Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34332e302f32342d3234203d3e20323633363239.roa
File:                     3137302e302e34332e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          P67BVi0s24ggrVf7Yfk3duLlRU5z11NgpUlQSAQOPaM=
Subject key identifier:   92:72:3F:B7:FF:0E:CE:C8:B4:0E:4B:0A:13:20:1F:9F:F1:0E:C4:0D
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       208759516A5CE1480907541324391B10EAD0318F
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34332e302f32342d3234203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:47:44 +0000
ROA not before:           Fri 10 Jul 2026 13:42:44 +0000
ROA not after:            Fri 09 Jul 2027 13:47:44 +0000
asID:                     263629
IP address blocks:        170.0.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:87:59:51:6a:5c:e1:48:09:07:54:13:24:39:1b:10:ea:d0:31:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:42:44 2026 GMT
            Not After : Jul  9 13:47:44 2027 GMT
        Subject: CN=92723FB7FF0ECEC8B40E4B0A13201F9FF10EC40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:e9:13:60:3f:ed:9d:59:de:11:8f:7c:f6:
                    23:58:88:7b:49:a8:f0:0a:77:81:41:a0:48:ac:27:
                    5c:0f:69:a8:53:35:97:33:64:1d:14:3b:70:ea:71:
                    8c:f0:98:31:b4:6c:40:0c:d5:d6:c0:cb:4c:8c:b5:
                    d0:35:e2:c8:e4:fe:32:a8:17:f8:ba:2c:a6:99:12:
                    ba:b7:d3:4e:31:a6:83:4c:9e:f6:98:a4:29:1a:51:
                    92:bc:92:cc:8b:12:54:4e:00:04:dc:fa:51:bf:ac:
                    85:d5:11:d7:73:23:fe:fe:e8:fe:c6:fa:90:b4:a5:
                    4e:59:3e:69:77:2c:f4:a9:56:c3:de:6b:82:e8:75:
                    cd:a8:38:49:28:dd:0b:05:96:1e:0c:06:81:7e:41:
                    7a:59:46:0d:8e:f0:ba:80:5b:13:9b:10:63:a0:66:
                    59:30:24:69:37:fd:22:41:0c:76:1d:4f:ff:34:d5:
                    ed:af:17:79:f5:0b:86:1f:d3:d7:c4:94:05:b9:cb:
                    1a:92:ed:7f:26:de:10:56:a1:99:99:20:5b:cf:6c:
                    d2:ab:44:a1:3d:0f:4a:35:11:81:9a:1b:23:e3:7b:
                    70:e8:f9:fe:cc:6a:8f:ab:a0:5a:b2:60:0a:07:28:
                    e6:0c:3c:7f:40:72:09:e0:35:64:fd:f1:fb:ca:49:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:72:3F:B7:FF:0E:CE:C8:B4:0E:4B:0A:13:20:1F:9F:F1:0E:C4:0D
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137302e302e34332e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:14:10:86:65:5a:cf:81:3b:d3:f4:ef:25:c0:a9:db:24:5c:
         fe:21:c6:26:c7:09:b7:ed:cb:2b:b7:3b:b7:8c:e6:9a:4d:34:
         ef:89:b9:e9:1d:90:b6:56:f9:82:5b:08:1c:38:06:94:48:a9:
         a6:03:e5:e6:c3:44:91:48:01:75:98:10:b9:65:c8:f7:a4:1c:
         a8:57:38:64:99:f0:b9:f9:b5:bf:e9:ce:f0:9f:b8:31:fb:43:
         ab:19:3a:f7:47:cd:86:14:4f:d2:8f:5e:98:e0:14:56:7e:53:
         25:12:55:29:8b:2d:6a:19:c1:39:b1:4d:14:62:c3:e4:13:6b:
         67:54:7c:7f:3d:53:96:9a:2d:a4:88:9a:05:bd:dd:d2:e6:51:
         a2:b3:17:d1:ed:4a:6e:6c:a4:87:fc:e6:55:9a:79:a2:42:c3:
         f6:6a:68:a4:db:04:dd:73:f1:26:32:3b:89:4e:c7:78:d1:3c:
         83:c5:e5:a7:42:eb:5f:68:b6:f4:b1:d0:c7:7c:52:a1:a3:c6:
         38:cb:78:c3:aa:15:92:00:a3:0f:a2:ac:5d:41:53:46:2b:16:
         d2:09:ad:fe:81:c3:b8:fa:ca:7e:26:ac:12:ec:b7:c0:c5:2c:
         d7:12:bb:70:e2:36:70:8f:96:5c:ad:48:59:3d:50:7a:c8:82:
         3c:2c:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:29:45 2026 by rpki-client