Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e37332e3139322e302f32312d3235203d3e203238313938.roa
File:                     3137372e37332e3139322e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          vPZc7ijri1DSRUh2p41+O5YE+wR8b6rb2Ud5dXXPZG8=
Subject key identifier:   40:CD:4F:DB:91:E0:A8:95:2D:AA:03:15:77:C3:27:A2:C3:E2:02:1D
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       59DF55F30DE0278291C0C892F7C770FE4DB0250B
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e37332e3139322e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:44 +0000
ROA not before:           Tue 30 Jun 2026 20:32:44 +0000
ROA not after:            Tue 29 Jun 2027 20:37:44 +0000
asID:                     28198
IP address blocks:        177.73.192.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:df:55:f3:0d:e0:27:82:91:c0:c8:92:f7:c7:70:fe:4d:b0:25:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:44 2026 GMT
            Not After : Jun 29 20:37:44 2027 GMT
        Subject: CN=40CD4FDB91E0A8952DAA031577C327A2C3E2021D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:ee:0b:1c:1a:6a:91:d5:1e:8b:af:7c:d3:
                    2b:e0:b6:db:fd:8d:ac:f8:38:fd:41:b6:be:d1:89:
                    92:83:84:4f:d5:fd:b2:4b:7e:2f:4d:83:3f:c2:a7:
                    51:8f:a2:16:b9:70:19:20:5e:5e:ce:06:19:c4:91:
                    d1:71:20:ee:4d:f6:6f:4a:1c:e8:72:b4:e6:a0:e9:
                    5c:0a:c0:48:90:2e:bc:e5:fe:e6:72:f5:bf:78:63:
                    e1:fc:81:ba:0b:a2:03:ad:55:5f:5d:08:c5:0c:35:
                    db:21:12:2c:ef:39:a0:62:1f:31:f2:a5:df:15:c5:
                    a9:f7:5c:a7:f7:2b:05:47:c4:8b:4b:01:ce:6e:58:
                    28:58:da:13:5b:98:34:1e:ef:0c:40:77:b1:06:db:
                    1b:9e:ae:d3:f8:ed:42:95:e6:9a:76:ea:90:7a:67:
                    25:48:ea:d0:61:47:9d:a1:f5:6e:f0:47:21:5a:fc:
                    49:9d:4a:80:b5:ec:e1:51:9c:fe:5c:62:fd:5b:9d:
                    ff:46:34:47:d4:43:29:f9:06:21:08:31:4f:c6:ca:
                    1e:6d:f0:32:ee:0e:83:21:b1:8f:05:7d:37:2d:ee:
                    1f:89:72:e3:38:d1:70:b4:bb:8e:c6:f3:2d:8d:d9:
                    f2:9f:33:b9:32:d9:7e:e0:40:c3:82:2c:bb:6e:1b:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:4F:DB:91:E0:A8:95:2D:AA:03:15:77:C3:27:A2:C3:E2:02:1D
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137372e37332e3139322e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:79:96:96:fe:13:6a:27:93:fa:67:e8:36:d6:36:7d:2b:94:
         2b:3c:fc:cf:7c:30:eb:17:fa:56:de:f1:81:2e:b2:c0:9e:17:
         4a:c0:11:17:54:69:34:e4:c9:d0:1b:9f:6d:56:63:fd:6b:a9:
         8b:30:62:41:dd:94:36:af:44:34:0c:65:f0:42:c6:7d:b1:89:
         21:0a:aa:e2:56:89:ad:0a:24:e0:ff:f3:41:09:01:aa:eb:f6:
         d2:de:9b:17:73:98:47:12:b4:25:ee:f3:44:8b:8e:3e:2b:8f:
         b1:b5:e0:c1:81:28:31:2b:ef:3d:a4:92:68:28:f2:90:0d:df:
         7e:2d:57:ee:54:b0:cc:34:4a:55:6f:85:61:39:c0:51:b0:4d:
         2f:54:cd:ba:ca:de:3a:9c:b0:43:3b:36:c9:62:2c:2e:79:15:
         de:f5:7f:c0:16:e0:61:a0:1a:80:37:c9:d7:06:5c:5a:60:6f:
         9d:39:e8:0b:bc:bf:95:b9:c7:a9:74:f3:80:a9:58:70:70:c3:
         c9:83:1d:e8:a9:1b:a2:9b:ed:5f:67:d6:73:53:c0:62:2a:e6:
         d7:cd:18:f5:f6:0f:a7:a2:03:70:9f:21:46:df:98:e1:cf:18:
         43:bc:96:26:dc:84:d6:4d:7d:05:dd:93:88:d3:b3:a6:48:0b:
         1b:45:5d:af
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWd9V8w3gJ4KRwMiS98dw/k2wJQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNBQTcxODhFQURDQzhDM0M3OThCMDQ2MEYyMTg1NjRE
QTA0Q0NBRDAeFw0yNjA2MzAyMDMyNDRaFw0yNzA2MjkyMDM3NDRaMDMxMTAvBgNV
BAMTKDQwQ0Q0RkRCOTFFMEE4OTUyREFBMDMxNTc3QzMyN0EyQzNFMjAyMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpu4LHBpqkdUei6980yvgttv9
jaz4OP1Btr7RiZKDhE/V/bJLfi9Ngz/Cp1GPoha5cBkgXl7OBhnEkdFxIO5N9m9K
HOhytOag6VwKwEiQLrzl/uZy9b94Y+H8gboLogOtVV9dCMUMNdshEizvOaBiHzHy
pd8Vxan3XKf3KwVHxItLAc5uWChY2hNbmDQe7wxAd7EG2xuertP47UKV5pp26pB6
ZyVI6tBhR52h9W7wRyFa/EmdSoC17OFRnP5cYv1bnf9GNEfUQyn5BiEIMU/Gyh5t
8DLuDoMhsY8FfTct7h+JcuM40XC0u47G8y2N2fKfM7ky2X7gQMOCLLtuG5unAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQM1P25HgqJUtqgMVd8MnosPiAh0wHwYDVR0j
BBgwFoAUbKpxiOrcyMPHmLBGDyGFZNoEzK0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC82Q0FBNzE4OEVBRENDOEMzQzc5OEIwNDYwRjIxODU2NERBMDRDQ0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDQUE3MTg4RUFEQ0M4QzND
Nzk4QjA0NjBGMjE4NTY0REEwNENDQUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzNzM3MmUzNzMzMmUzMTM5MzIyZTMwMmYzMjMxMmQzMjM1MjAzZDNlMjAzMjM4
MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUnAMA0GCSqGSIb3DQEBCwUAA4IBAQAXeZaW/hNq
J5P6Z+g21jZ9K5QrPPzPfDDrF/pW3vGBLrLAnhdKwBEXVGk05MnQG59tVmP9a6mL
MGJB3ZQ2r0Q0DGXwQsZ9sYkhCqriVomtCiTg//NBCQGq6/bS3psXc5hHErQl7vNE
i44+K4+xteDBgSgxK+89pJJoKPKQDd9+LVfuVLDMNEpVb4VhOcBRsE0vVM26yt46
nLBDOzbJYiwueRXe9X/AFuBhoBqAN8nXBlxaYG+dOegLvL+VucepdPOAqVhwcMPJ
gx3oqRuim+1fZ9ZzU8BiKubXzRj19g+nogNwnyFG35jhzxhDvJYm3ITWTX0F3ZOI
07OmSAsbRV2v
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:05:09 2026 by rpki-client