Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3235203d3e203238313938.roa
File:                     3137372e36372e382e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          n0U4sqiMAK4F92AEkyQGwJxBlCC7830fWWPaxP6ykVo=
Subject key identifier:   D1:D8:1F:9C:D9:52:40:A6:65:56:5E:3F:EE:72:D2:5E:A2:CA:41:96
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       5E5845FF79905DF05E969F76549A610C890C2D26
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:38 +0000
ROA not before:           Tue 30 Jun 2026 20:32:38 +0000
ROA not after:            Tue 29 Jun 2027 20:37:38 +0000
asID:                     28198
IP address blocks:        177.67.8.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:58:45:ff:79:90:5d:f0:5e:96:9f:76:54:9a:61:0c:89:0c:2d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:38 2026 GMT
            Not After : Jun 29 20:37:38 2027 GMT
        Subject: CN=D1D81F9CD95240A665565E3FEE72D25EA2CA4196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:1e:ed:a5:78:35:f0:04:c5:57:9c:e2:19:
                    b7:65:95:ab:1f:95:ef:1a:16:d8:41:08:4a:8a:af:
                    8c:0b:14:ce:4e:5d:dc:78:69:37:2c:26:48:5a:e0:
                    0a:f0:ab:41:02:77:2a:ab:1d:5c:06:33:4c:08:53:
                    f5:60:bd:4f:43:a4:75:77:2b:72:a4:24:ca:de:78:
                    8c:80:52:e0:bf:e8:65:e1:ad:17:76:35:43:4f:c0:
                    10:f1:80:d6:02:91:7c:5c:9e:c5:92:80:22:e4:5d:
                    7b:2b:9d:1b:3e:d5:d3:16:1d:3c:00:a5:d4:07:ff:
                    55:64:a8:14:31:a2:63:87:ed:bb:9b:6a:d4:e5:c9:
                    5b:a5:42:c2:8e:b2:77:15:cf:03:3c:18:59:ef:f9:
                    9c:bc:ea:30:cc:7e:b1:6f:ef:53:bf:22:cd:43:2e:
                    5b:2e:ae:06:b2:bd:33:29:2c:4a:c0:07:48:c7:51:
                    99:92:d1:91:98:35:ec:02:aa:f2:d8:0f:7e:b8:c7:
                    a8:b9:7f:7f:9e:ec:5f:21:ae:25:71:97:10:25:cc:
                    e0:b5:15:c4:38:65:2b:25:fc:36:8b:44:e1:38:9b:
                    c6:0a:69:d0:55:e8:ea:3b:1c:c6:0f:41:e6:d1:ee:
                    2d:59:b1:67:c5:f8:cb:fe:a6:13:dd:32:54:fb:8f:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:1F:9C:D9:52:40:A6:65:56:5E:3F:EE:72:D2:5E:A2:CA:41:96
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e36372e382e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:28:4e:c8:9e:36:54:6d:51:4a:79:07:ce:ab:7a:11:0a:16:
         ce:dd:a5:2a:a8:cf:6b:f3:69:1f:35:09:65:57:85:0d:43:57:
         b4:4c:2b:34:b2:8a:c2:20:ef:fc:60:29:76:fc:8b:dd:fa:b9:
         98:9e:f7:3c:20:c2:5d:07:3c:57:31:0b:aa:bd:ed:d4:f9:dc:
         aa:d4:2a:8f:1e:51:df:88:15:60:65:66:07:d9:77:b7:e8:da:
         ff:ad:6b:b7:8c:37:32:c8:df:d9:03:ab:7f:84:5e:ed:a2:20:
         b2:fc:2e:71:0f:87:65:c1:8e:1e:99:c4:6c:d6:b1:13:f7:9d:
         b5:c9:da:55:f7:18:c5:5b:d5:61:35:a4:7f:5d:73:a7:93:72:
         f4:89:7a:36:d9:da:25:63:a1:ea:6e:2c:0a:7a:ca:a2:c5:7d:
         8b:8e:4e:af:45:88:ee:42:a9:aa:03:af:05:a2:c8:4e:5d:d9:
         12:32:11:e2:aa:af:ff:aa:a9:e0:22:e4:da:35:d6:ff:5b:25:
         10:6b:a9:93:8c:c9:0f:3f:e2:a6:0c:73:c1:19:73:e7:14:42:
         93:12:46:25:87:94:f6:e9:ee:c3:e8:8b:4f:4d:ed:70:08:28:
         b3:ef:d5:fa:17:14:7f:49:eb:30:8a:35:0e:39:28:48:49:87:
         68:54:42:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:09:32 2026 by rpki-client