Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34362e302f32332d3233203d3e20323633363239.roa
File:                     3137392e3132352e34362e302f32332d3233203d3e20323633363239.roa (raw, json)
Hash identifier:          qbtvsisgEPjIF8PkvZkJIuIgcdmENPeNITJPLD0dMIQ=
Subject key identifier:   3A:04:B5:6D:B5:CA:91:45:13:A8:D9:56:23:70:5E:A5:23:AF:C0:75
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       53DDB5260799064524B91618AFE9CCEAD4554F70
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34362e302f32332d3233203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:49:56 +0000
ROA not before:           Fri 10 Jul 2026 13:44:56 +0000
ROA not after:            Fri 09 Jul 2027 13:49:56 +0000
asID:                     263629
IP address blocks:        179.125.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dd:b5:26:07:99:06:45:24:b9:16:18:af:e9:cc:ea:d4:55:4f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:44:56 2026 GMT
            Not After : Jul  9 13:49:56 2027 GMT
        Subject: CN=3A04B56DB5CA914513A8D95623705EA523AFC075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:a5:d7:4d:46:dd:ca:31:d8:8f:a0:76:b2:
                    07:75:89:5e:92:65:ae:45:41:71:56:ad:44:5b:f3:
                    e1:93:c1:b6:fe:8c:a6:20:6d:82:58:20:6f:8a:58:
                    56:f9:31:95:11:a9:48:0f:94:4d:63:f1:43:8f:36:
                    a4:ed:37:dc:f0:42:7e:f7:c8:5f:d6:9e:d7:39:66:
                    d0:8d:bf:1b:47:a5:b7:7d:bd:67:e6:a5:ff:57:ee:
                    19:4d:13:76:5d:ab:d7:83:27:b6:3e:71:1d:47:2d:
                    63:f3:c6:a7:c5:db:2e:1e:37:f5:44:fe:6e:a8:3a:
                    1a:f9:74:31:26:af:f2:98:87:ae:4c:73:d9:16:e1:
                    30:87:0c:57:58:f5:3a:01:39:7f:78:9c:43:8c:a2:
                    49:fa:d5:75:3e:ef:fa:ae:ae:fe:8f:6c:c0:4f:2f:
                    5e:de:f2:cc:95:22:c5:bb:23:6b:74:02:e4:07:d8:
                    ae:69:3c:c4:ab:ed:04:5a:ad:f6:4a:08:69:ae:c9:
                    ba:04:e8:75:77:f0:e2:cf:26:9d:db:a0:81:97:7f:
                    90:c8:13:d5:66:1f:63:e0:5f:4f:99:ff:10:07:1d:
                    73:d3:db:d9:11:a5:8b:7f:6d:e3:fe:6e:ae:72:07:
                    76:c0:d1:70:cb:f5:4a:91:72:de:b2:a7:f9:c2:91:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:B5:6D:B5:CA:91:45:13:A8:D9:56:23:70:5E:A5:23:AF:C0:75
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34362e302f32332d3233203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:ec:9f:f3:bf:3a:73:7d:0a:1d:45:b1:e5:1a:51:e1:1d:
         77:ef:6f:52:0d:9c:b8:fd:27:37:aa:d2:f6:dd:c7:f8:be:23:
         ce:36:fc:a9:9b:b1:ab:0b:68:28:a5:e8:55:c8:52:5c:83:91:
         d5:f6:47:07:20:02:90:5b:2c:48:75:16:e4:70:91:63:b5:b5:
         ae:1d:20:2d:1d:11:e6:ce:1e:b6:22:8f:f4:3b:37:73:0e:f3:
         c7:03:87:9d:cb:01:7d:74:39:db:0f:8e:5c:d6:31:d6:76:85:
         b4:45:ca:f2:a7:d2:e7:b1:7a:e2:b6:46:80:23:7a:8b:88:b3:
         7f:76:26:3a:1a:7d:c5:3d:68:07:b7:15:eb:76:87:71:68:83:
         de:e7:61:67:4a:62:de:98:92:5e:e5:16:8a:56:e9:f5:f4:8a:
         b4:42:d2:3a:4e:e1:58:63:be:ee:28:12:58:99:c8:d6:5b:e1:
         1c:54:40:3e:dd:e7:d3:79:84:0b:24:1c:20:02:e0:5b:6d:40:
         38:78:30:32:3f:2f:b5:27:92:0f:b9:4f:c9:f2:64:28:29:c5:
         cc:21:59:02:85:b4:ad:c9:64:29:e3:99:4a:d3:31:c8:cc:a0:
         d3:b3:61:c0:0b:de:22:e5:eb:73:3b:3b:a6:61:07:e8:67:af:
         9a:2a:94:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU921JgeZBkUkuRYYr+nM6tRVT3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCREE3MDYyMjQ2M0FFREQxRUQ3MjBGNTZFM0VCODI5
NEY3ODU3NzAeFw0yNjA3MTAxMzQ0NTZaFw0yNzA3MDkxMzQ5NTZaMDMxMTAvBgNV
BAMTKDNBMDRCNTZEQjVDQTkxNDUxM0E4RDk1NjIzNzA1RUE1MjNBRkMwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFaXXTUbdyjHYj6B2sgd1iV6S
Za5FQXFWrURb8+GTwbb+jKYgbYJYIG+KWFb5MZURqUgPlE1j8UOPNqTtN9zwQn73
yF/Wntc5ZtCNvxtHpbd9vWfmpf9X7hlNE3Zdq9eDJ7Y+cR1HLWPzxqfF2y4eN/VE
/m6oOhr5dDEmr/KYh65Mc9kW4TCHDFdY9ToBOX94nEOMokn61XU+7/qurv6PbMBP
L17e8syVIsW7I2t0AuQH2K5pPMSr7QRarfZKCGmuyboE6HV38OLPJp3boIGXf5DI
E9VmH2PgX0+Z/xAHHXPT29kRpYt/beP+bq5yB3bA0XDL9UqRct6yp/nCke/HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOgS1bbXKkUUTqNlWI3BepSOvwHUwHwYDVR0j
BBgwFoAUir2nBiJGOu3R7XIPVuPrgpT3hXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC84QUJEQTcwNjIyNDYzQUVERDFFRDcyMEY1NkUzRUI4Mjk0Rjc4NTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkRBNzA2MjI0NjNBRURE
MUVENzIwRjU2RTNFQjgyOTRGNzg1NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzEzNzM5MmUzMTMyMzUyZTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzfS4wDQYJKoZIhvcNAQELBQADggEBAHVv7J/z
vzpzfQodRbHlGlHhHXfvb1INnLj9Jzeq0vbdx/i+I842/KmbsasLaCil6FXIUlyD
kdX2RwcgApBbLEh1FuRwkWO1ta4dIC0dEebOHrYij/Q7N3MO88cDh53LAX10OdsP
jlzWMdZ2hbRFyvKn0uexeuK2RoAjeouIs392JjoafcU9aAe3Fet2h3Fog97nYWdK
Yt6Ykl7lFopW6fX0irRC0jpO4Vhjvu4oEliZyNZb4RxUQD7d59N5hAskHCAC4Ftt
QDh4MDI/L7Unkg+5T8nyZCgpxcwhWQKFtK3JZCnjmUrTMcjMoNOzYcAL3iLl63M7
O6ZhB+hnr5oqlAo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:06 2026 by rpki-client