Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          tUch7iS+L+ZfMH9tTfLaX04064meiS6iC5LRe+X8FDI=
Subject key identifier:   89:FD:0E:1A:DB:84:79:C2:52:C2:B3:3F:6F:2B:45:45:3B:39:77:21
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       4B737400CF7FA2C17D0A081F84E024C704BC5F6A
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:43 +0000
ROA not before:           Tue 28 Apr 2026 19:31:43 +0000
ROA not after:            Tue 27 Apr 2027 19:36:43 +0000
asID:                     264485
IP address blocks:        189.91.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:73:74:00:cf:7f:a2:c1:7d:0a:08:1f:84:e0:24:c7:04:bc:5f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:43 2026 GMT
            Not After : Apr 27 19:36:43 2027 GMT
        Subject: CN=89FD0E1ADB8479C252C2B33F6F2B45453B397721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:57:4d:48:d6:e9:60:97:69:d4:85:81:13:
                    21:d9:c5:0f:4b:96:89:13:6c:e6:2b:c3:c6:5b:4a:
                    e9:ca:d2:53:ae:e4:31:ea:ef:d5:1c:15:6d:c7:72:
                    de:a1:f8:22:92:11:38:ab:b7:d7:22:c8:6f:98:3a:
                    67:67:d6:cc:fe:d1:d4:76:e8:c1:89:dc:2c:83:0a:
                    c4:9e:e8:28:31:bb:30:f2:29:c3:44:09:dd:5d:c4:
                    52:12:f7:17:34:e9:87:48:a8:18:a6:97:d7:5a:5a:
                    a5:b4:fd:16:d7:93:f6:80:59:cf:64:a1:38:06:62:
                    b6:49:a8:45:b5:ba:e9:30:b5:c2:ca:1a:5e:67:06:
                    23:b8:ed:8f:b4:ca:0e:9d:88:27:9b:6f:68:37:63:
                    bb:3f:0f:47:59:20:d4:36:c9:8b:77:dc:d8:da:78:
                    f1:02:fc:ae:5a:b1:d4:6e:c5:9f:18:ca:8d:bf:5c:
                    53:ac:c9:a9:5a:56:19:7f:04:50:b9:3b:5c:38:95:
                    67:76:a4:89:3c:b4:a5:f5:c3:c5:6c:1d:0e:ea:d6:
                    de:71:08:f6:54:8e:9a:bc:6b:74:c4:b4:68:79:e7:
                    e9:3e:8f:fe:dd:9e:f7:23:db:9d:b6:1c:f1:32:b4:
                    98:c3:8c:71:fb:a2:ee:f7:2e:b5:ab:1f:25:66:a1:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FD:0E:1A:DB:84:79:C2:52:C2:B3:3F:6F:2B:45:45:3B:39:77:21
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:2d:8a:f2:60:5e:0c:06:f0:d8:fb:5f:3d:9e:9d:05:31:
         5b:fd:40:6f:10:21:14:db:a0:8c:3d:f7:14:19:18:d9:2a:1a:
         8f:42:da:ed:ef:13:fc:7b:d1:04:d1:ca:27:cd:a0:5c:2f:fb:
         a5:7c:39:2f:5b:17:4a:30:c1:1d:b9:c5:44:8a:a1:4e:fc:c2:
         f7:63:2f:2c:30:5c:d5:b3:e8:39:8e:a0:e7:96:ec:ee:66:ce:
         99:0c:ef:0e:b9:90:63:2f:ce:26:8e:14:53:62:32:1f:15:0e:
         e4:f0:f4:ec:43:39:82:9d:b0:63:6f:b8:22:d4:ef:b2:86:51:
         06:62:94:ed:db:e4:b8:36:82:0a:e8:0e:b5:03:7a:7f:64:4d:
         cd:d4:45:f1:bc:2b:f7:7b:80:95:f5:57:af:34:d9:41:2b:91:
         e9:e7:78:99:7c:67:5c:31:b6:42:f1:30:d1:20:19:59:e8:18:
         6e:03:ea:35:f6:de:25:49:1a:4b:0e:d9:c9:aa:55:e3:3d:40:
         12:1b:a5:a2:d1:77:fb:db:87:5b:60:cc:4a:26:87:a0:b5:14:
         c4:a8:77:c3:e2:46:5a:b9:5b:27:17:94:a3:4c:b2:f2:71:40:
         ef:68:6e:e3:e2:24:32:6b:03:d8:5d:ac:56:32:78:a0:6b:41:
         11:e2:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:59:27 2026 by rpki-client