Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34322e302f32332d3233203d3e20323633363239.roa
File:                     3137392e3132352e34322e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          MEpUN0slBTbGXCj3ZlYOZuQ8pZwNjJFU+6xPoHQbJRc=
Subject key identifier:   61:DF:DA:5D:88:7A:2F:D8:82:84:25:B1:24:E5:3A:BA:86:16:F8:8F
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       5B717805197B2A4A50B1DF3FF70E6867AB33B4AD
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34322e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:48:58 +0000
ROA not before:           Fri 10 Jul 2026 13:43:58 +0000
ROA not after:            Fri 09 Jul 2027 13:48:58 +0000
asID:                     263629
IP address blocks:        179.125.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:71:78:05:19:7b:2a:4a:50:b1:df:3f:f7:0e:68:67:ab:33:b4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:43:58 2026 GMT
            Not After : Jul  9 13:48:58 2027 GMT
        Subject: CN=61DFDA5D887A2FD8828425B124E53ABA8616F88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:60:b2:8f:a5:ca:80:67:8f:b4:5b:40:45:
                    a5:0e:6e:0a:7d:23:af:d9:48:33:15:8f:d2:af:59:
                    07:15:33:2f:01:3a:0f:37:b5:5d:4e:3e:53:25:c4:
                    bf:14:1c:1d:34:15:d6:13:eb:e4:86:c1:0f:46:ea:
                    01:dc:08:0b:dd:d2:73:d1:be:64:8b:9e:d7:e3:31:
                    59:06:28:da:af:69:7d:fb:67:6f:1d:de:a3:55:ba:
                    9b:0e:c2:e2:28:d5:e9:ab:fd:fa:91:0e:2e:ce:10:
                    50:e0:cf:7e:42:77:74:ae:bb:b9:51:84:e0:02:df:
                    bb:9f:30:bb:a7:5c:22:0b:51:82:cf:3f:11:94:d7:
                    26:9a:9e:2f:e4:46:c1:dd:00:7e:35:be:7a:12:aa:
                    c1:4f:71:25:68:7d:9a:7d:9b:55:35:28:28:34:af:
                    a1:e8:e4:25:3e:57:f2:e5:2f:73:9b:69:3f:4e:ec:
                    86:34:5a:5a:bc:9b:c5:e7:49:5a:d5:96:25:c8:fa:
                    e7:d5:27:56:46:90:2d:a6:23:96:22:cc:03:e4:a1:
                    d3:d0:0b:1d:49:e7:cc:12:ed:21:4f:9a:3b:c3:d1:
                    ab:b8:d9:b6:7c:10:8b:6b:66:a7:12:c3:ea:ff:1f:
                    94:ab:5b:01:07:df:32:ac:aa:64:85:64:43:12:e5:
                    a8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:DA:5D:88:7A:2F:D8:82:84:25:B1:24:E5:3A:BA:86:16:F8:8F
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34322e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:57:eb:bf:57:08:5b:32:5b:90:bb:92:1f:a9:ab:32:f6:f3:
         fc:7a:7b:96:a6:a3:db:aa:20:b9:60:07:c0:e2:94:80:80:48:
         f9:c1:d0:4b:47:6d:26:3d:bb:d8:22:e7:e8:73:1f:37:7b:33:
         91:13:34:3f:a1:8e:80:a2:7c:6f:48:0d:22:5f:68:af:3b:1a:
         db:cc:6e:9d:51:cd:b5:e0:c4:ea:90:3a:3f:69:0c:4e:5f:5c:
         8d:22:59:48:a3:57:12:4d:38:57:b9:30:88:e1:c3:e2:b0:e0:
         a0:46:50:fd:f7:bc:f1:b3:71:ad:b5:b3:29:8e:92:12:5c:d4:
         35:eb:37:37:57:4b:17:65:e1:0c:78:99:4e:3e:ad:70:0f:f4:
         0f:08:d2:15:24:40:2f:cf:d0:54:2a:79:c3:f7:91:26:68:08:
         4b:e1:71:57:3d:38:aa:04:46:b0:16:df:e9:88:bf:58:0c:51:
         01:43:c7:bc:8a:7e:90:d8:9b:6c:10:c5:b6:e9:22:da:71:91:
         2c:6c:6b:26:c1:a2:14:7b:9b:f4:f0:e4:02:8c:4d:7b:7b:c9:
         8b:44:db:1d:77:cf:1e:cc:08:b8:3a:eb:ee:0a:3a:3b:fd:4d:
         a3:c8:98:75:f0:bc:87:2c:56:d6:ec:82:13:b1:cf:32:53:1a:
         aa:6d:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:05 2026 by rpki-client