Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          H7TnAwiG9p/O1DJ+zag78c38iESTeQGCoySYmDVPt8I=
Subject key identifier:   72:21:BD:C9:36:45:D5:18:D8:79:C2:88:65:53:54:31:EE:FC:A5:20
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       47744FB4D7E28F35A3A6C45509BFD51B0EB758FB
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:43 +0000
ROA not before:           Tue 28 Apr 2026 19:31:43 +0000
ROA not after:            Tue 27 Apr 2027 19:36:43 +0000
asID:                     264485
IP address blocks:        189.91.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:74:4f:b4:d7:e2:8f:35:a3:a6:c4:55:09:bf:d5:1b:0e:b7:58:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:43 2026 GMT
            Not After : Apr 27 19:36:43 2027 GMT
        Subject: CN=7221BDC93645D518D879C28865535431EEFCA520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:41:8b:e9:4e:47:d4:3e:ce:0c:a0:c1:a9:
                    fb:35:2b:e0:06:a8:ce:c4:6d:15:ec:6f:81:9c:8d:
                    33:2e:dc:90:f5:d4:0a:71:c5:aa:5d:39:09:c4:26:
                    b9:88:f5:a3:b0:0e:01:64:44:6f:fa:6a:11:f4:bd:
                    fb:ff:42:b5:6d:61:2b:a4:d2:0e:79:61:67:8c:8a:
                    89:ca:94:c7:c3:29:5c:08:f1:d6:71:84:5f:00:02:
                    52:98:22:a8:15:cd:b7:8a:d9:e8:b9:c1:0d:c4:b4:
                    f2:0b:b1:59:ad:d8:61:9d:0e:b5:7c:38:e8:db:2b:
                    2a:cd:24:ca:bd:21:3d:3f:e0:bc:14:f4:3a:aa:93:
                    6c:6c:9e:ba:8c:bb:85:ee:4c:09:01:97:b5:b8:27:
                    82:3a:c7:b0:21:5b:45:99:bd:71:e8:80:5b:22:37:
                    5e:54:be:f8:98:56:60:fe:52:25:90:25:9d:7e:de:
                    e8:89:d7:cf:db:06:09:1d:67:2e:7a:3a:14:14:b7:
                    53:dc:ce:2e:4b:ec:f7:c8:69:18:c4:db:57:1a:79:
                    f5:6e:78:89:02:e2:7d:c9:32:ba:bd:ed:a2:31:2c:
                    e2:68:b7:c3:36:1d:05:95:b0:d5:c2:1d:5b:0c:49:
                    05:74:99:c8:0e:80:1b:8c:3f:05:a2:1e:6c:06:f2:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:BD:C9:36:45:D5:18:D8:79:C2:88:65:53:54:31:EE:FC:A5:20
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:12:72:7c:4d:e1:00:b5:a1:aa:be:2c:31:f2:42:32:43:
         0d:3e:95:07:59:0a:18:be:fe:94:2a:ed:29:a6:a9:eb:7f:11:
         26:ce:d7:bb:19:db:fc:3f:9f:57:b3:f2:6a:1e:06:2d:fe:0b:
         2d:14:ee:7f:14:fa:e2:c6:2d:39:b8:7b:b7:98:e5:b5:ff:c2:
         d2:d4:3f:bf:c4:d5:b4:9d:98:2f:13:2d:6c:3f:0a:4f:37:a6:
         a8:d9:46:93:72:66:8d:00:1a:d8:4c:8d:f3:6b:94:f9:20:b3:
         83:dc:87:d3:f0:ab:30:a7:c3:e8:4e:27:48:60:78:90:5e:8f:
         15:0b:9e:2e:3f:b5:a8:c7:d1:13:c9:49:ef:c2:e5:c4:19:a5:
         ce:d5:1d:78:6d:7d:4b:dc:7a:ad:82:e3:2d:a4:7d:cf:b8:c0:
         d3:84:0b:b2:4e:60:64:fd:4b:09:55:11:26:a1:83:f8:a3:e2:
         80:a1:73:61:a9:87:91:b3:0c:a1:9b:e6:86:13:5d:db:d7:57:
         55:33:a6:86:c9:62:d2:2d:da:01:32:a4:d1:af:08:aa:6f:65:
         2d:b1:bf:ba:60:cc:73:72:9f:99:61:7d:37:6e:db:61:9d:52:
         e3:e8:d4:15:20:68:42:9b:46:2a:f2:7a:a0:f3:a8:70:80:26:
         77:2d:ad:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR3RPtNfijzWjpsRVCb/VGw63WPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNjA0MjgxOTMxNDNaFw0yNzA0MjcxOTM2NDNaMDMxMTAvBgNV
BAMTKDcyMjFCREM5MzY0NUQ1MThEODc5QzI4ODY1NTM1NDMxRUVGQ0E1MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CEGL6U5H1D7ODKDBqfs1K+AG
qM7EbRXsb4GcjTMu3JD11ApxxapdOQnEJrmI9aOwDgFkRG/6ahH0vfv/QrVtYSuk
0g55YWeMionKlMfDKVwI8dZxhF8AAlKYIqgVzbeK2ei5wQ3EtPILsVmt2GGdDrV8
OOjbKyrNJMq9IT0/4LwU9Dqqk2xsnrqMu4XuTAkBl7W4J4I6x7AhW0WZvXHogFsi
N15UvviYVmD+UiWQJZ1+3uiJ18/bBgkdZy56OhQUt1Pczi5L7PfIaRjE21caefVu
eIkC4n3JMrq97aIxLOJot8M2HQWVsNXCHVsMSQV0mcgOgBuMPwWiHmwG8gVjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUciG9yTZF1RjYecKIZVNUMe78pSAwHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzEzODM5MmUzOTMxMmUzMTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9W5AwDQYJKoZIhvcNAQELBQADggEBADoEEnJ8
TeEAtaGqviwx8kIyQw0+lQdZChi+/pQq7Smmqet/ESbO17sZ2/w/n1ez8moeBi3+
Cy0U7n8U+uLGLTm4e7eY5bX/wtLUP7/E1bSdmC8TLWw/Ck83pqjZRpNyZo0AGthM
jfNrlPkgs4Pch9PwqzCnw+hOJ0hgeJBejxULni4/tajH0RPJSe/C5cQZpc7VHXht
fUvceq2C4y2kfc+4wNOEC7JOYGT9SwlVESahg/ij4oChc2Gph5GzDKGb5oYTXdvX
V1UzpobJYtIt2gEypNGvCKpvZS2xv7pgzHNyn5lhfTdu22GdUuPo1BUgaEKbRiry
eqDzqHCAJnctrXE=
-----END CERTIFICATE-----
Generated at Wed May 13 19:44:11 2026 by rpki-client