Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234382e302f32332d3233203d3e20323633363239.roa
File:                     3133382e302e3234382e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          sLpiW8Ry5DpDR+yEGQ/G96qPcbdW8KOzYHiqefsrCK8=
Subject key identifier:   76:3A:B0:2F:4A:E4:DE:59:9D:FC:FC:B7:52:61:FF:D2:58:93:0C:39
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       50CDA0FD9F9482A0C030E578B7DF43F86CFCDD9F
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234382e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:46:18 +0000
ROA not before:           Fri 10 Jul 2026 13:41:18 +0000
ROA not after:            Fri 09 Jul 2027 13:46:18 +0000
asID:                     263629
IP address blocks:        138.0.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cd:a0:fd:9f:94:82:a0:c0:30:e5:78:b7:df:43:f8:6c:fc:dd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:41:18 2026 GMT
            Not After : Jul  9 13:46:18 2027 GMT
        Subject: CN=763AB02F4AE4DE599DFCFCB75261FFD258930C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:39:f3:fd:e2:21:02:3b:24:5b:45:89:bc:
                    c3:40:ca:f9:93:4d:90:a6:e5:3f:4a:7b:b0:5e:81:
                    51:88:cc:f4:d2:b0:0d:6a:cc:09:e6:aa:57:36:5d:
                    ff:f4:8a:16:77:49:55:20:79:06:12:16:c8:c7:13:
                    b0:b0:b6:c3:c8:fa:22:aa:ff:6d:dc:ea:61:ef:cb:
                    94:89:8b:98:20:c7:59:21:42:1b:87:a6:09:22:f8:
                    36:3f:9a:19:49:18:38:d0:2b:4b:20:f0:ec:24:71:
                    e2:cc:e5:18:6d:be:da:86:9f:bd:24:f9:1c:73:b1:
                    b5:fc:1e:7f:c5:ed:2d:65:f0:dd:2f:da:08:49:81:
                    5b:9a:d8:d2:00:dd:56:9e:65:f2:5f:14:6d:14:5e:
                    be:96:fb:7e:71:3c:96:05:1e:11:12:92:9d:4b:69:
                    9d:d6:3c:5b:8f:ba:c1:57:42:7d:47:0c:be:57:69:
                    a0:81:b5:bf:d5:79:c4:ac:c9:fd:10:f6:c5:90:29:
                    17:a9:f6:d1:a9:a3:a3:43:85:4b:bb:a7:3e:fd:40:
                    96:66:09:b5:78:68:8c:98:6c:e1:03:e0:fb:e1:15:
                    7f:16:7c:38:7d:a0:b7:3e:d2:9f:68:91:f9:45:1b:
                    49:38:b3:03:ef:d0:94:e1:6a:72:9f:c2:7f:d5:60:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:B0:2F:4A:E4:DE:59:9D:FC:FC:B7:52:61:FF:D2:58:93:0C:39
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234382e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:12:0a:2b:d0:6f:70:ce:1f:3f:31:8a:e4:32:bf:2b:d3:d9:
         2b:d5:c3:e8:e8:80:92:c1:1a:29:25:ef:98:6e:e4:d0:9a:f2:
         d0:42:9d:ea:8c:1f:1c:b5:32:d5:89:6e:32:75:e8:1b:83:13:
         5c:cb:39:b8:4c:fd:58:02:23:a3:24:43:07:cc:b3:b1:5c:3e:
         e7:f3:00:8a:7d:72:01:76:e9:80:76:4c:63:1c:fb:11:9d:12:
         cb:61:8d:44:f7:f4:64:71:59:a2:47:27:be:91:a0:2c:94:9e:
         30:66:c1:74:75:3c:cc:be:8f:0c:d4:c7:01:4f:fc:10:89:7f:
         dc:a4:d2:b7:75:fe:dc:3b:c0:ae:15:44:2a:60:4b:93:ab:27:
         aa:fd:b4:88:1b:dc:fc:71:a9:7c:36:da:12:a1:d2:f0:34:fa:
         84:20:b3:2f:89:8c:ec:06:e2:9b:64:4f:d6:2b:21:a9:47:22:
         eb:db:76:81:5f:59:74:d6:6b:32:19:a7:ba:7d:55:c6:ce:0c:
         09:08:16:1b:24:e1:de:9b:3f:14:f3:34:63:d0:67:27:05:ed:
         ef:dd:28:40:dd:1f:da:f6:c2:d3:08:86:1a:87:cc:11:82:ab:
         c1:cd:02:6a:12:cf:25:19:dc:2f:0d:8c:fc:4b:20:95:be:6f:
         8e:88:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:10 2026 by rpki-client