Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32302d3235203d3e203238313938.roa
File:                     3138372e38342e3234302e302f32302d3235203d3e203238313938.roa (raw, json)
Hash identifier:          Jc3NkBNHcehT2YTx/CNZRj0cYKEL0wOc4tFH6cCwEbA=
Subject key identifier:   0B:5B:11:9C:84:B2:03:47:55:4E:EB:E6:20:E2:22:1F:93:62:C3:A5
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       42ADC75967CF298CEBD9E3CA860B0DF7758BD6A3
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32302d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:01:09 +0000
ROA not before:           Tue 29 Jul 2025 19:56:09 +0000
ROA not after:            Tue 28 Jul 2026 20:01:09 +0000
asID:                     28198
IP address blocks:        187.84.240.0/20 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ad:c7:59:67:cf:29:8c:eb:d9:e3:ca:86:0b:0d:f7:75:8b:d6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:56:09 2025 GMT
            Not After : Jul 28 20:01:09 2026 GMT
        Subject: CN=0B5B119C84B20347554EEBE620E2221F9362C3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:08:32:2c:90:cf:0b:68:33:ba:51:b6:b1:
                    1d:4d:26:fc:22:9b:9d:16:cf:ee:4b:99:fd:ba:10:
                    06:2e:b6:6d:11:02:cd:19:c3:ab:f4:e8:ea:5f:3a:
                    eb:54:70:18:88:ee:99:d9:a1:cf:4a:77:eb:34:50:
                    b1:03:b0:29:c8:be:05:d4:4b:8d:2e:b9:bc:70:e0:
                    11:10:1a:57:35:e9:34:84:39:64:d9:6a:94:43:d8:
                    1a:a0:0a:28:b8:bf:71:3b:19:29:bb:5f:f0:a8:04:
                    e2:fe:6b:85:0f:d0:31:ee:68:98:7a:7e:75:d3:18:
                    f5:49:c2:cd:3a:7e:62:03:a5:0a:ca:f0:bd:e4:79:
                    81:6e:f5:f8:01:22:31:3d:d1:0c:eb:1c:14:f2:e1:
                    2d:a8:da:0a:25:51:33:19:40:ac:fa:6e:f5:e5:42:
                    07:48:6b:cf:61:49:45:30:9c:e8:63:46:96:75:c8:
                    4b:ce:2a:a2:e1:54:95:75:48:2e:15:13:98:22:94:
                    a5:6b:9a:4a:19:16:4d:4a:22:10:a0:3f:35:c8:b3:
                    2f:60:81:a4:6e:7e:52:94:b9:8c:a4:69:13:ff:55:
                    d2:10:c6:eb:4d:5a:7a:5a:7a:cd:97:bb:2e:7a:b2:
                    9b:cc:7b:be:be:90:ed:3f:7d:d2:bd:10:f6:5c:c9:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5B:11:9C:84:B2:03:47:55:4E:EB:E6:20:E2:22:1F:93:62:C3:A5
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32302d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:a6:cc:83:21:3b:22:ca:81:bf:71:ee:fd:08:69:88:4f:
         8e:39:cc:ce:e8:b0:08:5a:4d:52:67:9d:b5:fa:91:06:bf:5d:
         18:e0:e6:a9:3c:9e:98:ab:f6:ad:6d:94:a7:80:86:bb:8f:24:
         41:cc:ce:2d:08:0a:63:34:1b:e4:7d:f8:40:bd:68:cc:8f:98:
         d6:1e:53:b1:30:35:25:f5:b5:ac:cf:9e:2c:f4:73:de:ff:08:
         93:f6:90:b1:6f:aa:04:2d:1f:80:41:9d:fa:b4:f6:37:8c:06:
         ba:d1:11:18:4a:78:19:a9:c4:53:85:0d:d7:be:03:b9:37:ae:
         61:3b:c0:27:0d:8d:8d:7c:4a:fc:34:45:0b:4e:fa:1f:6e:90:
         32:62:28:bf:5f:88:b2:36:07:ac:c4:6b:1e:e1:6b:f6:b3:f1:
         6a:fa:83:83:ef:5a:a5:7b:a4:f1:5b:d8:ca:2e:ee:8e:dc:49:
         6e:cf:63:cd:ac:94:d3:a2:97:46:6b:1c:b0:18:bb:3a:6f:46:
         94:c2:ef:c5:ee:47:2f:6e:cc:64:bb:6b:77:cb:6d:c6:15:12:
         f0:b7:f0:fc:e1:a0:cc:6f:c0:70:89:76:bf:62:cc:12:35:8b:
         4f:45:cd:d2:74:90:de:ed:db:7a:99:13:b2:ea:80:4a:dc:36:
         eb:21:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:53 2025 by rpki-client