Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34322e302f32332d3233203d3e20323633363239.roa
File:                     3137302e302e34322e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          adZv8JNd/Tehr0vT9bsAgsCdY8bbMk4pEJzYSTDqOaQ=
Subject key identifier:   4F:4A:8E:BD:71:1E:56:CB:05:5D:48:C8:EB:0A:6B:3D:DE:40:65:D3
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       7E685A91FBAB804AFECFA35135CB7FAC8286344E
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34322e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:47:34 +0000
ROA not before:           Fri 10 Jul 2026 13:42:34 +0000
ROA not after:            Fri 09 Jul 2027 13:47:34 +0000
asID:                     263629
IP address blocks:        170.0.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:68:5a:91:fb:ab:80:4a:fe:cf:a3:51:35:cb:7f:ac:82:86:34:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:42:34 2026 GMT
            Not After : Jul  9 13:47:34 2027 GMT
        Subject: CN=4F4A8EBD711E56CB055D48C8EB0A6B3DDE4065D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:1d:9e:03:aa:cf:fa:8c:01:90:81:a5:ac:
                    88:7f:ba:1c:b8:d2:d0:5e:a0:36:bf:22:c5:ea:4d:
                    79:7c:6e:b1:e9:04:87:3f:8b:d6:e9:b0:b7:7f:ed:
                    03:38:7e:e3:90:41:37:84:39:5a:6e:c8:db:1d:ed:
                    a5:db:05:da:76:57:1d:67:cb:38:0e:50:8c:09:b9:
                    ae:46:99:92:84:28:48:a9:16:97:f8:80:0b:83:bc:
                    f4:59:2d:dc:1f:dc:5e:6f:7c:72:18:7f:7e:30:15:
                    90:e4:f6:59:f1:fe:08:7a:91:fc:67:24:78:98:2d:
                    15:51:f6:49:eb:e7:3c:29:b3:b1:ac:c3:83:61:ed:
                    f6:c7:d6:cf:a5:4f:24:e9:1e:66:be:fb:4f:0b:07:
                    6f:df:6d:59:6b:a1:c6:7f:f7:c9:93:78:3d:6d:6b:
                    81:2b:f5:5c:17:bb:ca:7f:48:63:dc:6e:ef:89:6e:
                    cb:6e:e9:72:a9:d1:32:86:83:f8:9d:f2:9d:f0:2e:
                    63:7b:d1:3f:2b:99:2b:bc:c5:c9:c4:f6:5a:72:04:
                    42:02:4c:ff:84:06:44:94:b4:76:85:fa:38:e5:d9:
                    ad:99:2c:74:c1:ed:5f:6f:ae:3e:3d:8a:3a:ab:66:
                    b8:a5:4a:81:f3:33:93:7c:dd:bd:b8:69:68:27:3a:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:8E:BD:71:1E:56:CB:05:5D:48:C8:EB:0A:6B:3D:DE:40:65:D3
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34322e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:2e:84:99:51:47:a6:b6:eb:9e:3f:45:21:b0:29:db:82:4c:
         37:22:fc:29:dd:b0:3c:01:42:06:4a:47:16:4f:43:12:be:bc:
         2e:f2:6f:6b:4e:24:9a:66:ad:ce:a4:d5:ac:0b:f6:56:e0:00:
         be:36:0c:6c:70:e0:c5:bf:9b:42:6e:74:13:5d:25:b8:34:5c:
         0d:45:fe:f6:12:8b:cd:c9:ef:31:4d:15:08:c8:fc:35:84:8f:
         46:06:cd:7e:59:73:5c:70:4f:23:c5:36:5a:71:ff:d3:c1:9f:
         0d:58:b4:7e:03:cb:4a:c1:34:8f:c4:02:a4:c8:15:0a:1a:3d:
         82:75:c8:3b:57:35:81:6e:23:25:a9:92:c5:de:53:57:58:7b:
         f8:f0:5c:3d:79:2c:f4:a5:24:54:9d:4e:f2:e5:f4:24:81:2f:
         c8:96:dd:89:ea:8f:be:d4:21:83:01:ac:6b:e8:95:02:b1:89:
         30:09:ae:c7:db:4e:6b:1b:e5:7c:ec:f4:3a:b7:04:32:21:fd:
         2d:55:d0:ea:bb:7b:ce:e6:4a:b3:bf:35:4c:96:f3:78:43:8c:
         f1:6f:cb:56:32:fd:95:59:81:df:7f:af:a2:ee:6e:71:ad:53:
         97:70:f9:22:73:cb:8e:e6:14:29:1d:c7:ec:8a:85:29:e0:c5:
         fd:a1:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:15 2026 by rpki-client