Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3138352e31362e302f32302d3235203d3e203238313938.roa
File:                     3137372e3138352e31362e302f32302d3235203d3e203238313938.roa (raw, json)
Hash identifier:          6J/AJdzE3+8MM/HX3B/i+CzeHL3OBW4ytN1N9HtlTh4=
Subject key identifier:   02:1E:80:56:EA:C0:21:12:2E:75:B9:73:D1:30:31:BF:F3:8D:9D:E4
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       5D5CE3152C939329BD60502F8B1B651BA5EEB26E
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3138352e31362e302f32302d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:54 +0000
ROA not before:           Tue 30 Jun 2026 20:32:54 +0000
ROA not after:            Tue 29 Jun 2027 20:37:54 +0000
asID:                     28198
IP address blocks:        177.185.16.0/20 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5c:e3:15:2c:93:93:29:bd:60:50:2f:8b:1b:65:1b:a5:ee:b2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:54 2026 GMT
            Not After : Jun 29 20:37:54 2027 GMT
        Subject: CN=021E8056EAC021122E75B973D13031BFF38D9DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:f7:3f:8f:2d:e1:c4:fa:83:8c:b8:5c:2e:
                    6c:f9:ae:1d:09:bf:a2:f7:b4:79:37:a0:e1:75:a4:
                    1a:1b:dc:8e:08:04:4b:46:d2:ed:8d:cc:83:97:cb:
                    1b:ad:ff:a9:e0:bc:44:40:eb:80:02:67:9e:81:f4:
                    ab:32:3b:61:92:db:c5:85:ab:9b:b8:45:85:9a:78:
                    72:f6:2c:0b:e7:21:a8:06:dd:68:bd:69:3a:87:86:
                    99:3f:4f:73:0f:1a:e9:7d:e8:73:09:13:a9:f7:6c:
                    77:b5:44:13:a5:9d:f1:82:37:c4:8e:ad:9e:0b:4c:
                    ba:33:20:90:b7:79:d4:0b:5b:90:04:71:4b:27:8e:
                    1d:5b:ff:5b:56:52:d8:1c:c9:02:41:af:a0:5b:2e:
                    4d:a0:99:6c:46:61:62:a8:2b:26:31:97:d2:d2:de:
                    6d:53:5e:f5:4f:0b:84:6a:a2:29:34:eb:be:a1:c9:
                    19:1a:78:ad:4d:c5:c6:57:24:04:67:c3:f7:64:95:
                    b4:9d:bf:de:29:3a:f0:a6:b0:fe:50:c7:4c:b5:f2:
                    e1:d3:22:0b:c0:fa:4d:25:8a:ae:0a:ad:3e:07:92:
                    14:38:77:2e:f9:c6:8d:0a:bd:8b:5f:d8:1d:c6:6a:
                    ca:86:7e:d7:6d:21:9d:1c:6c:24:89:20:8f:a4:24:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1E:80:56:EA:C0:21:12:2E:75:B9:73:D1:30:31:BF:F3:8D:9D:E4
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e3138352e31362e302f32302d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:f2:1f:a2:44:43:ae:4a:49:28:18:20:cd:4d:30:05:45:5a:
         bf:f6:0f:83:bc:64:a1:c7:0e:2c:93:14:4d:87:13:d5:aa:5a:
         f0:e8:e2:d3:f9:90:90:09:06:e4:04:3b:56:8c:01:d6:d7:5b:
         32:5a:08:13:a9:b7:85:1e:64:45:03:b7:58:f7:54:fd:a8:fb:
         44:49:76:24:f8:44:b1:65:55:7b:89:9a:6b:4d:c5:17:07:d8:
         d2:8b:6c:0c:6a:3b:9d:48:2f:c4:f3:30:80:39:d3:53:75:43:
         78:39:70:46:9a:cf:ea:47:ee:c0:ee:e4:01:8e:d6:c2:d3:1f:
         62:20:3b:d3:2a:99:31:01:40:2d:93:f9:d6:ad:10:35:a0:b4:
         bb:0c:4c:96:07:13:a3:20:a0:26:94:5f:59:e2:ba:1a:0a:6b:
         66:60:2e:6d:3c:19:52:3a:d4:aa:05:22:33:9b:51:00:93:f6:
         ce:f1:a6:02:dd:6e:0a:7a:32:78:03:33:2b:5b:6a:21:bc:61:
         f6:67:f1:6d:2e:2e:7c:d0:80:57:0a:26:63:3e:2c:d0:d3:b9:
         41:a9:c3:56:d4:b4:c3:9f:c6:9a:5b:99:1b:45:f1:74:01:d0:
         72:ce:cc:78:c2:e4:f6:de:e3:ca:8c:7c:38:9f:84:b9:12:0e:
         a2:7d:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:05:12 2026 by rpki-client