Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34302e302f32332d3233203d3e20323633363239.roa
File:                     3137392e3132352e34302e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          +rJ/jxftm8WzRvpFyz2PAobBYgnfWFNQr3pxRVaT2+U=
Subject key identifier:   9D:40:FA:24:3D:D4:CB:C2:01:C3:51:8E:23:3B:93:23:AA:09:F8:00
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       0E2879CEC49C42320252A1E94304A0D699C1C48D
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34302e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:47:58 +0000
ROA not before:           Fri 10 Jul 2026 13:42:58 +0000
ROA not after:            Fri 09 Jul 2027 13:47:58 +0000
asID:                     263629
IP address blocks:        179.125.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:28:79:ce:c4:9c:42:32:02:52:a1:e9:43:04:a0:d6:99:c1:c4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:42:58 2026 GMT
            Not After : Jul  9 13:47:58 2027 GMT
        Subject: CN=9D40FA243DD4CBC201C3518E233B9323AA09F800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:9f:80:28:63:2e:2e:88:5c:c8:96:09:fc:
                    b4:0c:fb:ce:bd:cf:a8:27:98:0f:c6:2d:3f:ab:7b:
                    c1:7f:81:ae:cb:18:96:7a:aa:89:19:2f:69:a5:c8:
                    0d:96:b8:3e:fd:b7:1c:cd:f3:eb:43:68:44:6e:cf:
                    ad:b5:1b:e1:d4:ef:f1:43:2a:38:07:e0:93:20:c0:
                    e9:48:2f:df:39:8a:b4:5c:75:31:50:62:4f:7a:38:
                    63:58:1c:e0:4e:a8:97:53:10:a4:c4:5d:a8:3d:06:
                    6b:83:c4:8b:3c:d4:47:4a:91:2d:b1:03:5b:ab:43:
                    93:80:ba:e8:1a:18:2b:7b:9b:a5:1d:30:cf:68:a6:
                    01:45:8f:68:1c:1e:99:41:c7:36:de:9e:f6:c1:c2:
                    e7:ac:00:fb:a7:84:4a:a8:3d:da:39:20:0b:8e:1d:
                    3f:fe:11:f8:8d:5f:ab:a3:9d:d8:a4:7d:cb:da:2c:
                    49:ae:2d:12:30:6a:9c:8b:f4:ca:6f:9b:05:75:17:
                    f9:ac:fd:bb:d1:9d:37:95:c0:91:4f:f3:6c:1a:b0:
                    f2:53:a3:60:16:eb:ea:5d:82:ac:1e:61:a2:b9:ec:
                    9d:0d:0c:a0:52:aa:35:c9:0e:a8:a7:78:bb:cb:5b:
                    89:e0:d1:75:46:d7:42:e6:cd:53:77:67:cd:7d:e8:
                    64:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:40:FA:24:3D:D4:CB:C2:01:C3:51:8E:23:3B:93:23:AA:09:F8:00
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34302e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:75:f0:fe:75:0e:c8:da:32:a0:72:14:d9:ab:97:d7:56:21:
         49:34:33:62:97:43:27:10:e7:54:74:0d:6c:1d:55:90:4a:27:
         3f:3c:e2:e7:cd:8f:13:bc:da:14:be:57:b3:96:1b:c6:0f:90:
         a0:8a:c2:00:bc:4c:eb:c2:37:49:8f:b3:12:8f:d8:37:d3:71:
         1f:9a:5e:1c:a4:fe:fd:74:8f:94:b9:5d:be:81:aa:f3:f5:67:
         29:d7:2d:49:c9:ba:91:34:2d:13:37:8b:58:f2:ab:ea:f4:ed:
         a5:a4:77:6b:91:c1:78:c9:5f:c2:96:28:ad:7c:ff:2d:c1:7f:
         67:77:f6:2a:ff:53:d2:b2:b3:d2:6e:25:14:81:a8:f2:20:9e:
         28:06:8b:c1:cb:16:3c:2a:de:55:c2:57:a1:9d:d7:d7:45:f5:
         b8:80:b7:ff:97:1b:b9:2a:c0:f9:32:3d:32:24:ed:0f:93:21:
         e8:75:01:d9:7f:f3:86:6b:6f:83:b6:3f:0e:c1:59:a4:36:d7:
         82:c6:fc:d0:37:35:2f:84:df:9e:94:f7:e4:a7:ab:2b:1f:11:
         7c:17:1c:de:91:7e:80:c2:73:f2:d8:4b:ee:8f:24:08:c7:96:
         88:7c:d4:cf:90:98:0a:0c:4e:be:c1:7f:52:cc:f0:49:7b:cc:
         84:05:26:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDih5zsScQjICUqHpQwSg1pnBxI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCREE3MDYyMjQ2M0FFREQxRUQ3MjBGNTZFM0VCODI5
NEY3ODU3NzAeFw0yNjA3MTAxMzQyNThaFw0yNzA3MDkxMzQ3NThaMDMxMTAvBgNV
BAMTKDlENDBGQTI0M0RENENCQzIwMUMzNTE4RTIzM0I5MzIzQUEwOUY4MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGJ+AKGMuLohcyJYJ/LQM+869
z6gnmA/GLT+re8F/ga7LGJZ6qokZL2mlyA2WuD79txzN8+tDaERuz621G+HU7/FD
KjgH4JMgwOlIL985irRcdTFQYk96OGNYHOBOqJdTEKTEXag9BmuDxIs81EdKkS2x
A1urQ5OAuugaGCt7m6UdMM9opgFFj2gcHplBxzbenvbBwuesAPunhEqoPdo5IAuO
HT/+EfiNX6ujndikfcvaLEmuLRIwapyL9MpvmwV1F/ms/bvRnTeVwJFP82wasPJT
o2AW6+pdgqweYaK57J0NDKBSqjXJDqineLvLW4ng0XVG10LmzVN3Z8196GQTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnUD6JD3Uy8IBw1GOIzuTI6oJ+AAwHwYDVR0j
BBgwFoAUir2nBiJGOu3R7XIPVuPrgpT3hXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC84QUJEQTcwNjIyNDYzQUVERDFFRDcyMEY1NkUzRUI4Mjk0Rjc4NTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkRBNzA2MjI0NjNBRURE
MUVENzIwRjU2RTNFQjgyOTRGNzg1NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzEzNzM5MmUzMTMyMzUyZTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzfSgwDQYJKoZIhvcNAQELBQADggEBAGl18P51
DsjaMqByFNmrl9dWIUk0M2KXQycQ51R0DWwdVZBKJz884ufNjxO82hS+V7OWG8YP
kKCKwgC8TOvCN0mPsxKP2DfTcR+aXhyk/v10j5S5Xb6BqvP1ZynXLUnJupE0LRM3
i1jyq+r07aWkd2uRwXjJX8KWKK18/y3Bf2d39ir/U9Kys9JuJRSBqPIgnigGi8HL
Fjwq3lXCV6Gd19dF9biAt/+XG7kqwPkyPTIk7Q+TIeh1Adl/84Zrb4O2Pw7BWaQ2
14LG/NA3NS+E356U9+SnqysfEXwXHN6RfoDCc/LYS+6PJAjHloh81M+QmAoMTr7B
f1LM8El7zIQFJiY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:07 2026 by rpki-client