Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34352e302f32342d3234203d3e20323633363239.roa
File:                     3137392e3132352e34352e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          YmxHm1fzW9ML4x6M9akX7kA/viiPnZYlvq5lu6F1YR0=
Subject key identifier:   CF:0F:27:B0:46:B8:68:3D:86:90:33:5F:9C:5D:1C:90:F1:DD:39:3A
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       27943350008EDF1A9C34CA33F13523CFDD6649E2
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34352e302f32342d3234203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:49:51 +0000
ROA not before:           Fri 10 Jul 2026 13:44:51 +0000
ROA not after:            Fri 09 Jul 2027 13:49:51 +0000
asID:                     263629
IP address blocks:        179.125.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:94:33:50:00:8e:df:1a:9c:34:ca:33:f1:35:23:cf:dd:66:49:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:44:51 2026 GMT
            Not After : Jul  9 13:49:51 2027 GMT
        Subject: CN=CF0F27B046B8683D8690335F9C5D1C90F1DD393A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:e8:94:58:5d:12:9c:10:6d:5c:c2:da:58:
                    da:73:c4:2d:5e:e7:58:10:42:30:35:0f:fa:35:3f:
                    83:2f:60:a0:a5:e2:80:9a:46:59:b8:3f:be:a4:13:
                    72:1e:e6:91:7f:98:6b:b0:b1:60:74:af:ed:70:c8:
                    f8:ba:ae:42:b7:2b:ad:72:fa:36:ae:0b:55:4b:72:
                    32:d2:20:b6:60:4f:4f:36:4a:f2:91:1f:b1:35:16:
                    8f:15:40:1e:aa:5e:c7:1a:b2:b1:77:2a:96:91:f6:
                    c0:4a:e5:7a:a3:e8:79:32:7e:38:f5:15:62:d2:df:
                    c8:15:54:5b:10:fd:d2:5d:67:8e:e0:0b:15:43:95:
                    0c:74:99:82:a9:6b:63:dd:40:b3:d7:bb:ef:5a:79:
                    f6:2e:f8:35:e4:b5:39:03:6a:12:af:d1:16:52:7c:
                    47:4e:4e:3f:b0:2a:5d:a4:50:ba:71:57:9e:ef:fa:
                    58:19:cc:54:a5:4a:1f:97:59:2a:aa:2b:6f:db:6f:
                    b3:3e:d2:89:4f:a6:b8:3f:87:2c:72:e9:9f:c9:0f:
                    a0:c4:d6:bd:db:91:2c:c4:1f:cb:ff:6b:06:fa:0a:
                    74:22:c2:92:8d:b6:2c:0d:fa:33:90:5f:72:f2:d9:
                    2b:0f:43:28:54:35:54:00:26:a8:e4:97:77:77:e4:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:27:B0:46:B8:68:3D:86:90:33:5F:9C:5D:1C:90:F1:DD:39:3A
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34352e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:5b:6a:49:dc:fd:d5:d8:5e:b8:71:44:14:b2:23:37:51:
         eb:6b:04:12:10:93:3d:fc:56:d2:8e:23:3f:c3:e5:40:09:24:
         9f:c9:a2:5e:ba:14:be:04:3c:30:3c:eb:c3:ee:3e:3c:42:f8:
         e4:d5:a7:57:c6:54:3b:0c:c7:f8:3e:80:3f:ea:fe:a9:72:c1:
         bb:d4:cf:45:44:d0:73:57:15:be:da:00:96:db:e9:25:34:c2:
         5b:62:88:83:e4:45:4c:64:10:6f:da:41:66:b5:2b:7a:d4:67:
         b0:ad:e6:9e:51:e4:5d:e9:a2:b1:0a:a1:75:73:1d:9d:67:bd:
         35:04:18:3f:21:6d:7f:a7:9a:1f:1b:62:73:df:f1:9f:53:ed:
         2f:74:e0:4f:f6:b5:77:b3:35:4b:b5:5b:a9:66:ad:e7:81:ce:
         72:11:24:2a:29:c6:26:29:0b:ba:f3:7d:29:77:53:d7:20:a5:
         cc:88:ee:4b:b7:ab:ce:ec:ea:22:42:4c:89:84:82:09:36:4d:
         11:8d:ad:7c:b3:61:79:fa:08:04:a0:6b:c4:53:cd:37:bc:f9:
         67:a5:f3:23:f2:2a:86:e0:42:ce:03:e5:73:a2:55:06:39:c0:
         f6:9e:65:e2:76:40:d3:0d:5d:45:e9:be:56:e1:06:03:c5:9d:
         fb:0d:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:17 2026 by rpki-client