203d3e203238313938.roa
File:                     3137372e36372e382e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          Gh4cxJoaszb4ly3B/0lXNbrwvbqdnMbv37qN2Uk1oII=
Subject key identifier:   8E:0F:B3:7D:02:55:3B:72:5B:67:93:49:14:68:79:7D:67:03:9D:E6
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       6CC6C65B457E7DFDAEA03B3C2F642014717D1381
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:48 +0000
ROA not before:           Tue 29 Jul 2025 19:55:48 +0000
ROA not after:            Tue 28 Jul 2026 20:00:48 +0000
asID:                     28198
IP address blocks:        177.67.8.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c6:c6:5b:45:7e:7d:fd:ae:a0:3b:3c:2f:64:20:14:71:7d:13:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:48 2025 GMT
            Not After : Jul 28 20:00:48 2026 GMT
        Subject: CN=8E0FB37D02553B725B6793491468797D67039DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fe:f9:67:f4:a8:93:f6:60:4d:65:19:4f:83:
                    27:89:d7:42:c3:23:ab:81:24:a3:91:93:44:3b:39:
                    2c:bb:5d:af:72:09:a6:df:7b:99:0c:76:89:73:4c:
                    da:2f:28:30:ba:03:b0:d5:1a:0e:fb:4b:02:44:55:
                    b0:c5:29:5e:21:52:dd:4c:a7:5b:6c:ac:95:36:9c:
                    86:f1:dd:69:07:c8:87:46:63:ba:52:15:90:a4:6f:
                    4c:32:14:2b:55:94:1d:ca:ab:fe:ec:e3:06:29:42:
                    15:71:85:06:70:0b:96:c1:ce:de:d9:80:a8:0a:3d:
                    9f:a1:fe:df:96:a5:19:c1:65:c2:78:c4:d5:3d:f8:
                    9a:9a:43:84:93:37:62:8d:e8:84:41:54:6d:3b:b1:
                    f1:8a:c4:67:eb:74:80:d2:da:27:6f:57:2c:71:a7:
                    ec:44:7d:6f:3d:41:98:9c:43:ff:c6:fa:82:ef:8c:
                    39:18:59:a4:35:a6:8a:de:75:03:dd:63:8d:33:71:
                    75:cc:59:33:14:af:ce:99:07:bb:21:6a:1a:93:1b:
                    2a:3a:68:1e:f6:56:a4:30:a9:28:fc:0d:c3:f9:4d:
                    cd:53:55:64:e2:a7:4a:0d:77:bb:a3:57:4e:22:ea:
                    ac:3f:e8:a3:f6:a2:13:76:06:8c:5a:6a:6d:95:da:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:B3:7D:02:55:3B:72:5B:67:93:49:14:68:79:7D:67:03:9D:E6
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:eb:51:b6:f1:15:30:11:90:6f:50:6f:e7:6e:5d:15:c5:
         b7:30:bd:09:a9:bf:fa:4c:99:0a:2f:cf:43:2f:9b:01:65:ca:
         3f:59:d6:87:84:35:e2:f0:53:dd:6c:35:d3:29:13:67:d9:ed:
         01:51:92:70:99:a7:00:5e:85:8b:42:be:9c:33:d7:3c:e8:cd:
         48:e2:47:11:2c:b9:a1:32:4b:74:b5:df:fb:35:77:ac:8e:33:
         c0:4b:99:84:f8:e2:0b:f3:17:7b:4b:ee:6a:66:41:e5:d7:6c:
         d7:d2:59:55:37:88:9b:ad:24:e0:e2:e1:92:d8:12:58:3a:08:
         1c:40:59:ad:30:2e:e7:ec:5a:b8:b6:dc:b0:67:fb:7a:b9:b9:
         05:eb:9e:38:34:cf:f1:eb:8e:3b:10:50:f2:98:0d:c1:db:3b:
         a2:75:8c:6d:af:ee:0a:a5:80:a0:59:34:cc:19:ea:59:fa:b0:
         42:58:d6:02:0d:28:78:ef:7d:bb:39:c1:e5:62:a0:a9:f5:b0:
         cd:73:9d:4c:7d:f4:8f:f7:c5:1f:08:6d:1b:6c:22:3e:de:0b:
         69:58:f0:c7:ad:1e:50:9b:8e:43:c7:4f:d8:ad:ae:38:cf:e8:
         82:a3:8c:47:a6:5b:5a:5b:85:52:78:9f:fe:a4:69:e3:db:6e:
         e2:36:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:20:47 2025 by rpki-client