Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133312e3130302e38342e302f32322d3235203d3e203238313938.roa
File:                     3133312e3130302e38342e302f32322d3235203d3e203238313938.roa (raw, json)
Hash identifier:          K8mx5kqgt20NrLnqTFcF5Lt0YngsC0B+gwfc2YIPpNY=
Subject key identifier:   57:E0:AC:F9:DE:3C:C3:17:A0:50:82:72:12:A1:6B:13:CF:A7:D2:5F
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       38972F1427FF1F486E4FE17ABF80D83CA741D706
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133312e3130302e38342e302f32322d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:38:03 +0000
ROA not before:           Tue 30 Jun 2026 20:33:03 +0000
ROA not after:            Tue 29 Jun 2027 20:38:03 +0000
asID:                     28198
IP address blocks:        131.100.84.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:97:2f:14:27:ff:1f:48:6e:4f:e1:7a:bf:80:d8:3c:a7:41:d7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:33:03 2026 GMT
            Not After : Jun 29 20:38:03 2027 GMT
        Subject: CN=57E0ACF9DE3CC317A050827212A16B13CFA7D25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:13:3b:1a:b8:97:6e:f3:3d:98:a3:ff:a8:
                    19:07:02:9a:b5:88:5f:7b:b4:9d:9a:8a:f4:da:eb:
                    69:bf:b1:b7:c5:d5:4e:57:bb:9f:a7:a4:67:a5:7a:
                    b6:e6:3f:dd:a5:f3:97:9b:b5:7a:48:f6:48:ec:37:
                    80:24:93:0e:6a:a0:de:f8:c1:47:8c:61:84:dd:57:
                    09:4c:54:d6:c7:ec:0e:11:63:52:93:1e:ba:8a:c7:
                    2d:97:a0:e8:87:7b:4d:62:5d:81:67:a1:35:ee:71:
                    6a:b3:ec:8a:c7:d8:04:e7:f9:de:3e:74:8f:de:d2:
                    a0:0b:80:4d:ad:03:a1:ee:a6:62:c1:32:4d:d3:a5:
                    14:4b:8b:cb:fa:4f:18:51:0b:74:99:7c:d9:fc:3e:
                    8e:2e:99:0d:45:70:8c:f7:4a:d7:a8:d0:4e:e1:8f:
                    9d:d8:f2:41:d0:c8:89:6f:68:48:b6:dc:d9:b6:22:
                    54:0e:9f:80:85:10:58:d2:2f:0f:fb:74:c6:f7:64:
                    27:5c:e3:44:ca:81:ea:3c:da:d4:ad:da:8a:eb:cb:
                    b1:b7:45:ce:db:1b:c4:e1:c4:c9:70:f4:65:7e:70:
                    aa:b3:01:bd:6c:eb:f8:c1:9f:74:d1:38:ef:6f:47:
                    1d:2d:b1:e3:c2:ab:d2:76:90:9f:f1:85:09:51:bb:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:AC:F9:DE:3C:C3:17:A0:50:82:72:12:A1:6B:13:CF:A7:D2:5F
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133312e3130302e38342e302f32322d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:a1:a5:c2:38:43:0a:bb:21:01:af:25:63:ef:24:40:8a:31:
         52:97:ff:74:c1:34:35:e8:e5:82:6f:bc:c2:6c:3b:2d:03:d5:
         0e:b4:62:d2:dd:7c:4b:b0:e4:7b:d4:a2:92:c6:61:c0:52:03:
         9b:a7:10:60:d3:7c:4b:90:5c:e7:4b:24:56:eb:0c:89:bc:3d:
         c2:30:c2:a0:54:d7:6f:f6:fe:16:f9:c8:3c:41:ce:22:dc:4a:
         13:17:66:19:40:61:8f:ef:27:c2:d9:73:5e:58:19:01:0e:66:
         8a:52:d2:68:38:f9:55:74:70:61:d9:2c:a2:48:c2:2f:6a:81:
         99:e2:71:55:22:1a:32:3d:0f:de:8b:7c:09:d1:12:e8:a7:2e:
         96:72:66:e5:ab:fd:f8:5c:51:83:22:ca:14:38:60:2b:44:48:
         8f:b7:d3:75:47:41:8f:2a:39:ad:36:64:fa:10:be:64:88:6d:
         46:d6:b3:1f:ed:6d:eb:e0:3b:4b:45:b2:24:27:92:72:31:cf:
         c2:b0:60:44:aa:17:f2:10:9a:bc:12:8f:f3:d8:b1:2e:01:35:
         a2:f0:d6:3e:f7:7f:f0:52:c6:8a:af:a8:ec:6e:aa:12:aa:4c:
         bf:eb:b2:36:de:21:27:88:4b:30:bd:a1:37:f4:1c:53:27:d8:
         6d:bc:09:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:05:14 2026 by rpki-client