Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34302e302f32332d3233203d3e20323633363239.roa
File:                     3137302e302e34302e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          4KcA1UdhbtCmCFgE4RyCANpR8KoIboUTm7mLqP+Qsy8=
Subject key identifier:   87:42:CF:E8:74:19:46:97:52:E0:62:36:F3:27:43:C0:9F:16:65:1D
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       4C221A28C17E26973F08596B0D0169307EDDB125
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34302e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:46:51 +0000
ROA not before:           Fri 10 Jul 2026 13:41:51 +0000
ROA not after:            Fri 09 Jul 2027 13:46:51 +0000
asID:                     263629
IP address blocks:        170.0.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:22:1a:28:c1:7e:26:97:3f:08:59:6b:0d:01:69:30:7e:dd:b1:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:41:51 2026 GMT
            Not After : Jul  9 13:46:51 2027 GMT
        Subject: CN=8742CFE87419469752E06236F32743C09F16651D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:93:14:b7:89:f1:38:20:6c:b8:67:8f:a1:
                    65:c2:03:70:95:e6:8e:66:74:e1:ef:16:49:02:01:
                    d8:df:b2:a9:e8:6f:23:27:e3:86:cb:08:d0:4c:d7:
                    fe:0b:a5:f0:08:53:55:38:03:1e:b9:2c:be:08:27:
                    31:c2:79:f5:fb:d2:e1:eb:28:46:12:4c:57:a2:13:
                    3a:e3:16:57:20:21:67:fc:85:b9:82:7a:dc:7c:5e:
                    f0:54:1d:c6:c0:0e:1b:e1:fb:55:d8:b0:7e:13:60:
                    67:86:b1:a7:f2:2c:07:db:d4:a1:c0:33:fc:ee:be:
                    a7:50:89:f5:e5:74:97:92:c0:d9:2e:17:9d:e1:d7:
                    4f:45:8a:78:03:1a:e5:31:3d:62:d7:b5:9c:92:1a:
                    8b:a8:43:4d:cf:a8:b4:e3:af:52:b6:e7:96:05:6f:
                    47:e7:92:a8:3b:fd:43:0f:02:8b:2d:0b:67:d3:94:
                    f2:3d:62:cb:39:d6:51:c3:1d:ed:39:cd:d6:3b:01:
                    d9:1c:94:ad:68:e8:32:41:a0:42:27:f7:ac:3a:f0:
                    01:70:92:ee:40:a4:da:37:c6:61:62:cf:f1:38:00:
                    97:af:ac:ec:73:eb:56:21:60:cc:e6:37:49:a0:c2:
                    bb:5a:df:37:c7:62:62:76:bf:ac:23:59:dd:eb:77:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:CF:E8:74:19:46:97:52:E0:62:36:F3:27:43:C0:9F:16:65:1D
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34302e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:5f:5d:c5:be:27:51:9a:42:98:6b:d9:b2:65:3f:02:c5:
         29:66:cf:92:f7:b6:6f:e8:b5:71:ef:93:c8:0b:4e:cd:14:8f:
         71:0b:67:5b:60:89:ff:76:1d:af:ed:96:46:14:bd:f2:dc:db:
         d0:96:70:28:ed:77:e8:22:e6:6c:4d:f8:82:e7:46:f7:82:b2:
         da:4e:7b:c6:0c:88:15:18:97:92:df:1f:aa:6c:d0:3a:30:1d:
         6a:c2:82:03:04:af:79:e8:62:36:07:64:9e:6d:5b:fc:4c:9f:
         6c:eb:95:f7:b6:bf:3b:0d:a8:7b:fd:d5:fc:ee:26:d2:fb:7c:
         7d:6d:a6:c3:58:4a:ab:b8:2d:66:a7:55:6f:4c:f4:d9:8b:9d:
         60:b3:fa:dc:c3:12:02:16:05:a1:f3:b3:6c:d1:e5:39:a2:27:
         74:01:1a:8b:ec:bf:e7:94:60:ab:ec:a8:22:c7:09:e5:f0:56:
         91:a3:34:9b:a7:53:d7:f0:90:2b:02:75:88:fc:a9:02:07:b0:
         f2:99:17:a3:62:cd:d4:10:04:89:74:f2:ef:80:24:40:71:44:
         e8:5e:14:2f:8b:f4:26:ff:99:94:b3:34:5c:06:f8:eb:45:55:
         f6:6d:d0:35:e5:0f:c2:17:cd:90:9b:88:45:8a:5e:66:f4:cf:
         00:73:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:21 2026 by rpki-client