Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa
File:                     3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          DU97RSEHtZ6vGqca+49k6N0Q6BXQkEWRu91fy73HJj0=
Subject key identifier:   2C:D2:38:B9:A8:BF:23:47:2B:34:92:5F:14:06:43:C1:2A:BE:10:76
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       68B7130C8DBF675B3CA2612D3509D66FCFF14DE0
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:38:05 +0000
ROA not before:           Tue 30 Jun 2026 20:33:05 +0000
ROA not after:            Tue 29 Jun 2027 20:38:05 +0000
asID:                     28198
IP address blocks:        177.137.152.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b7:13:0c:8d:bf:67:5b:3c:a2:61:2d:35:09:d6:6f:cf:f1:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:33:05 2026 GMT
            Not After : Jun 29 20:38:05 2027 GMT
        Subject: CN=2CD238B9A8BF23472B34925F140643C12ABE1076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:4b:c1:fe:d9:d6:fd:c8:93:ae:11:61:df:
                    f0:1d:e2:3a:ef:74:1e:29:5d:01:cc:40:f8:11:1e:
                    39:1a:1a:e9:f4:fe:da:be:f6:31:19:76:dd:e1:31:
                    59:b2:b0:2e:d8:cf:20:47:33:dc:5d:c1:35:c1:2b:
                    a2:1b:5d:a5:de:5a:d8:1b:24:e0:e2:b4:82:eb:04:
                    e7:95:43:3b:62:4e:d6:79:52:08:c8:20:f2:91:28:
                    d1:dc:67:82:4e:5c:1f:ea:c2:85:cd:06:4c:7a:b8:
                    81:18:fd:85:e5:15:8e:08:34:63:dd:65:55:3e:67:
                    72:f3:2d:f1:3d:e0:5e:ed:17:19:78:a6:a6:fa:62:
                    e3:75:9f:54:a4:bc:5c:a5:de:68:9c:bb:37:fd:10:
                    90:02:8a:53:69:b7:21:f8:10:e9:60:c9:dc:e1:da:
                    52:c9:14:52:54:81:31:d5:d1:c0:20:7b:09:a6:87:
                    53:12:9c:91:a1:ad:46:49:38:a0:19:cf:cf:24:c4:
                    cf:f1:70:44:a8:b7:74:00:d2:39:0a:cc:93:36:cd:
                    ef:62:dc:06:36:a0:46:08:65:cb:92:ba:a4:94:99:
                    c6:b3:24:20:e4:54:be:a2:59:df:fc:73:35:b8:57:
                    b2:6a:f3:05:f5:7b:35:8f:b4:4f:f0:2d:fc:cc:17:
                    18:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D2:38:B9:A8:BF:23:47:2B:34:92:5F:14:06:43:C1:2A:BE:10:76
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3133372e3135322e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:03:01:67:4f:af:cd:01:0a:22:c6:0e:0b:9b:b4:9c:c9:b3:
         1b:d5:52:c7:a9:87:9c:b9:40:36:e2:1f:46:48:50:61:82:75:
         08:6e:12:86:40:f8:51:95:b3:a8:c1:e9:1e:3a:f8:b3:84:f1:
         8a:fb:a3:9f:0b:04:a3:61:15:14:51:d6:34:df:82:fa:ca:9f:
         d0:4e:01:98:a2:a7:c5:e3:c3:9c:55:9e:2d:b7:c0:d2:11:e6:
         8b:78:6b:4d:50:f3:fc:13:43:c5:29:5f:9f:aa:b6:a7:1c:ed:
         8b:13:8d:d5:1b:5e:76:a5:d7:37:98:f3:68:2e:51:41:9d:f8:
         aa:f8:11:09:29:21:bf:6a:1c:55:c2:c5:b6:7c:60:29:db:43:
         31:ba:36:c8:f0:e4:14:be:61:87:36:2e:09:1a:bc:43:19:39:
         f2:58:81:03:6d:ca:3a:2d:dc:8d:42:67:57:a4:c0:8f:cb:e7:
         5b:bd:e0:07:57:a3:33:ca:d3:6f:78:75:69:5c:ad:d7:9a:c8:
         1e:25:1f:ad:76:c1:6d:ca:7b:e0:90:6e:7e:34:4a:7b:31:21:
         04:06:c4:8a:69:61:0a:0b:0b:bc:65:11:f7:a2:3a:76:d7:99:
         92:61:20:82:6c:ef:4d:e0:6e:e7:0d:5c:87:46:ce:f2:e7:18:
         b9:fe:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:06:08 2026 by rpki-client