Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3132352e39362e302f32312d3235203d3e203238313938.roa
File:                     3137392e3132352e39362e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          vCI7yiOUSzekroMV7EWkYeY7zDPrMADzJR0B63NB4Kk=
Subject key identifier:   DD:60:C6:1D:9C:9A:AC:97:D6:D3:5E:AB:A7:6A:17:98:F1:27:50:4A
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       19418EE78663E39CDA860F737423F35F4176AFA9
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3132352e39362e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:01:02 +0000
ROA not before:           Tue 29 Jul 2025 19:56:02 +0000
ROA not after:            Tue 28 Jul 2026 20:01:02 +0000
asID:                     28198
IP address blocks:        179.125.96.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:41:8e:e7:86:63:e3:9c:da:86:0f:73:74:23:f3:5f:41:76:af:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:56:02 2025 GMT
            Not After : Jul 28 20:01:02 2026 GMT
        Subject: CN=DD60C61D9C9AAC97D6D35EABA76A1798F127504A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:7d:82:ce:60:d6:75:9d:e9:5d:9a:f2:1a:
                    05:01:18:f6:2e:2d:87:0f:ec:19:9d:aa:75:7a:fb:
                    e5:f5:5d:17:36:1c:38:59:e7:f6:cb:9b:5b:1c:4e:
                    39:1b:56:f7:d0:42:28:10:7a:35:20:8c:6e:89:15:
                    1c:85:e7:7b:42:d1:68:0f:cf:3f:1b:6d:d2:1d:fa:
                    ea:88:fc:da:1f:6f:f9:6a:47:72:7e:85:8c:7c:d6:
                    9e:5f:c2:82:d8:e6:70:00:40:e7:53:99:bd:a8:9c:
                    29:a2:05:b7:5d:76:f8:c0:8f:43:49:e0:6f:ba:5f:
                    7d:50:2f:b5:14:86:1f:2d:5f:66:69:6d:06:0c:5e:
                    0b:e2:01:15:51:e0:d2:4c:d2:d3:c6:19:7d:c8:43:
                    08:b3:e6:41:da:98:40:9b:70:33:d2:df:b9:b3:df:
                    b4:d7:0c:18:d7:80:9c:03:e2:ac:78:2d:61:5f:dc:
                    0d:4c:e3:2d:42:58:c3:18:93:9a:b3:de:74:82:67:
                    3c:a3:f7:c1:67:3c:b4:b2:24:55:71:66:96:76:b7:
                    33:b1:74:92:d5:a8:d4:b8:65:ee:ca:41:43:2e:97:
                    7e:1e:39:61:71:a3:3b:04:b9:41:ca:98:a4:3a:1a:
                    03:3b:27:c8:d9:74:2e:0e:74:a9:1f:cd:58:9f:b4:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:60:C6:1D:9C:9A:AC:97:D6:D3:5E:AB:A7:6A:17:98:F1:27:50:4A
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3132352e39362e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:76:ad:36:72:40:9b:77:7f:9e:f3:5b:2c:83:3e:53:fc:1b:
         a3:9b:9b:ea:96:d6:ea:a9:a5:5e:58:10:af:35:c7:d6:36:15:
         78:60:25:a7:16:a8:c3:ad:12:97:ae:e2:99:57:b9:cc:28:2d:
         13:e7:b6:96:85:91:01:09:4c:a6:4b:95:31:ae:04:97:00:25:
         c3:41:9d:8a:a1:50:42:af:bc:45:98:03:9e:d0:ef:e4:1a:cb:
         50:41:68:2a:4d:98:15:f5:67:50:40:77:ca:3b:41:f1:93:76:
         46:f5:25:da:32:6f:fb:57:7a:f3:25:57:fa:03:97:9a:4e:1a:
         16:72:39:21:77:81:a1:a6:47:f9:c1:16:49:f5:9b:41:65:98:
         22:d4:2d:35:c4:74:20:ed:df:9e:b0:96:3f:76:bc:82:a5:bf:
         9e:e0:6a:1c:65:34:f5:86:c3:60:55:0d:4c:4b:e3:bf:0e:3d:
         1f:8a:92:b3:2a:5c:c9:4d:95:60:70:f2:4b:a6:f4:b6:35:58:
         d0:0b:65:15:7c:ec:57:84:d8:ad:c3:dd:0b:1f:03:c0:66:79:
         41:48:78:1c:b2:7e:a4:8c:14:87:11:2f:a2:2a:38:5e:db:6e:
         40:0b:b9:65:74:53:1d:eb:f9:e5:22:92:24:84:36:77:2e:66:
         09:0f:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:36 2025 by rpki-client