Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e38342e3135322e302f32322d3235203d3e203238313938.roa
File:                     3137372e38342e3135322e302f32322d3235203d3e203238313938.roa (raw, json)
Hash identifier:          FhPC/kOxoz7xh+p+VzsXaxS/sm7leQqpcQTF4W0LycU=
Subject key identifier:   3F:FC:24:9B:C1:8F:CB:49:A1:0F:1D:C7:E4:79:89:6A:2D:E6:FB:03
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       3671BFFFDBD229722EBD1B70097336D21BA21E56
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e38342e3135322e302f32322d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:49 +0000
ROA not before:           Tue 29 Jul 2025 19:55:49 +0000
ROA not after:            Tue 28 Jul 2026 20:00:49 +0000
asID:                     28198
IP address blocks:        177.84.152.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:71:bf:ff:db:d2:29:72:2e:bd:1b:70:09:73:36:d2:1b:a2:1e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:49 2025 GMT
            Not After : Jul 28 20:00:49 2026 GMT
        Subject: CN=3FFC249BC18FCB49A10F1DC7E479896A2DE6FB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:b2:f8:b2:28:07:d6:4b:49:fd:e4:28:d9:
                    95:a1:33:57:88:c6:62:b7:1c:c2:4c:61:1c:64:98:
                    62:50:28:49:01:3c:b5:1e:51:64:c8:e7:33:b7:cd:
                    1f:20:f6:1c:fd:fe:34:c1:3a:49:74:f8:d8:9a:38:
                    28:30:33:b8:9b:40:f9:cf:35:9d:30:52:ed:13:ba:
                    91:66:0c:6e:0c:a8:9f:4c:ae:db:06:fb:14:0b:e7:
                    22:ac:5a:07:f5:10:69:d8:1e:57:5a:cc:43:18:28:
                    35:a6:15:5f:71:3a:04:b4:1b:b2:1d:6a:8a:9a:e8:
                    cf:29:fc:e6:96:30:9e:a7:c8:9e:21:90:c8:ad:b2:
                    ef:8b:9f:65:70:05:b3:f0:ce:87:53:55:56:e5:05:
                    ef:de:c3:d9:60:85:2a:a5:9a:b3:65:92:4f:71:af:
                    2c:61:f7:f0:60:eb:46:3f:e9:42:1b:f1:eb:23:95:
                    a5:a0:a9:83:00:84:4c:9d:b5:e1:46:29:51:62:c6:
                    15:64:64:a4:d4:ee:af:88:e9:9c:89:5c:d8:a2:ef:
                    9f:70:41:3a:4e:ad:24:96:39:18:39:0c:0f:cf:16:
                    49:91:ed:8e:de:1e:5c:a8:f3:a2:fa:6e:22:b4:2e:
                    c7:21:b7:57:5e:34:e0:1c:87:fb:07:42:8f:46:71:
                    32:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FC:24:9B:C1:8F:CB:49:A1:0F:1D:C7:E4:79:89:6A:2D:E6:FB:03
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e38342e3135322e302f32322d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:3e:c1:7d:c2:72:d2:72:53:f9:c1:b6:3c:45:13:25:7d:
         83:e1:c6:08:41:f0:51:42:3d:51:d6:78:a1:ef:01:52:bc:bd:
         24:9e:ac:94:34:2d:1a:15:3a:b2:da:36:bc:4b:35:bc:fa:d3:
         57:eb:52:30:56:53:1a:c2:b9:4b:70:d5:65:d5:c6:5f:48:70:
         95:cf:5c:89:94:9a:b9:62:92:2b:0d:20:98:e7:ef:c4:6c:5c:
         c4:0a:48:ea:3d:9d:70:37:7e:d2:89:34:f1:8e:9f:ac:3d:11:
         2f:1c:4c:b9:42:7d:98:15:2b:0d:0a:08:1d:b7:7a:34:b9:e1:
         46:d5:8b:07:56:6c:3b:a0:b3:e3:09:fa:d1:b6:df:5d:9a:a0:
         a5:bd:60:dd:f5:65:af:56:89:4f:c8:0d:93:12:c7:5c:64:18:
         4a:a4:7d:0a:ff:c2:b8:03:a9:49:52:7e:2b:20:d7:96:69:c5:
         ee:57:15:96:6f:a7:33:57:4b:fb:c4:5b:e0:ae:ee:4d:62:a8:
         4d:7a:b9:56:44:0d:9f:96:a0:da:db:57:fe:96:d6:80:d9:25:
         c8:c5:b2:da:c9:10:b1:d5:bf:ae:a9:82:f1:34:ea:7c:97:ca:
         7c:ae:aa:c3:c6:35:4a:4e:c5:47:2e:39:8f:03:4d:c7:e4:85:
         1a:9a:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:52 2025 by rpki-client