Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34362e302f32342d3234203d3e20323633363239.roa
File:                     3137392e3132352e34362e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          YNbH2itqYVuKIER12O1lcRRkxmTfZFmI0vmgRrmkhP4=
Subject key identifier:   B2:FD:31:74:DF:B7:A6:76:85:0D:09:04:67:3A:F4:59:B5:04:7F:9C
Certificate issuer:       /CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
Certificate serial:       6A57F6B11217C00BCAB70CE7B6FDB0098ED38F62
Authority key identifier: 8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34362e302f32342d3234203d3e20323633363239.roa
Signing time:             Fri 10 Jul 2026 13:50:03 +0000
ROA not before:           Fri 10 Jul 2026 13:45:03 +0000
ROA not after:            Fri 09 Jul 2027 13:50:03 +0000
asID:                     263629
IP address blocks:        179.125.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:f6:b1:12:17:c0:0b:ca:b7:0c:e7:b6:fd:b0:09:8e:d3:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABDA70622463AEDD1ED720F56E3EB8294F78577
        Validity
            Not Before: Jul 10 13:45:03 2026 GMT
            Not After : Jul  9 13:50:03 2027 GMT
        Subject: CN=B2FD3174DFB7A676850D0904673AF459B5047F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:4f:2c:26:8b:a9:1f:2b:30:e1:83:19:b0:
                    b2:46:13:2c:f6:d8:45:5b:b6:23:26:52:9f:d7:60:
                    aa:ee:17:27:48:67:87:f8:ed:ed:70:2a:3d:48:8d:
                    0a:a9:1b:f2:41:f7:7f:1d:90:5f:6f:cf:44:42:d1:
                    5d:9f:ae:fe:37:65:5d:de:7d:20:a8:fe:fd:9d:56:
                    77:da:86:88:10:c8:a8:cb:71:70:ab:81:b0:62:a4:
                    c0:73:a9:ea:47:69:a5:50:7d:f9:00:3d:d7:aa:08:
                    56:32:88:ae:f6:f2:79:6a:d1:03:93:0d:af:b2:dd:
                    2b:10:a8:ac:57:eb:44:4d:ae:c4:02:8a:0e:1c:e7:
                    b5:23:c3:90:30:fd:d7:74:b0:ce:0d:34:aa:2b:4d:
                    75:6a:70:87:e0:73:40:de:b5:87:4c:86:fa:12:d6:
                    6f:a0:d4:b5:81:11:39:67:6f:e2:da:f8:50:88:b7:
                    84:59:50:c5:59:ba:bb:10:e1:ae:ca:cd:42:31:1b:
                    9f:27:94:c3:d9:f3:02:c8:a3:6b:d6:98:ef:a6:85:
                    06:c5:e3:30:9a:28:af:bf:33:de:37:38:ad:0c:6d:
                    98:59:44:4f:95:be:49:e6:91:80:39:12:56:09:ae:
                    d9:5d:ae:8d:d0:b2:7c:fc:07:1d:db:b6:84:4f:97:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:31:74:DF:B7:A6:76:85:0D:09:04:67:3A:F4:59:B5:04:7F:9C
            X509v3 Authority Key Identifier:
                keyid:8A:BD:A7:06:22:46:3A:ED:D1:ED:72:0F:56:E3:EB:82:94:F7:85:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/8ABDA70622463AEDD1ED720F56E3EB8294F78577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABDA70622463AEDD1ED720F56E3EB8294F78577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34362e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:5e:56:56:53:0e:c9:76:f7:9a:91:b5:16:e8:f4:34:a5:
         a6:04:9b:20:f8:61:08:04:1a:65:27:c7:3c:fe:19:1b:73:db:
         12:56:db:3b:f3:24:1f:cf:43:c4:3f:c7:55:02:4b:81:d2:4e:
         0e:24:97:a5:40:47:d4:ad:8a:8c:98:b1:e1:78:e3:4e:46:ca:
         08:d1:85:93:70:ca:e0:43:24:13:fc:35:4b:d8:60:7d:23:76:
         57:06:f3:9d:48:2a:34:1e:f5:ee:9c:16:71:b2:0f:45:40:80:
         83:23:a1:80:85:b4:64:ac:d7:06:f0:23:42:c9:38:f2:8a:6a:
         fc:39:2a:d2:e9:44:f3:69:bb:bd:38:6a:e0:a2:32:4c:22:77:
         55:f3:34:ac:a0:b9:ae:bd:4d:2a:ce:9c:99:c3:0a:83:ca:d3:
         a3:07:7d:3c:e0:e3:d9:fd:cf:48:9c:a4:ba:78:47:e9:10:bf:
         75:0e:97:b1:76:eb:e2:eb:92:1f:92:81:4c:ed:27:54:f6:34:
         99:cd:d9:63:86:81:e8:14:89:d2:45:33:df:01:1a:3d:2d:bd:
         32:19:ea:15:eb:4b:8a:59:0c:82:22:26:59:2e:f5:f5:0f:e5:
         af:b8:ad:b4:3e:9e:f2:f7:41:83:f3:f6:1b:95:5c:8f:66:25:
         4c:cc:9e:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUalf2sRIXwAvKtwzntv2wCY7Tj2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFCREE3MDYyMjQ2M0FFREQxRUQ3MjBGNTZFM0VCODI5
NEY3ODU3NzAeFw0yNjA3MTAxMzQ1MDNaFw0yNzA3MDkxMzUwMDNaMDMxMTAvBgNV
BAMTKEIyRkQzMTc0REZCN0E2NzY4NTBEMDkwNDY3M0FGNDU5QjUwNDdGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ak8sJoupHysw4YMZsLJGEyz2
2EVbtiMmUp/XYKruFydIZ4f47e1wKj1IjQqpG/JB938dkF9vz0RC0V2frv43ZV3e
fSCo/v2dVnfahogQyKjLcXCrgbBipMBzqepHaaVQffkAPdeqCFYyiK728nlq0QOT
Da+y3SsQqKxX60RNrsQCig4c57Ujw5Aw/dd0sM4NNKorTXVqcIfgc0DetYdMhvoS
1m+g1LWBETlnb+La+FCIt4RZUMVZursQ4a7KzUIxG58nlMPZ8wLIo2vWmO+mhQbF
4zCaKK+/M943OK0MbZhZRE+VvknmkYA5ElYJrtldro3Qsnz8Bx3btoRPl5HXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsv0xdN+3pnaFDQkEZzr0WbUEf5wwHwYDVR0j
BBgwFoAUir2nBiJGOu3R7XIPVuPrgpT3hXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhOTlpuWWNBZGROQ0JuVW1uV3JDRzRhajJvdkpaSGJKcTlNbVJndzlj
WGsvMC84QUJEQTcwNjIyNDYzQUVERDFFRDcyMEY1NkUzRUI4Mjk0Rjc4NTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQkRBNzA2MjI0NjNBRURE
MUVENzIwRjU2RTNFQjgyOTRGNzg1NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoTk5ablljQWRkTkNCblVtbldyQ0c0YWoyb3ZKWkhiSnE5TW1SZ3c5Y1hrLzAv
MzEzNzM5MmUzMTMyMzUyZTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfS4wDQYJKoZIhvcNAQELBQADggEBAJ5gXlZW
Uw7JdveakbUW6PQ0paYEmyD4YQgEGmUnxzz+GRtz2xJW2zvzJB/PQ8Q/x1UCS4HS
Tg4kl6VAR9StioyYseF4405GygjRhZNwyuBDJBP8NUvYYH0jdlcG851IKjQe9e6c
FnGyD0VAgIMjoYCFtGSs1wbwI0LJOPKKavw5KtLpRPNpu704auCiMkwid1XzNKyg
ua69TSrOnJnDCoPK06MHfTzg49n9z0icpLp4R+kQv3UOl7F26+Lrkh+SgUztJ1T2
NJnN2WOGgegUidJFM98BGj0tvTIZ6hXrS4pZDIIiJlku9fUP5a+4rbQ+nvL3QYPz
9huVXI9mJUzMnvo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:22:48 2026 by rpki-client