Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e39302e3139322e302f32302d3235203d3e203238313938.roa
File:                     3138392e39302e3139322e302f32302d3235203d3e203238313938.roa (raw, json)
Hash identifier:          z6n4XiBY+PBFUMsIePK9IXgfgAeYVbfw7ILNA9mz/0s=
Subject key identifier:   B1:47:10:8C:72:19:9D:A0:91:E0:9D:E8:56:4F:D0:0C:C6:5D:A2:21
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       61C7E80761911963962F6CC24A1D173C8AFEBE6E
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e39302e3139322e302f32302d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:50 +0000
ROA not before:           Tue 29 Jul 2025 19:55:50 +0000
ROA not after:            Tue 28 Jul 2026 20:00:50 +0000
asID:                     28198
IP address blocks:        189.90.192.0/20 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c7:e8:07:61:91:19:63:96:2f:6c:c2:4a:1d:17:3c:8a:fe:be:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:50 2025 GMT
            Not After : Jul 28 20:00:50 2026 GMT
        Subject: CN=B147108C72199DA091E09DE8564FD00CC65DA221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:71:96:f2:b6:ff:20:2d:6b:5d:c7:13:16:
                    41:d8:88:56:6c:7e:63:72:b2:70:7e:93:4e:63:d5:
                    7a:14:55:04:22:a0:6b:43:05:45:5b:94:42:98:ec:
                    18:92:05:6f:9b:6c:0a:41:d2:b1:b7:5c:53:47:16:
                    a8:ec:8d:a4:ba:b2:95:15:15:91:c6:f7:be:5e:59:
                    dc:fb:f0:8b:bf:95:2f:17:e3:5b:6e:56:b1:f8:b3:
                    35:a7:5d:e6:fe:e0:bb:1c:17:71:0c:8b:22:71:87:
                    2d:0b:81:00:48:78:cb:26:ee:cc:31:2c:e5:21:36:
                    86:25:06:b8:db:25:84:0e:15:20:ea:d0:79:ec:6f:
                    f5:ec:3a:87:61:93:dc:7e:93:e0:b6:ad:1d:bd:08:
                    9d:4e:31:ac:f4:69:e3:bb:6f:2c:ae:60:ca:73:7e:
                    32:a2:b2:d0:38:6a:47:29:41:10:74:00:6c:0a:62:
                    d7:ec:44:2b:82:37:fa:f8:6a:e2:c9:77:74:f5:3a:
                    af:dc:11:21:c0:39:ba:8b:c2:45:27:aa:ae:2c:38:
                    a6:7f:7d:04:6f:d9:5c:9a:56:7b:38:4c:2e:a4:e8:
                    b8:78:a0:07:4a:70:f6:79:7c:39:8a:71:b2:1b:69:
                    c3:42:ec:45:df:aa:d3:a2:a3:c1:84:6a:df:33:8b:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:10:8C:72:19:9D:A0:91:E0:9D:E8:56:4F:D0:0C:C6:5D:A2:21
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e39302e3139322e302f32302d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:f7:fd:13:59:41:92:9d:5a:cc:45:d7:e7:57:73:53:34:01:
         ec:b4:72:43:85:be:be:08:18:2a:20:5d:4b:5b:f6:fa:b5:70:
         aa:83:1c:39:7e:0b:7a:75:55:e1:65:da:e2:47:5e:7c:8b:88:
         fd:b7:50:65:63:24:36:d3:c9:85:8e:3d:48:36:5f:1d:50:a5:
         6c:35:c8:98:1e:46:99:24:45:b6:8d:8f:9f:07:2c:f7:b2:24:
         a1:38:8d:ee:08:28:02:9e:b8:dd:ac:a1:ce:10:63:61:5b:79:
         ad:df:b0:65:e4:14:5f:ed:ce:33:b3:01:c2:32:48:db:fe:f5:
         46:e6:02:ec:0f:26:93:b1:a0:51:44:be:73:86:a5:db:ef:5b:
         60:32:3e:1b:85:c2:5f:72:3c:e0:dc:d8:41:3b:39:95:e5:63:
         cf:20:51:be:00:45:55:b0:1d:55:72:8b:03:96:53:0f:9d:e8:
         dd:ec:0a:03:27:eb:09:11:23:9e:68:67:41:f9:f3:52:bc:07:
         ac:1d:9e:35:fd:39:e4:64:aa:ae:eb:52:f0:7b:54:88:94:c7:
         59:a6:bf:d8:a6:10:28:6c:a0:23:8e:ce:01:d0:a2:b2:69:29:
         29:54:9d:43:58:98:5a:8a:a4:23:e1:b1:d5:b4:ac:d7:1b:f3:
         98:d9:f2:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYcfoB2GRGWOWL2zCSh0XPIr+vm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBQTcxODhFQURDQzhDM0M3OThCMDQ2MEYyMTg1NjRE
QTA0Q0NBRDAeFw0yNTA3MjkxOTU1NTBaFw0yNjA3MjgyMDAwNTBaMDMxMTAvBgNV
BAMTKEIxNDcxMDhDNzIxOTlEQTA5MUUwOURFODU2NEZEMDBDQzY1REEyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVm3GW8rb/IC1rXccTFkHYiFZs
fmNysnB+k05j1XoUVQQioGtDBUVblEKY7BiSBW+bbApB0rG3XFNHFqjsjaS6spUV
FZHG975eWdz78Iu/lS8X41tuVrH4szWnXeb+4LscF3EMiyJxhy0LgQBIeMsm7swx
LOUhNoYlBrjbJYQOFSDq0Hnsb/XsOodhk9x+k+C2rR29CJ1OMaz0aeO7byyuYMpz
fjKistA4akcpQRB0AGwKYtfsRCuCN/r4auLJd3T1Oq/cESHAObqLwkUnqq4sOKZ/
fQRv2VyaVns4TC6k6Lh4oAdKcPZ5fDmKcbIbacNC7EXfqtOio8GEat8zi1R/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsUcQjHIZnaCR4J3oVk/QDMZdoiEwHwYDVR0j
BBgwFoAUbKpxiOrcyMPHmLBGDyGFZNoEzK0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC82Q0FBNzE4OEVBRENDOEMzQzc5OEIwNDYwRjIxODU2NERBMDRDQ0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQUE3MTg4RUFEQ0M4QzND
Nzk4QjA0NjBGMjE4NTY0REEwNENDQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzODM5MmUzOTMwMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM1MjAzZDNlMjAzMjM4
MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvVrAMA0GCSqGSIb3DQEBCwUAA4IBAQBM9/0TWUGS
nVrMRdfnV3NTNAHstHJDhb6+CBgqIF1LW/b6tXCqgxw5fgt6dVXhZdriR158i4j9
t1BlYyQ208mFjj1INl8dUKVsNciYHkaZJEW2jY+fByz3siShOI3uCCgCnrjdrKHO
EGNhW3mt37Bl5BRf7c4zswHCMkjb/vVG5gLsDyaTsaBRRL5zhqXb71tgMj4bhcJf
cjzg3NhBOzmV5WPPIFG+AEVVsB1VcosDllMPnejd7AoDJ+sJESOeaGdB+fNSvAes
HZ41/TnkZKqu61Lwe1SIlMdZpr/YphAobKAjjs4B0KKyaSkpVJ1DWJhaiqQj4bHV
tKzXG/OY2fKe
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:44 2025 by rpki-client