Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32302d3230203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32302d3230203d3e20323634343835.roa (raw, json)
Hash identifier:          YZ5zi75ClCGTGZKH5kxeD4/4ioGwDirn/ybX8YZBkLo=
Subject key identifier:   48:71:E9:39:F9:E3:4F:B0:E8:70:51:E6:1B:C7:A8:9F:6B:31:38:A4
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       189A5C7A6FDD53A21C1A77D2937AB752ABC2CA04
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32302d3230203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:44 +0000
ROA not before:           Tue 28 Apr 2026 19:31:44 +0000
ROA not after:            Tue 27 Apr 2027 19:36:44 +0000
asID:                     264485
IP address blocks:        189.91.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9a:5c:7a:6f:dd:53:a2:1c:1a:77:d2:93:7a:b7:52:ab:c2:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:44 2026 GMT
            Not After : Apr 27 19:36:44 2027 GMT
        Subject: CN=4871E939F9E34FB0E87051E61BC7A89F6B3138A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:00:cd:42:e0:d6:7e:0f:08:88:29:1c:9e:
                    ff:69:94:e9:b4:68:82:27:6f:4c:7c:d8:56:92:c5:
                    b5:00:e4:0b:37:4f:00:08:d1:2c:9a:09:62:fa:c9:
                    f2:71:3e:57:f4:58:0c:ff:51:01:bf:df:0f:fa:fb:
                    1a:a6:e7:81:c9:e8:dd:3f:61:3e:9e:fd:09:f3:d8:
                    0f:60:d2:d3:75:14:3f:b3:79:6a:d6:28:da:9b:d1:
                    2e:cf:9a:a6:8e:8d:13:02:56:4d:94:3f:b1:49:71:
                    0c:89:19:2d:6a:97:bf:d4:01:a0:44:94:72:60:bd:
                    fd:45:4e:52:f7:ec:16:6c:74:d6:69:7d:35:ac:69:
                    00:82:69:c3:1c:ac:81:58:1c:47:14:32:e6:47:2d:
                    c3:87:a1:ce:4b:a3:37:7d:fe:7a:a1:e5:82:d6:fa:
                    c3:b0:2b:ff:d8:87:c4:7c:a9:b7:c3:8e:fa:7f:29:
                    99:e4:e0:f0:34:c9:6d:4e:dc:9d:2b:70:3e:c2:87:
                    c5:76:e5:33:1d:85:6c:d5:b5:5c:cf:dd:fb:96:1e:
                    58:ba:b6:1f:54:d6:77:5f:7a:ee:1f:00:82:21:91:
                    f1:45:45:07:4e:5e:06:0e:3d:53:2f:36:c3:e6:b6:
                    17:b6:c4:7c:d5:e0:bd:5c:49:d7:80:08:50:d6:d9:
                    4c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:71:E9:39:F9:E3:4F:B0:E8:70:51:E6:1B:C7:A8:9F:6B:31:38:A4
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32302d3230203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dd:96:79:6b:8f:39:79:e8:63:31:69:ec:d2:b6:ac:a3:62:db:
         81:07:52:32:e9:ce:ed:5e:0a:21:35:9c:a5:50:dd:0f:de:81:
         9f:6a:d5:c9:5a:ef:35:46:81:57:2a:0c:59:23:d7:01:3f:ae:
         ea:91:2d:5e:9c:49:52:60:8c:bf:28:a7:d8:a2:87:11:3a:cc:
         8a:8d:4c:0c:ca:35:a9:fd:d5:fc:ff:98:dd:1b:23:fb:66:f6:
         a2:b1:21:48:c1:ee:40:02:7b:68:c2:df:d1:b5:22:88:d4:ec:
         9b:1a:6d:7f:57:db:7f:92:06:a5:e3:a3:3d:b1:e8:f6:f4:16:
         60:9c:e6:9b:be:4a:fa:cb:87:ba:b5:d0:8c:fb:54:e9:de:72:
         ec:45:3a:b9:d9:08:a0:a6:c3:40:40:3e:3c:f2:10:86:7a:69:
         e5:4b:4c:b6:55:73:61:96:7b:d2:41:9b:07:ce:94:83:0e:39:
         1a:4d:ed:f9:04:3a:00:15:27:9f:2c:50:c1:14:36:8a:13:2b:
         f5:99:da:28:3d:64:2e:52:c9:b2:35:89:bd:d3:05:14:df:75:
         49:e0:1a:a7:a1:07:a7:69:d0:16:bc:e9:00:1e:20:9c:d2:2f:
         6f:b8:d2:8d:11:c5:1f:95:1b:05:ed:b5:78:83:94:63:09:9f:
         24:31:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:05:40 2026 by rpki-client