Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234392e302f32342d3234203d3e20323633363239.roa
File:                     3133382e302e3234392e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          wdR1Pn4iUkOLPTDsKlLYJXmUC7bTR35B1bR1eO46zkY=
Subject key identifier:   F9:A7:B3:4D:0E:CD:26:B9:5A:6A:34:E6:7B:A7:5D:36:53:7E:86:DC
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       66BC802F7BFE5B6B6FE06A8DE6E91BEC73AA257C
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234392e302f32342d3234203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:46:27 +0000
ROA not before:           Fri 10 Jul 2026 13:41:27 +0000
ROA not after:            Fri 09 Jul 2027 13:46:27 +0000
asID:                     263629
IP address blocks:        138.0.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bc:80:2f:7b:fe:5b:6b:6f:e0:6a:8d:e6:e9:1b:ec:73:aa:25:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:41:27 2026 GMT
            Not After : Jul  9 13:46:27 2027 GMT
        Subject: CN=F9A7B34D0ECD26B95A6A34E67BA75D36537E86DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3b:39:54:d5:19:40:2c:c7:45:e8:e5:f0:d8:
                    97:4e:2b:b5:59:03:83:2a:0c:d4:66:08:1c:92:90:
                    b9:78:e8:24:d5:d8:e3:db:02:ed:cf:a2:19:b8:6e:
                    e2:70:58:db:80:49:8e:2e:fa:2d:19:6d:36:44:15:
                    37:5b:28:67:b5:4d:3c:f9:80:58:58:1d:c1:a1:4f:
                    fc:93:bd:49:4d:2c:37:b7:e5:2c:39:f1:13:a1:4f:
                    80:01:28:f6:83:fe:0a:b1:07:7a:e6:6b:31:53:5f:
                    ba:62:db:31:c8:19:13:0b:ba:f9:42:b3:db:b3:e2:
                    1d:90:45:d5:91:60:85:d4:69:f8:4a:c2:d1:71:a7:
                    87:39:69:e6:b2:54:2d:f7:f7:05:f0:47:4e:af:4f:
                    f1:fc:28:c9:57:c1:80:67:e4:0a:60:52:b2:88:45:
                    79:1a:56:e8:45:8b:36:a1:9c:c6:d8:b0:f3:13:1b:
                    11:aa:d4:d8:05:da:1d:94:aa:9e:6e:6c:02:d0:6d:
                    c4:94:a3:a0:0e:b6:77:71:37:26:64:8b:ea:7a:2d:
                    83:2f:76:49:15:10:c4:2f:d9:e7:90:0f:61:f1:50:
                    7e:2a:a9:b9:25:d3:05:9e:19:5f:fb:0e:aa:ec:eb:
                    17:0c:8f:ca:3b:40:44:59:9b:a8:d1:cd:86:36:d8:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:B3:4D:0E:CD:26:B9:5A:6A:34:E6:7B:A7:5D:36:53:7E:86:DC
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3234392e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:73:a2:67:20:30:e0:16:ba:ee:83:3f:16:9d:e6:60:61:e4:
         2a:14:ba:fe:9e:6b:07:99:40:58:0c:5c:73:17:88:11:36:91:
         ff:e9:cc:f0:70:a8:d2:fd:9a:6c:aa:31:81:73:0b:3d:81:4c:
         40:d4:1d:6f:49:a2:d8:33:85:e2:25:ac:15:58:6f:df:82:02:
         3c:d7:5c:29:dc:57:f7:ba:76:07:da:8d:92:92:06:f1:59:5d:
         12:61:0c:52:4a:bc:d1:08:a3:da:a3:72:21:37:7f:75:ef:16:
         49:83:69:e8:26:9d:f3:48:d5:63:df:dd:f0:74:8d:2f:18:6e:
         11:9d:14:7c:37:f6:54:94:63:e2:b2:c6:77:a3:18:4d:60:65:
         d6:76:03:e1:95:84:e2:ab:e5:9f:1d:d5:02:0a:1d:3f:ce:9f:
         7d:20:92:ac:b8:7e:6d:3d:9d:a0:d5:1c:c5:e5:15:0b:93:ae:
         19:05:2c:20:08:15:8a:a7:8a:cb:39:e0:4d:04:8b:d3:c9:ec:
         4d:df:a2:71:db:04:7e:e6:b5:a7:4e:fe:c3:07:88:0b:ee:f3:
         f9:55:3f:4c:33:39:02:31:97:85:07:d9:60:e2:25:f8:bd:23:
         c2:dc:12:f7:ad:f3:9b:25:0e:b2:a8:12:8a:35:51:f9:2f:3c:
         42:71:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:19:15 2026 by rpki-client