Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3139322e3134302e3130382e302f32322d3235203d3e203238313938.roa
File:                     3139322e3134302e3130382e302f32322d3235203d3e203238313938.roa (raw, json)
Hash identifier:          RxPPvTvNcpgKjOtZQCUwZ+rWXXeKK9Ao25N/9RTrdFU=
Subject key identifier:   29:6A:FD:8E:D1:9D:FD:1B:D7:C0:BB:89:E2:48:8A:4D:21:3A:B7:CD
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       37281234BFE41199D1AF3611D6EF2EF2111BD030
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3139322e3134302e3130382e302f32322d3235203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:01:01 +0000
ROA not before:           Tue 29 Jul 2025 19:56:01 +0000
ROA not after:            Tue 28 Jul 2026 20:01:01 +0000
asID:                     28198
IP address blocks:        192.140.108.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:28:12:34:bf:e4:11:99:d1:af:36:11:d6:ef:2e:f2:11:1b:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:56:01 2025 GMT
            Not After : Jul 28 20:01:01 2026 GMT
        Subject: CN=296AFD8ED19DFD1BD7C0BB89E2488A4D213AB7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:bd:6d:9a:85:13:40:a9:29:d1:af:e3:80:
                    b4:7d:ce:25:77:cb:a9:fa:87:99:03:0c:ce:b7:78:
                    7d:22:ad:db:85:95:88:3e:f7:44:a7:a3:13:00:c0:
                    f1:a4:bd:91:27:b9:af:dc:63:0c:af:5e:28:36:71:
                    e9:bd:84:06:5f:5f:94:cf:5e:79:8b:ba:a9:f3:69:
                    21:b1:12:f9:28:54:c0:21:9e:74:37:dd:2c:89:96:
                    33:95:16:65:2f:54:54:e1:97:46:d5:f7:24:30:80:
                    84:7d:db:36:c5:12:44:0e:8e:a8:fa:49:aa:28:59:
                    ac:e2:21:05:cf:50:d3:5e:47:2f:01:11:e3:e1:21:
                    b8:f7:b6:80:2b:6b:c0:18:7c:f7:31:fb:cd:ea:78:
                    60:6f:01:8d:ba:7b:cf:54:2f:1f:50:0f:fd:26:29:
                    89:4a:83:84:e7:a9:d9:db:1e:75:26:9c:88:d2:38:
                    59:8f:bf:2d:83:f2:ac:69:12:57:eb:2f:a1:2c:89:
                    00:5d:c8:63:19:46:fa:59:5b:bd:00:aa:58:5c:b0:
                    1d:40:9a:d8:2f:9b:e2:90:d8:05:26:dd:85:d1:15:
                    71:62:02:38:dd:c8:70:f3:97:c1:8e:97:32:04:cd:
                    c9:29:60:fb:87:81:d1:69:51:68:ad:35:64:17:c3:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6A:FD:8E:D1:9D:FD:1B:D7:C0:BB:89:E2:48:8A:4D:21:3A:B7:CD
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3139322e3134302e3130382e302f32322d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:c0:6b:30:a5:0e:34:ae:7f:54:ec:97:45:d6:c4:9b:d3:
         84:f1:4f:0a:fb:c4:fb:c7:3e:58:d4:6d:2a:51:a4:b1:cf:c2:
         ff:e2:32:78:44:d9:67:e6:70:30:33:f3:b9:4b:ea:45:11:1f:
         9f:34:ab:6c:3a:85:f7:77:c0:05:2a:36:91:e4:48:ca:6d:61:
         87:84:70:15:45:5e:b4:96:bd:e4:5e:5a:48:d8:7e:1d:7d:69:
         5c:a4:84:1c:e6:6c:80:a9:61:4b:dc:73:c5:24:47:ed:49:4c:
         95:9a:6b:cd:f0:51:e3:9b:70:68:f4:f5:1d:52:2a:3a:d8:0f:
         b6:06:b0:d9:3a:b7:42:3b:98:0b:2e:76:b2:17:51:d7:dc:1f:
         3f:40:7c:ce:7e:22:2a:47:98:31:cb:47:2f:6b:5c:68:37:b3:
         b8:0e:42:ee:9c:a7:54:f5:f3:23:d3:7e:ed:75:79:01:09:98:
         37:96:78:34:cd:ed:16:a1:ba:85:e5:85:d9:2a:7e:58:09:47:
         8d:20:7a:56:d2:7f:85:4f:a7:b5:f6:42:69:c0:c4:72:9f:ad:
         d1:bd:de:c3:e6:b9:d8:97:f2:6a:1a:0b:ca:d9:b1:5a:86:45:
         6f:58:ec:19:62:00:b9:dc:60:1f:25:b8:89:11:ca:65:e6:14:
         7a:a0:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:28:40 2025 by rpki-client