Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36362e34382e302f32312d3235203d3e203238313938.roa
File:                     3137372e36362e34382e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          6H980GVLRQY3xQIFAlAyxtpvuyGBvolk9en6+q1UvEs=
Subject key identifier:   92:3E:F0:4A:38:78:DD:62:11:78:44:64:65:56:25:B6:AC:17:FA:55
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       6BD8EB4BC830A5E82946BB7F94753DCDB1663042
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36362e34382e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:47 +0000
ROA not before:           Tue 30 Jun 2026 20:32:47 +0000
ROA not after:            Tue 29 Jun 2027 20:37:47 +0000
asID:                     28198
IP address blocks:        177.66.48.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d8:eb:4b:c8:30:a5:e8:29:46:bb:7f:94:75:3d:cd:b1:66:30:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:47 2026 GMT
            Not After : Jun 29 20:37:47 2027 GMT
        Subject: CN=923EF04A3878DD6211784464655625B6AC17FA55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:e0:0e:c4:93:19:e5:20:a7:0a:34:13:03:
                    3e:5b:c2:18:e6:81:c1:c3:9e:47:26:66:fc:03:83:
                    cc:bd:6d:df:17:61:11:b5:d7:f9:36:fb:03:33:b1:
                    35:bb:8a:86:5a:2b:25:f9:53:9c:f9:d5:70:7d:39:
                    c1:9c:bd:b3:ec:62:eb:89:8a:99:d4:1d:4d:24:4d:
                    27:c3:d3:ed:79:84:e9:c9:69:82:62:f6:ec:a1:5c:
                    ab:99:09:a1:7b:23:58:58:33:d3:06:0f:1e:a3:d9:
                    e0:9b:1e:fa:67:70:12:e2:b0:a8:8f:a0:72:07:c3:
                    1e:49:a3:28:39:5d:e5:ac:90:ae:38:6a:b3:9e:39:
                    45:27:c9:33:0d:e8:2d:c4:3b:88:94:d9:aa:1c:78:
                    c4:c9:f0:e5:5c:9b:4e:4c:38:5f:66:15:cf:24:c3:
                    cf:d2:54:a3:39:61:81:66:92:82:b0:41:e4:86:ad:
                    6a:ec:9d:c8:ad:d6:8d:ea:73:62:31:80:8c:38:aa:
                    39:c9:bd:f8:ba:ba:f8:39:1b:5f:5f:d3:a7:14:b5:
                    3e:ae:eb:1c:ff:d5:d7:53:56:da:d4:4e:7a:38:db:
                    eb:da:13:ab:ef:e8:cb:c0:2d:04:7a:ef:32:86:1b:
                    ec:74:9b:f3:32:c8:53:05:4c:34:6a:f4:f1:62:e4:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:F0:4A:38:78:DD:62:11:78:44:64:65:56:25:B6:AC:17:FA:55
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36362e34382e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:47:f5:10:63:b0:fa:61:a8:e0:90:c1:c9:cc:db:82:6c:1d:
         f3:ca:11:96:eb:e5:b9:e7:b9:a3:ec:2c:0b:73:ba:27:eb:b0:
         c4:de:fb:3f:c3:41:bd:d9:80:c2:5b:10:ee:8d:82:1c:2b:5b:
         ca:72:cf:e5:4d:52:44:27:4e:90:50:1d:98:33:b0:8c:ba:dd:
         e8:0f:38:10:69:fb:0f:9b:78:39:37:12:fe:c4:fe:a7:ea:c6:
         97:ff:0e:de:48:05:43:1f:cf:95:4d:da:38:69:fa:a9:5d:d1:
         e9:ca:54:31:5b:f1:36:45:76:99:b3:65:50:32:f9:7f:0c:81:
         7d:8f:ec:30:9b:f7:86:88:6a:80:20:62:12:4b:a4:1a:a0:44:
         2b:13:a2:eb:5d:05:65:0c:ab:6b:77:e0:c4:65:47:f4:58:da:
         3f:81:16:75:b5:bb:3d:74:35:5a:a8:d7:7b:22:b9:45:06:5d:
         0c:2e:17:b5:e4:6a:7c:8b:2a:8c:b4:4f:57:b5:0f:62:a3:f8:
         39:aa:4d:be:31:96:f3:9a:33:fd:54:73:1e:46:64:c4:0a:c5:
         05:07:90:43:6d:81:6e:1c:80:43:49:57:29:c7:ea:c1:a5:90:
         af:04:42:c9:62:3b:f0:c2:88:e3:18:a5:04:49:4e:c8:d7:39:
         25:7b:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:05:15 2026 by rpki-client