Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34342e302f32332d3233203d3e20323633363239.roa
File:                     3137392e3132352e34342e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          sYpRpVTtLqN/8ajCKQ4aAv3KoZ7ArUdoJ+xYpfYMvc8=
Subject key identifier:   6B:E2:59:6D:00:76:A6:87:A7:FE:41:F8:71:65:95:17:B7:14:B0:96
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       312A3BEC5EA5827393F14ABD6DF2C1C324ADF2AC
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34342e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:49:39 +0000
ROA not before:           Fri 10 Jul 2026 13:44:39 +0000
ROA not after:            Fri 09 Jul 2027 13:49:39 +0000
asID:                     263629
IP address blocks:        179.125.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2a:3b:ec:5e:a5:82:73:93:f1:4a:bd:6d:f2:c1:c3:24:ad:f2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:44:39 2026 GMT
            Not After : Jul  9 13:49:39 2027 GMT
        Subject: CN=6BE2596D0076A687A7FE41F871659517B714B096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:32:c8:7c:a6:d1:e6:ba:d7:3b:e4:7a:cf:
                    32:49:49:81:bd:53:57:a7:f1:78:0e:83:b8:d1:d1:
                    35:d6:c3:46:cf:35:10:cd:ef:29:be:ee:67:28:66:
                    51:2c:4d:f9:6e:09:59:01:00:42:3f:78:1e:d9:58:
                    3f:04:41:7e:10:c4:5c:4f:eb:a9:c1:f8:46:4a:57:
                    d7:cf:27:72:a6:30:4e:14:b2:87:55:5c:17:71:ac:
                    3c:e4:65:dc:62:b9:55:8e:c6:08:c4:d6:97:6b:5c:
                    56:c9:3b:f2:a5:f3:be:92:25:33:68:42:dc:5d:a9:
                    50:12:65:38:03:1b:59:0b:5b:4d:a4:93:85:db:94:
                    03:63:9e:b6:a0:ef:14:1e:1d:96:8d:a4:a9:5b:8b:
                    6c:22:8b:f3:86:27:68:09:e6:4c:63:14:5d:22:04:
                    28:8e:77:68:68:5b:37:81:cc:e0:dd:8a:3a:3e:6b:
                    0f:ab:cc:de:fa:ff:26:d0:c6:22:2e:2b:d4:66:4e:
                    88:20:96:37:72:12:0c:9f:f3:3e:71:1a:cb:fc:55:
                    42:1d:23:0b:55:e3:31:d9:92:6e:4a:15:40:95:32:
                    9f:3a:4b:89:76:df:9b:f8:96:4e:ce:42:9a:4b:0c:
                    a1:56:78:7e:0a:20:e5:24:f4:43:51:bc:5a:c0:b4:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:59:6D:00:76:A6:87:A7:FE:41:F8:71:65:95:17:B7:14:B0:96
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34342e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:eb:56:d9:c3:94:07:86:57:27:ab:c5:e5:ce:a2:b5:1e:
         2e:e3:a9:36:f7:93:82:73:f8:db:da:5e:f4:f2:69:99:87:94:
         72:3a:d6:90:72:3f:cf:71:65:43:0a:0e:3c:66:5e:8b:cc:bd:
         67:33:96:3d:ee:03:bf:2a:b7:9d:78:d2:10:52:fe:cf:25:06:
         70:97:e0:31:05:e8:65:02:e8:15:c4:cf:e8:e8:b1:2c:b5:15:
         d5:3f:3c:bc:0a:22:8f:6f:1c:a1:b2:f6:79:b5:9b:48:02:39:
         4e:eb:19:e2:96:ad:8d:7f:42:b9:c9:b4:f6:a5:5b:c6:d5:0c:
         dd:e1:95:b0:2b:d9:6a:b6:89:bb:5f:bd:ba:bd:48:77:66:b8:
         f9:12:d3:a5:b9:9f:65:29:51:6f:19:95:6f:e4:09:8a:53:ba:
         25:2c:6c:e0:35:67:01:ed:15:6b:ec:df:9d:8d:38:e8:da:82:
         e1:4f:9b:16:f9:12:d0:37:e6:02:1a:b3:0a:2f:65:a1:c9:53:
         9d:8a:3d:5e:e9:bf:90:b0:58:4e:c6:16:26:83:4e:a2:9d:fe:
         8d:92:36:38:af:4b:5f:c1:23:b5:9b:2c:f4:f2:f2:b6:db:c9:
         1f:ca:12:8c:25:6d:2c:4a:8d:3a:bc:14:8b:19:7f:c7:40:be:
         74:1d:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:08 2026 by rpki-client