Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e37332e3139322e302f32312d3235203d3e203238313938.roa
File:                     3137372e37332e3139322e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          Rfj+aQNLgO0Ncp3t9pQey1Rd1xBC7ileOjVNaWbgxn4=
Subject key identifier:   77:E3:F1:19:57:4D:E4:2D:99:78:D2:18:78:CD:15:96:BB:3E:05:AB
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       2685A992CB41D262E942366257A094D72CBB55BA
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e37332e3139322e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:58 +0000
ROA not before:           Tue 29 Jul 2025 19:55:58 +0000
ROA not after:            Tue 28 Jul 2026 20:00:58 +0000
asID:                     28198
IP address blocks:        177.73.192.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:85:a9:92:cb:41:d2:62:e9:42:36:62:57:a0:94:d7:2c:bb:55:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:58 2025 GMT
            Not After : Jul 28 20:00:58 2026 GMT
        Subject: CN=77E3F119574DE42D9978D21878CD1596BB3E05AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:54:c9:0b:be:80:b7:43:c3:61:d1:c6:61:
                    fd:09:28:54:47:f1:a4:47:81:d4:b5:4c:82:82:da:
                    92:8a:cf:8a:99:60:0a:c4:c8:e1:f6:36:bc:d9:4f:
                    1b:6c:7c:69:bd:3d:3d:80:fb:6a:26:a2:0f:4c:cb:
                    f6:22:d4:eb:38:8d:ff:b1:c6:9e:a4:fc:a8:1d:1e:
                    03:a0:84:09:4f:18:46:7e:ab:59:6a:72:a3:ea:86:
                    2a:e5:86:2c:cd:b0:05:60:d9:8b:c6:b2:16:c3:2c:
                    bb:75:d1:49:cc:00:2a:f8:7f:97:d7:9c:85:80:d0:
                    30:73:73:59:6d:a0:3f:2d:bb:83:cf:62:ad:91:f8:
                    ce:90:6d:62:8a:d2:ab:ac:91:f8:80:e2:9f:99:65:
                    a8:08:8a:7a:f4:46:a8:e2:d0:08:fe:bf:f2:db:37:
                    e7:9e:43:35:b1:c0:6d:90:87:35:02:e1:bd:f9:db:
                    9e:f9:af:05:dd:ed:f7:69:25:51:89:38:83:93:f7:
                    39:b4:3a:f4:40:e4:33:fa:8b:9a:ec:f2:e2:c4:40:
                    0f:5e:9c:12:7d:ce:a9:e9:bb:fe:14:47:1a:00:6f:
                    3a:3e:02:fa:28:cf:91:0b:b7:c7:64:fc:91:f2:d5:
                    3d:01:16:f6:3d:69:bc:6e:f4:7b:9c:fc:35:1e:40:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E3:F1:19:57:4D:E4:2D:99:78:D2:18:78:CD:15:96:BB:3E:05:AB
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e37332e3139322e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:77:1d:fd:4e:26:86:84:48:5e:e2:d6:51:96:d7:92:ff:ad:
         73:b5:e3:e1:68:32:dc:7f:44:1e:b2:c2:29:b6:d1:53:6c:83:
         90:79:ab:d5:ff:cf:b7:06:25:eb:bd:be:82:bf:a0:3e:c5:9b:
         fa:b4:c2:f5:ed:f0:ea:23:ee:95:af:5d:a9:c1:d0:05:18:02:
         ce:f3:eb:97:93:5f:22:f5:d7:b3:97:20:aa:37:30:bb:a5:d5:
         f2:2f:1b:84:c8:1d:79:e3:cf:99:2e:da:1f:2a:bb:1c:00:c0:
         25:bf:93:fe:fe:2f:1b:40:33:38:6f:e0:ff:d3:49:88:4e:3d:
         f5:4f:92:38:68:dd:80:20:14:7c:86:68:44:2d:e0:f1:15:4a:
         f8:4a:94:c9:b2:9a:75:8b:8e:7f:79:a3:ec:8c:41:ec:71:71:
         2f:fe:0b:65:26:aa:20:df:0e:75:c8:4d:86:e2:87:96:b7:4e:
         dd:2b:8d:01:0e:bf:6c:cc:58:2c:7c:e4:09:82:05:bd:5e:9d:
         99:c8:0a:85:57:14:b9:87:21:ca:dc:20:7e:3a:c2:2b:bb:1b:
         38:24:26:43:69:7d:74:f0:7a:74:91:75:19:96:af:af:0c:6f:
         92:31:7b:96:79:6f:d6:30:c2:0f:6f:ca:15:50:b8:23:5c:ce:
         38:a7:3d:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJoWpkstB0mLpQjZiV6CU1yy7VbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBQTcxODhFQURDQzhDM0M3OThCMDQ2MEYyMTg1NjRE
QTA0Q0NBRDAeFw0yNTA3MjkxOTU1NThaFw0yNjA3MjgyMDAwNThaMDMxMTAvBgNV
BAMTKDc3RTNGMTE5NTc0REU0MkQ5OTc4RDIxODc4Q0QxNTk2QkIzRTA1QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WVTJC76At0PDYdHGYf0JKFRH
8aRHgdS1TIKC2pKKz4qZYArEyOH2NrzZTxtsfGm9PT2A+2omog9My/Yi1Os4jf+x
xp6k/KgdHgOghAlPGEZ+q1lqcqPqhirlhizNsAVg2YvGshbDLLt10UnMACr4f5fX
nIWA0DBzc1ltoD8tu4PPYq2R+M6QbWKK0quskfiA4p+ZZagIinr0Rqji0Aj+v/Lb
N+eeQzWxwG2QhzUC4b352575rwXd7fdpJVGJOIOT9zm0OvRA5DP6i5rs8uLEQA9e
nBJ9zqnpu/4URxoAbzo+Avooz5ELt8dk/JHy1T0BFvY9abxu9Huc/DUeQB8BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUd+PxGVdN5C2ZeNIYeM0Vlrs+BaswHwYDVR0j
BBgwFoAUbKpxiOrcyMPHmLBGDyGFZNoEzK0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC82Q0FBNzE4OEVBRENDOEMzQzc5OEIwNDYwRjIxODU2NERBMDRDQ0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQUE3MTg4RUFEQ0M4QzND
Nzk4QjA0NjBGMjE4NTY0REEwNENDQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzNzM3MmUzNzMzMmUzMTM5MzIyZTMwMmYzMjMxMmQzMjM1MjAzZDNlMjAzMjM4
MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUnAMA0GCSqGSIb3DQEBCwUAA4IBAQAQdx39TiaG
hEhe4tZRlteS/61ztePhaDLcf0QessIpttFTbIOQeavV/8+3BiXrvb6Cv6A+xZv6
tML17fDqI+6Vr12pwdAFGALO8+uXk18i9dezlyCqNzC7pdXyLxuEyB1548+ZLtof
KrscAMAlv5P+/i8bQDM4b+D/00mITj31T5I4aN2AIBR8hmhELeDxFUr4SpTJspp1
i45/eaPsjEHscXEv/gtlJqog3w51yE2G4oeWt07dK40BDr9szFgsfOQJggW9Xp2Z
yAqFVxS5hyHK3CB+OsIruxs4JCZDaX108Hp0kXUZlq+vDG+SMXuWeW/WMMIPb8oV
ULgjXM44pz3D
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:04 2025 by rpki-client