Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34322e302f32342d3234203d3e20323633363239.roa
File:                     3137392e3132352e34322e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          QEEvJL1q4p81ouclGgu8OWm/sy6cO0cOWsRIBgkyXUk=
Subject key identifier:   67:B4:8B:7A:DD:E6:37:19:E7:EE:20:24:70:D6:0C:D4:7F:01:AF:F3
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       4133877217A7B84074DDFFB2B09DD38AB3B5FF69
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34322e302f32342d3234203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:49:03 +0000
ROA not before:           Fri 10 Jul 2026 13:44:03 +0000
ROA not after:            Fri 09 Jul 2027 13:49:03 +0000
asID:                     263629
IP address blocks:        179.125.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:87:72:17:a7:b8:40:74:dd:ff:b2:b0:9d:d3:8a:b3:b5:ff:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:44:03 2026 GMT
            Not After : Jul  9 13:49:03 2027 GMT
        Subject: CN=67B48B7ADDE63719E7EE202470D60CD47F01AFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:ac:18:d7:9b:b6:9d:9c:fc:d8:44:95:ed:
                    92:d2:fe:62:bd:23:8b:5b:39:5d:64:48:9f:57:0f:
                    7e:db:6a:78:e1:60:8a:8e:63:42:8d:f2:5d:0e:02:
                    c5:95:e8:fe:c7:50:da:a8:ba:81:2c:77:1b:dc:37:
                    c0:01:fb:6f:23:fb:e8:2f:28:83:82:8b:7e:7f:70:
                    d9:92:65:39:96:00:4b:8e:a2:44:1a:08:97:de:3f:
                    02:cb:17:e9:cc:4c:12:6f:0e:68:a4:08:a7:c2:e5:
                    30:87:da:6e:da:64:b1:87:90:c1:18:dd:fc:3a:1b:
                    30:77:6e:8f:fa:df:aa:6a:a2:0d:bf:a1:a2:27:a2:
                    d7:8b:f7:85:2b:08:31:de:1f:ef:a9:02:70:56:95:
                    47:fe:5c:9f:1a:a8:4d:e0:8b:59:14:f8:d4:96:f9:
                    e1:30:fd:cd:d5:0e:42:ea:73:d2:70:6c:6a:ac:65:
                    f0:d0:34:44:b7:94:f3:09:1c:37:8e:62:1c:75:f1:
                    92:0a:9e:b7:48:ee:5a:19:d9:02:ca:91:eb:04:e3:
                    c8:79:4a:d2:5c:e0:29:34:5f:48:04:d9:df:a8:56:
                    56:90:7b:d4:25:cf:b6:05:87:bb:58:1e:c5:4b:5b:
                    69:57:07:e8:ef:84:ef:19:47:23:ef:83:fc:75:9d:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:8B:7A:DD:E6:37:19:E7:EE:20:24:70:D6:0C:D4:7F:01:AF:F3
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34322e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4f:2c:58:fe:a0:d7:0a:71:fc:13:c6:db:78:5b:dd:30:bd:
         bf:64:04:5b:f1:e9:f1:fc:ce:01:77:f4:a2:d4:1c:dd:99:3d:
         ef:88:24:10:4c:e3:ec:71:c6:96:a7:3a:19:1b:20:10:8c:11:
         68:24:92:28:ce:ff:47:ec:2b:17:34:47:50:43:d8:6f:3c:67:
         c7:5e:44:50:af:6a:fe:51:6e:3f:14:d3:44:c4:89:85:69:96:
         05:86:e2:2b:44:ba:c8:c6:aa:64:eb:87:20:b9:72:3d:96:45:
         d1:67:76:b9:1c:93:9d:d5:0d:e1:82:69:59:2a:49:3a:09:bf:
         dc:2d:34:cf:23:a8:f5:c3:19:e1:fa:f9:ed:c6:8d:a2:9a:6a:
         3f:91:bb:1b:22:f0:fb:04:2d:8f:c1:69:99:d3:6e:35:a4:27:
         ef:6f:61:71:55:d5:a3:fb:fc:4c:4e:73:b2:3c:20:5d:5b:84:
         c5:13:83:f5:4a:a0:f6:0d:c9:25:a7:4e:99:eb:6b:98:e1:48:
         92:4b:11:62:f2:f3:ec:d6:9c:e2:c5:d2:48:6e:96:e3:a0:82:
         5c:5d:06:44:e4:a0:c7:af:c7:03:28:af:38:c6:31:bc:d9:6f:
         8f:27:b0:2d:45:93:fe:d5:85:58:34:dd:06:21:16:89:57:4b:
         b8:ef:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:33 2026 by rpki-client