Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34302e302f32312d3231203d3e20323633363239.roa
File:                     3137392e3132352e34302e302f32312d3231203d3e20323633363239.roa (raw, json)
Hash identifier:          xSrwZPMnmm+njTaNLA6ed8ShJLgm6Mi4UvYJaYHd6xM=
Subject key identifier:   24:2D:D5:6F:62:4B:15:77:60:3B:FF:ED:AB:3B:C1:66:EB:C8:61:8F
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       1353CBDDB23DF9A50D5A6038F2CA4375D83963CB
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34302e302f32312d3231203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:47:48 +0000
ROA not before:           Fri 10 Jul 2026 13:42:48 +0000
ROA not after:            Fri 09 Jul 2027 13:47:48 +0000
asID:                     263629
IP address blocks:        179.125.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:53:cb:dd:b2:3d:f9:a5:0d:5a:60:38:f2:ca:43:75:d8:39:63:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:42:48 2026 GMT
            Not After : Jul  9 13:47:48 2027 GMT
        Subject: CN=242DD56F624B1577603BFFEDAB3BC166EBC8618F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:c0:e0:ed:08:27:f5:4b:eb:7c:50:77:8c:
                    cd:af:37:d0:e2:4a:5c:af:b0:74:50:0e:16:1d:51:
                    09:a9:8b:4d:24:ee:90:7f:69:ad:6a:ab:dd:3a:68:
                    1b:77:76:77:57:c7:d1:3f:71:6e:eb:f1:6e:0b:8c:
                    1b:ea:7c:48:0e:d4:c8:53:d5:26:6b:1b:7a:1f:29:
                    3d:cd:98:13:3a:49:e4:ae:c4:0f:48:0a:af:17:fb:
                    46:e1:47:45:2b:1a:20:b1:26:3a:3a:07:4c:49:af:
                    fc:6a:7d:05:a4:57:16:a7:70:47:ce:b8:b9:89:f5:
                    7e:2a:61:28:80:8f:52:f9:a7:35:a9:5f:64:12:ad:
                    14:7f:16:56:c3:86:fc:e3:d0:77:4f:3d:49:aa:79:
                    3b:17:18:eb:da:24:3f:7f:48:82:ae:5a:98:db:91:
                    43:28:a3:1f:b7:8b:51:73:8f:42:7a:29:09:2e:a5:
                    de:91:de:b4:3e:9b:b3:84:61:61:63:84:10:37:95:
                    b4:49:2f:5d:dd:c5:ed:22:d2:1c:9c:31:a9:c7:52:
                    44:85:6d:72:28:fa:91:ad:c4:28:60:6f:e9:41:a5:
                    2f:6f:ff:88:2b:4d:3a:61:83:a1:87:f7:e9:b8:14:
                    2c:fb:c8:fc:9a:04:88:33:66:e5:cf:cc:43:b5:9c:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:D5:6F:62:4B:15:77:60:3B:FF:ED:AB:3B:C1:66:EB:C8:61:8F
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34302e302f32312d3231203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:55:98:7b:aa:8f:fa:ee:7f:1d:fb:eb:13:fa:64:3a:5c:24:
         ff:fc:ca:75:13:9c:e1:50:ab:19:2d:46:6b:94:cb:2a:cf:16:
         e1:28:83:ce:fc:aa:f4:2d:06:71:28:38:05:ba:91:3b:ab:1d:
         83:3e:21:ba:aa:78:1c:7e:af:85:0f:d1:e4:64:35:be:8a:9b:
         f7:13:da:40:5b:87:11:4e:ea:7b:a6:67:80:ee:12:a1:f3:24:
         2e:bc:39:0c:bb:a5:86:98:34:63:d2:fb:82:89:b4:03:18:79:
         2e:ae:2c:7c:04:4b:79:61:28:88:02:78:97:7f:11:e9:12:f2:
         ed:12:3d:8a:78:8c:41:34:8f:ca:3e:48:3b:8b:6e:ca:13:de:
         05:40:9f:ed:00:38:c6:a0:d4:39:ee:a0:48:9c:e9:7e:3a:d1:
         4f:57:01:fa:39:4a:79:7c:c9:b4:48:60:f6:6e:85:a5:a5:c9:
         6d:cc:f8:d4:f1:c6:ba:33:75:90:10:d4:b7:61:97:86:f7:c8:
         64:c4:1c:a7:c7:28:a8:08:e7:f1:e7:bc:8e:dc:79:99:6d:c3:
         12:35:19:31:b6:52:4c:fa:9d:ef:ba:96:83:4f:d5:1a:40:e7:
         13:7d:28:48:56:5d:ee:10:22:47:c7:b3:af:7d:9b:25:3f:58:
         ac:48:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:04 2026 by rpki-client