Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa
File:                     3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa (raw, json)
Hash identifier:          Vv/wqhmYl1PI2KyE8WjY1v/pocSsgVpjG3sK1kk2oTE=
Subject key identifier:   0A:1A:C6:A4:83:04:EE:F7:9D:1F:09:3C:42:95:38:FB:42:C0:03:3F
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       25D5CE694FA1D3CB2CCF8371638FE6EBF8185A97
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:42 +0000
ROA not before:           Tue 30 Jun 2026 20:32:42 +0000
ROA not after:            Tue 29 Jun 2027 20:37:42 +0000
asID:                     28198
IP address blocks:        170.238.176.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d5:ce:69:4f:a1:d3:cb:2c:cf:83:71:63:8f:e6:eb:f8:18:5a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:42 2026 GMT
            Not After : Jun 29 20:37:42 2027 GMT
        Subject: CN=0A1AC6A48304EEF79D1F093C429538FB42C0033F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:84:b5:96:4c:bc:b6:4c:bf:6b:74:05:c9:
                    5c:a6:f9:79:1b:be:f6:49:3f:f7:71:1b:f6:0f:ec:
                    90:51:f3:c5:99:69:fb:ca:35:b5:bb:7a:97:ff:d8:
                    bb:9c:a1:9f:de:d0:97:47:cf:a7:11:99:76:42:09:
                    61:85:26:2e:f8:f1:7b:66:c4:63:f5:78:2c:b6:92:
                    3c:f3:2d:25:7a:b8:16:80:fc:52:9a:95:0f:f3:b0:
                    f2:2a:68:02:3d:b3:ce:7d:e0:37:cd:e9:78:95:64:
                    82:34:87:df:1d:95:40:1f:6e:98:58:75:5d:58:9f:
                    2e:af:73:fa:76:ef:87:3c:e0:8f:b0:ef:47:c0:83:
                    6a:7d:13:43:8a:fe:24:e1:58:3b:3f:6a:27:91:79:
                    ed:da:09:d6:fc:76:f1:fa:aa:20:c3:cb:ec:2c:62:
                    43:51:0b:f6:b1:d2:34:d8:77:cb:b0:93:db:8e:ba:
                    e3:ef:53:ec:b9:9c:b7:35:0a:34:2f:bf:01:23:b5:
                    cc:e0:3e:41:f4:83:9d:67:46:b7:a6:a6:f6:d8:04:
                    93:34:76:dd:de:49:84:7e:50:e0:53:8b:2c:81:0c:
                    48:e2:16:a3:a6:41:fc:e0:ad:c0:e0:88:28:4c:93:
                    ba:4f:19:b9:92:72:73:fe:32:0c:fb:d9:e2:74:d9:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:C6:A4:83:04:EE:F7:9D:1F:09:3C:42:95:38:FB:42:C0:03:3F
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137302e3233382e3137362e302f32322d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:08:a5:11:e9:6e:08:fa:fc:97:f2:2d:ae:a6:80:22:2b:
         b0:5a:39:ae:f9:57:7e:65:3a:9a:c1:a2:c0:f2:83:be:30:a3:
         38:ed:fc:1b:9f:be:dd:b6:49:87:3d:02:c4:81:01:0e:31:7e:
         c9:7b:54:5d:41:7d:be:f0:2c:60:5e:92:4d:86:ce:97:0f:2a:
         f4:34:3a:47:4c:83:0e:e4:1d:ec:97:4a:dc:77:3c:60:8c:70:
         66:7a:39:64:dd:21:03:31:6a:28:4a:05:69:21:0a:82:4d:cd:
         1c:2e:83:55:0b:c8:8b:58:eb:10:b5:89:98:fc:07:a2:3c:5f:
         a3:82:24:61:1b:cf:f0:0b:e1:0d:52:34:c8:21:bb:5f:f5:36:
         c5:5c:1f:dc:51:cf:d7:f3:3f:fb:fc:d6:e4:cf:d2:8f:7d:45:
         93:fc:98:8f:69:28:7a:13:e8:4b:c6:e7:7c:56:c3:73:ee:9a:
         4a:11:64:11:eb:62:e3:36:84:cf:fb:0e:82:de:44:bf:0a:f7:
         0c:a7:1c:e5:c2:35:f1:f1:a2:c7:6c:57:2f:dc:66:9b:51:13:
         e3:fd:a2:de:47:18:27:73:28:9c:31:63:3e:72:6c:31:fe:0e:
         0c:3a:1b:ff:21:f8:e6:a9:4c:ee:d5:3d:10:1c:d7:45:eb:1d:
         a3:2b:16:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:16:01 2026 by rpki-client