Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34342e302f32342d3234203d3e20323633363239.roa
File:                     3137392e3132352e34342e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          8Wj3jNd/5IKbCYY5kA74NLeNsacpqwMjgp8LIHV/g50=
Subject key identifier:   49:C1:82:A0:CB:43:E0:2A:23:5A:1E:D0:A4:8A:51:51:C3:E7:AC:CB
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       15CFD91956431F194079FCE82CC17E467C8D138E
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34342e302f32342d3234203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:49:46 +0000
ROA not before:           Fri 10 Jul 2026 13:44:46 +0000
ROA not after:            Fri 09 Jul 2027 13:49:46 +0000
asID:                     263629
IP address blocks:        179.125.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cf:d9:19:56:43:1f:19:40:79:fc:e8:2c:c1:7e:46:7c:8d:13:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:44:46 2026 GMT
            Not After : Jul  9 13:49:46 2027 GMT
        Subject: CN=49C182A0CB43E02A235A1ED0A48A5151C3E7ACCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:ac:f7:b5:da:3f:49:ea:9e:12:bc:ca:ae:
                    95:da:52:66:21:d2:85:0b:0b:5f:db:15:ec:92:3f:
                    59:76:86:7d:13:af:78:9c:af:4a:8e:76:f9:88:ca:
                    d8:5a:1a:5f:ba:42:7b:8f:1e:f5:6f:d6:fd:8f:7a:
                    72:65:8d:19:3a:5e:2f:ac:12:db:31:62:0d:61:d8:
                    d5:83:cd:c0:df:5b:5d:56:58:4c:6f:0a:21:ef:c4:
                    e8:0c:d5:e4:5b:8c:9b:03:d6:1d:e2:65:d6:09:c7:
                    59:02:c3:c8:2a:5f:8e:11:bb:b2:66:54:48:85:dc:
                    29:08:e7:43:8e:1b:54:ce:d1:c5:a0:14:1a:20:77:
                    13:8b:9e:80:06:f9:5c:40:44:6c:0f:27:60:7e:73:
                    57:38:b6:48:10:45:5f:c8:27:61:c9:4f:17:91:f3:
                    19:2c:0a:88:70:3d:c3:6a:03:ba:50:fc:09:61:57:
                    d7:e7:14:3a:dc:eb:6d:cb:ec:3a:83:11:b1:ed:e9:
                    d7:79:e0:55:a4:9d:4b:55:49:06:68:57:2f:78:b6:
                    02:f0:11:06:d9:42:1b:28:c2:89:98:0a:c3:9b:8d:
                    ed:e4:bd:c6:5c:6a:d8:81:30:1d:69:56:a1:ac:87:
                    78:e1:a7:c6:c0:03:d4:f0:60:69:1c:a0:4d:75:50:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:82:A0:CB:43:E0:2A:23:5A:1E:D0:A4:8A:51:51:C3:E7:AC:CB
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34342e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:63:05:f2:63:a9:70:23:d5:50:bd:7d:06:42:09:d7:8d:43:
         c7:51:1f:86:81:74:f1:51:00:df:a7:2f:a3:65:34:66:a1:78:
         e1:52:a9:43:9a:97:16:85:96:51:d8:df:ee:6f:8f:e9:31:6d:
         45:1f:bd:06:74:7b:9f:61:9a:de:a5:f6:63:40:a6:e1:1a:41:
         38:b8:e5:c6:63:cc:e6:a0:3b:b6:8b:fd:5b:6e:30:03:87:a6:
         30:cc:94:d6:be:dc:69:65:88:34:4e:92:23:ce:f0:1d:d8:db:
         bf:34:f8:ec:9c:71:c8:be:c8:40:1f:49:ef:44:bc:b2:2e:e6:
         0e:4a:53:f0:b4:2b:5a:91:f3:cc:aa:47:9a:3d:b7:70:19:02:
         d7:93:fe:70:9a:51:fb:00:7d:81:7a:3f:a0:5c:2e:71:b3:71:
         83:c8:0a:7c:50:84:71:d5:bf:0e:5d:57:fa:72:bd:11:e5:89:
         40:ee:26:43:df:13:53:7b:57:9b:8c:04:f7:22:5f:2f:08:19:
         9d:4c:06:c6:51:89:23:09:d1:97:bf:47:71:a0:78:ec:08:6c:
         60:1c:e1:6b:2e:5c:52:58:1d:bf:b3:cb:4e:d9:af:97:be:1b:
         92:96:4a:a0:b5:9d:de:26:6c:99:4f:8a:e6:f5:42:d2:32:0a:
         88:d4:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:28 2026 by rpki-client