Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3130362e3136302e302f32312d3235203d3e203238313938.roa
File:                     3137392e3130362e3136302e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          Be1eaizVY2VeuNqLM/Ku7b2C47Jc7obc2dMYIcyYpeM=
Subject key identifier:   BC:B8:EF:75:00:1C:7C:30:A7:BC:DF:CB:E4:27:B9:C1:52:24:4B:E6
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       4559B64C50F5A82E2520AF203B9AA3783E351163
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3130362e3136302e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:01:08 +0000
ROA not before:           Tue 29 Jul 2025 19:56:08 +0000
ROA not after:            Tue 28 Jul 2026 20:01:08 +0000
asID:                     28198
IP address blocks:        179.106.160.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:59:b6:4c:50:f5:a8:2e:25:20:af:20:3b:9a:a3:78:3e:35:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:56:08 2025 GMT
            Not After : Jul 28 20:01:08 2026 GMT
        Subject: CN=BCB8EF75001C7C30A7BCDFCBE427B9C152244BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:8b:8c:9c:62:41:81:f6:be:2e:45:8d:bf:
                    6e:b6:04:de:ba:7a:17:98:03:48:8e:95:00:0f:62:
                    50:f3:ca:de:53:4a:14:d5:85:81:ed:5b:0b:4d:3a:
                    bd:02:dd:2e:4a:3e:c7:bf:b5:81:10:fe:13:b1:f5:
                    75:ed:ae:53:60:53:05:ee:d4:87:50:bc:4b:5a:34:
                    f9:4d:e9:8e:48:a8:4d:5a:f4:9d:bd:9d:8e:5d:68:
                    84:29:26:a4:96:6b:ac:37:a2:cd:d3:54:0a:82:48:
                    25:08:a0:52:e9:03:77:1a:af:c4:b7:2c:af:83:66:
                    a6:a1:b9:98:2b:b8:c7:77:62:bf:48:e0:c9:23:bd:
                    9d:89:5d:f2:7b:da:24:67:29:0e:51:e5:a1:13:ef:
                    31:4a:fe:59:4d:de:10:77:51:99:f2:7c:f0:4d:f3:
                    cb:ef:57:fe:db:0f:15:9c:bd:31:ab:69:99:46:50:
                    ec:dd:4e:48:78:3e:24:da:f2:d0:7c:12:69:4c:b0:
                    99:67:16:10:d1:66:41:ac:62:03:d0:37:33:6d:93:
                    63:11:5b:b9:b3:95:ee:79:eb:92:4e:22:81:fe:c6:
                    aa:2c:b9:ea:38:be:b9:54:c4:e6:48:7c:a0:73:0c:
                    a6:df:cc:77:cf:4d:98:e0:f3:82:9f:a4:4c:53:83:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:EF:75:00:1C:7C:30:A7:BC:DF:CB:E4:27:B9:C1:52:24:4B:E6
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3130362e3136302e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:25:26:72:7f:64:71:23:48:13:6d:51:93:5d:6e:74:a8:
         c9:4b:f6:33:0a:12:78:7e:5e:91:1c:4b:14:ee:ab:ff:91:d7:
         b0:67:12:a8:14:9a:ca:54:47:14:7a:bd:59:e5:85:bd:04:32:
         e5:87:e1:2a:15:b5:7c:0d:15:0a:3f:31:59:7b:8f:dc:47:1b:
         79:48:1f:e9:3a:d3:75:31:d8:dc:f6:26:5d:aa:eb:36:de:9f:
         34:bd:d6:d0:05:1a:82:0e:7f:4b:70:5c:32:22:70:55:65:7c:
         f8:41:0f:f1:ac:15:31:f5:bc:bc:c5:94:b8:fc:2b:6b:e4:73:
         bd:91:2e:d9:25:db:dd:52:1d:63:7e:04:73:56:6d:1f:e6:89:
         9b:e1:e5:6e:0c:c4:cf:c2:de:29:c8:26:38:3c:cb:63:1d:e0:
         12:19:bc:77:23:74:72:8c:ba:7e:67:a0:4e:96:a5:fe:6a:9f:
         a3:6a:0e:f2:22:f7:e5:15:aa:1a:4b:c9:64:2f:94:fb:f2:86:
         42:9a:36:be:e9:56:ae:47:b4:b4:9e:18:a9:4a:f1:88:da:b9:
         66:b8:3f:2a:72:98:7c:7e:90:0c:11:ad:64:0f:81:13:d3:c0:
         8e:c6:52:6c:43:bf:14:00:aa:76:93:c2:fc:42:3d:67:e9:d9:
         ab:27:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:20:37 2025 by rpki-client