Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3132352e39362e302f32312d3235203d3e203238313938.roa
File:                     3137392e3132352e39362e302f32312d3235203d3e203238313938.roa (raw, json)
Hash identifier:          ykhr+aFxenpzRSghICB9ilC7YJUR+PnKbHQt1SNVxDo=
Subject key identifier:   C7:A1:90:72:07:80:A1:5E:7C:53:CC:8C:0C:4F:94:62:F2:47:EA:52
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       67F74277C83058686EACD57D3BADBDE3BCD99472
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3132352e39362e302f32312d3235203d3e203238313938.roa
Signing time:             Tue 30 Jun 2026 20:37:53 +0000
ROA not before:           Tue 30 Jun 2026 20:32:53 +0000
ROA not after:            Tue 29 Jun 2027 20:37:53 +0000
asID:                     28198
IP address blocks:        179.125.96.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f7:42:77:c8:30:58:68:6e:ac:d5:7d:3b:ad:bd:e3:bc:d9:94:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jun 30 20:32:53 2026 GMT
            Not After : Jun 29 20:37:53 2027 GMT
        Subject: CN=C7A190720780A15E7C53CC8C0C4F9462F247EA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:34:aa:5a:4e:24:03:b5:88:0e:0f:b6:d1:
                    6a:a0:44:e2:f8:4d:8a:90:0d:de:a2:96:22:a2:9d:
                    1d:1c:a0:a6:6a:4d:d8:bf:08:ab:be:12:56:3c:00:
                    23:35:48:3f:a4:13:63:68:5c:35:ce:7d:85:34:f6:
                    c5:8e:ab:62:1b:b9:df:7b:6a:e2:59:ee:a9:42:24:
                    ae:84:7f:54:18:87:3e:fe:59:ea:5f:c3:d2:b7:43:
                    6b:05:5d:80:74:8e:54:e5:99:0b:5f:27:a1:03:c0:
                    15:9d:98:f3:8f:04:9f:ae:b3:33:2b:d3:09:48:48:
                    c1:d0:7a:8c:f8:a6:f6:35:f7:c2:55:e4:8f:37:9d:
                    b6:aa:ba:aa:d0:c9:2c:8c:c9:e3:c2:91:8d:f4:d1:
                    22:52:31:14:cb:92:78:e1:1b:4b:cc:ed:16:c3:cc:
                    ec:a1:0c:b5:60:dc:58:27:ae:e8:74:79:f9:78:ba:
                    1d:36:26:b8:18:dd:30:fc:30:cb:37:a2:be:e4:4a:
                    3f:00:96:c6:86:d0:47:e9:3b:6a:80:63:a5:0f:89:
                    a0:fe:3d:d1:06:24:11:27:77:81:69:26:a2:6f:7b:
                    d1:02:00:31:84:67:48:da:36:30:a2:83:f1:71:27:
                    bf:03:77:22:a7:03:2c:ec:ba:2a:99:e9:7b:a1:9f:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A1:90:72:07:80:A1:5E:7C:53:CC:8C:0C:4F:94:62:F2:47:EA:52
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3137392e3132352e39362e302f32312d3235203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:aa:30:99:15:94:bd:89:a0:84:02:bd:e5:6e:91:14:93:eb:
         5f:d2:fe:73:b8:e6:5c:04:e8:36:d0:d3:e9:f1:01:83:74:76:
         9f:48:4d:e3:da:69:e8:27:42:1b:c1:30:90:eb:b8:03:6a:76:
         69:a2:10:fc:7d:16:37:72:af:13:3e:52:a2:ca:0e:9d:91:1e:
         d9:b5:ba:cc:14:5a:25:7a:28:58:fd:19:d0:00:f3:10:7b:26:
         15:ac:b5:6a:c9:d4:a9:ac:ea:c6:5a:82:4d:89:e7:13:94:61:
         95:af:a0:b9:7b:03:b9:b1:cb:b2:4c:f6:90:6c:ab:c7:8f:fa:
         e0:c9:b1:93:75:65:a5:75:bc:70:51:e5:ff:ef:4b:02:25:51:
         10:1d:b5:0a:99:1c:d7:74:0f:bd:20:0d:12:14:66:68:13:da:
         20:ac:4e:2a:90:1c:8d:39:56:7d:86:1b:6e:d6:b2:ad:2f:74:
         79:37:2c:ac:c9:bc:18:cd:76:ad:01:c9:ee:f6:67:bd:d5:54:
         e7:2a:95:92:b2:30:03:b3:1c:84:dd:d5:d2:73:bc:e9:58:95:
         85:ee:b8:2a:ed:b9:66:ec:a2:a0:d8:7f:18:34:ae:2a:8d:54:
         dc:98:0b:ea:67:2d:a9:ac:6e:0e:5e:79:4c:8f:60:68:df:b2:
         37:16:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:05:57 2026 by rpki-client