Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e35312e31362e302f32302d3235203d3e203238313938.roa
File:                     3138392e35312e31362e302f32302d3235203d3e203238313938.roa (raw, json)
Hash identifier:          xX+Nc6bnJbAZCLN5nhw99mCoj2XnQORvx942ImDW5j0=
Subject key identifier:   EB:29:02:A0:51:F9:1A:70:EA:D7:EF:E2:D8:C6:65:2B:79:D5:94:2B
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       5EF38117AA9248EABFECC9977B132C8381F4B64B
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e35312e31362e302f32302d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:01:11 +0000
ROA not before:           Tue 29 Jul 2025 19:56:11 +0000
ROA not after:            Tue 28 Jul 2026 20:01:11 +0000
asID:                     28198
IP address blocks:        189.51.16.0/20 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f3:81:17:aa:92:48:ea:bf:ec:c9:97:7b:13:2c:83:81:f4:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:56:11 2025 GMT
            Not After : Jul 28 20:01:11 2026 GMT
        Subject: CN=EB2902A051F91A70EAD7EFE2D8C6652B79D5942B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:af:87:e9:a4:ee:20:4e:65:d5:d9:08:7d:43:
                    b6:0b:c6:44:a1:79:ed:f5:d2:3e:17:69:63:a3:3d:
                    0f:82:21:88:bd:87:1e:49:ca:7b:22:61:de:8e:bd:
                    90:d0:b8:c0:14:40:4d:35:19:dc:50:e1:2b:be:7a:
                    35:5d:cc:41:d7:bb:68:77:dd:50:70:5c:4b:4a:d4:
                    c4:3e:df:36:d2:09:31:ab:d4:7e:a4:a3:fc:d5:27:
                    0a:d4:49:bd:4c:d6:cb:29:0a:35:2c:79:50:f1:da:
                    c3:dc:36:15:73:d4:0a:8f:55:8f:ed:81:96:cb:94:
                    ea:5b:43:50:c8:a3:8a:e5:ed:0b:1f:2e:4f:48:c0:
                    76:8e:fb:8a:f6:b5:ab:ab:35:87:4f:ac:b9:2b:35:
                    07:a7:a0:b6:94:d0:75:aa:50:15:fb:d7:46:22:c7:
                    3a:33:2f:3f:da:80:30:23:37:d9:35:2b:14:de:b3:
                    c1:e0:a6:54:cd:09:60:8c:67:d0:36:98:fa:fa:a5:
                    01:1b:8d:9a:b6:55:74:74:83:fd:4d:99:c7:16:1e:
                    fe:1e:c2:04:6c:4e:ed:08:9d:60:2d:eb:c7:09:74:
                    52:8b:de:fd:ed:65:8d:2e:e9:79:09:10:71:84:29:
                    a6:ca:d4:59:1c:10:4d:c4:bc:19:8c:f4:28:3f:d8:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:02:A0:51:F9:1A:70:EA:D7:EF:E2:D8:C6:65:2B:79:D5:94:2B
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e35312e31362e302f32302d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:c2:d6:01:4c:82:0e:74:bf:89:38:6f:c3:13:fc:7f:16:
         20:8b:0d:44:32:6f:dd:7c:d5:44:f7:bc:ee:31:66:9a:7e:9e:
         d8:7e:e7:e7:71:45:03:c9:bf:f5:73:33:23:cb:2d:01:68:f8:
         e8:17:ec:aa:11:73:8e:f0:f9:93:ff:c7:31:55:a3:71:35:70:
         eb:f1:db:04:e7:61:1a:10:34:59:63:2e:a6:3b:3d:cf:80:d8:
         be:1b:fe:de:dc:e1:24:63:fd:59:e2:4a:36:a6:3d:c3:2a:aa:
         bb:32:5c:f4:63:fd:8b:ee:62:85:dd:41:41:8d:34:82:f4:df:
         35:e1:81:1c:54:6a:13:cc:2f:ac:54:1d:00:ed:91:d2:b5:57:
         2c:1b:ef:21:cb:eb:16:ee:bf:e9:b0:0c:08:61:59:09:e8:a0:
         49:f3:34:8d:b3:17:27:c2:fd:a0:17:04:0a:1d:55:a4:95:89:
         2c:4c:61:4c:45:9d:4d:1b:81:19:ac:52:29:7b:a8:cc:c7:58:
         70:df:5b:38:13:e6:1e:36:17:0d:bb:31:ed:9d:f6:42:1d:c1:
         8b:6c:a8:b9:c3:eb:82:6d:04:c5:a0:7b:d5:2a:b9:41:6f:ff:
         23:fa:45:71:0f:67:35:65:15:2b:4d:d6:87:1b:75:1e:74:ab:
         e4:20:c9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:54:03 2025 by rpki-client