Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3134332e3133372e3234302e302f32322d3235203d3e203238313938.roa
File:                     3134332e3133372e3234302e302f32322d3235203d3e203238313938.roa (raw, json)
Hash identifier:          XUl22TQBdASSde39E66+roFtAQpCjwctlPkNq20wITY=
Subject key identifier:   E3:4C:45:FF:FB:00:DD:B4:CA:A3:FF:4C:10:44:FD:1A:4C:DC:EC:45
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       1603449CF515927D1D5AA289C1343A437A5D1DC0
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3134332e3133372e3234302e302f32322d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:52 +0000
ROA not before:           Tue 30 Jun 2026 20:32:52 +0000
ROA not after:            Tue 29 Jun 2027 20:37:52 +0000
asID:                     28198
IP address blocks:        143.137.240.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:03:44:9c:f5:15:92:7d:1d:5a:a2:89:c1:34:3a:43:7a:5d:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:52 2026 GMT
            Not After : Jun 29 20:37:52 2027 GMT
        Subject: CN=E34C45FFFB00DDB4CAA3FF4C1044FD1A4CDCEC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:b5:ed:7a:45:fe:93:60:ec:f7:6f:d6:0d:
                    58:8f:ef:b7:03:d0:fa:91:e4:81:fc:d8:2d:ef:4e:
                    48:06:57:4a:67:cc:78:26:85:32:9e:85:6c:dc:2f:
                    de:98:05:6a:3e:d2:57:ce:3d:28:47:6b:89:08:ae:
                    af:44:17:22:39:4f:b1:95:45:3e:76:b5:4b:53:7f:
                    19:31:b0:1a:b4:0f:54:4e:7c:fd:55:92:6e:f6:00:
                    ac:87:51:af:5c:8a:f2:22:a0:8d:08:c1:a9:e0:f4:
                    23:9c:fb:be:f9:a3:e6:76:e8:3c:8f:06:a8:f9:72:
                    57:cc:7e:d7:7d:bb:7d:72:4c:95:31:72:d8:13:d0:
                    84:d2:60:39:4d:6f:06:0b:3d:6e:d6:21:64:c8:63:
                    d2:5a:d7:91:b0:e6:f1:43:23:b4:36:66:d5:b4:ac:
                    3f:a5:0a:8e:43:88:04:a7:be:7e:ab:ef:b6:4e:39:
                    24:8f:a3:6b:1c:09:64:ef:62:d8:a9:4f:6a:ca:58:
                    83:d4:f1:6d:d2:a3:72:d0:2b:58:dd:4b:87:b7:2a:
                    7c:00:0b:5a:5b:08:f1:28:8f:e3:96:29:76:61:4b:
                    33:ed:9a:cd:36:3c:9c:e2:62:10:67:43:19:f8:f3:
                    45:81:0b:30:85:1e:e6:e5:2f:2d:d1:f5:cd:70:0c:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4C:45:FF:FB:00:DD:B4:CA:A3:FF:4C:10:44:FD:1A:4C:DC:EC:45
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3134332e3133372e3234302e302f32322d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:d3:6c:71:05:93:e3:f3:91:57:e3:da:60:32:20:3c:8a:
         6c:ed:09:f5:b7:82:8e:71:5b:7a:8d:28:5b:f8:a0:2a:75:e4:
         10:ac:30:04:b6:18:cb:15:be:6e:57:ba:ce:b8:6d:ef:7c:d9:
         0c:8d:95:3c:86:01:76:e8:46:5d:04:1d:40:6b:4d:8e:0b:a0:
         63:ff:63:bf:6d:e0:b3:51:99:29:14:66:e6:c7:6f:eb:7a:25:
         a1:a7:48:a5:17:57:97:71:35:49:f2:10:4c:53:8b:82:25:c1:
         7a:ed:04:36:df:6e:9b:17:2f:7f:77:c4:e4:24:64:6c:33:6b:
         49:b7:76:5c:fa:6d:93:3c:d7:02:81:0e:c7:d1:1e:75:8c:a8:
         08:fa:45:5b:1f:8b:93:0d:b0:cd:74:5e:70:ef:7a:d5:b6:0d:
         7b:24:1f:ec:b0:4f:e7:6b:af:a0:03:d1:72:03:7e:b1:84:69:
         7e:61:2b:96:95:64:80:24:fb:97:61:40:7f:ba:7d:0c:0b:92:
         54:a3:02:a0:b1:0f:a6:6e:b2:ef:b5:71:ec:ab:90:d6:93:1d:
         32:e5:84:8f:b7:60:6c:61:0d:a7:d4:71:38:de:2e:18:b7:98:
         ec:64:a1:c7:65:b5:30:74:db:37:82:67:3a:ff:ab:43:61:52:
         34:aa:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:12:24 2026 by rpki-client