Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          ULbo7YLib8iBOI23+db4NnkPVU8WeJz/K31tqqtdx7w=
Subject key identifier:   F5:93:DB:5A:EC:B7:A8:E5:49:1D:1F:B8:33:18:34:8F:71:1A:0B:5C
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       124557FDEE312CC90E542A21CF982F346E4E0111
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:42 +0000
ROA not before:           Tue 28 Apr 2026 19:31:42 +0000
ROA not after:            Tue 27 Apr 2027 19:36:42 +0000
asID:                     264485
IP address blocks:        189.91.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:45:57:fd:ee:31:2c:c9:0e:54:2a:21:cf:98:2f:34:6e:4e:01:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:42 2026 GMT
            Not After : Apr 27 19:36:42 2027 GMT
        Subject: CN=F593DB5AECB7A8E5491D1FB83318348F711A0B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:8a:c1:80:38:5a:b6:e4:fc:3e:e0:85:33:
                    ca:f9:4b:03:b6:5e:b1:82:76:a9:03:cb:95:e9:12:
                    77:fa:77:bf:5a:51:c4:17:d7:98:9c:7f:51:af:01:
                    c3:af:ad:f3:b6:1f:a1:23:c4:42:90:96:e0:bd:ea:
                    eb:fa:e2:e1:3d:9d:66:a4:5d:f9:f2:6b:29:58:ae:
                    fc:28:89:7f:61:05:3a:d7:2b:1a:df:08:93:b2:d6:
                    2c:7c:08:fb:41:be:b9:d0:ec:a8:cb:a6:1f:fd:82:
                    d9:7e:1f:d2:05:85:23:9a:01:d3:07:55:2b:6c:b0:
                    e8:d8:41:9f:28:ae:bb:f7:ca:f6:46:50:a7:61:f2:
                    91:95:ed:81:1d:45:79:71:54:f8:32:bb:5f:6b:95:
                    a3:b5:a4:64:71:82:fd:9e:6a:6e:2e:a6:20:5d:46:
                    c1:97:f7:28:2a:41:99:1e:f0:2a:02:bf:cc:82:06:
                    b8:fe:67:89:bc:81:83:46:3b:50:2b:bf:9b:91:f1:
                    e1:ea:48:dc:e7:52:86:40:3c:cc:98:b1:ef:d0:29:
                    fa:02:71:08:f2:10:b4:ce:52:db:4f:f9:36:41:49:
                    18:e6:22:6a:7b:c4:06:57:00:fe:17:8a:33:d2:de:
                    37:92:7f:f7:5a:41:07:55:1c:d7:8d:e0:fe:87:a9:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:93:DB:5A:EC:B7:A8:E5:49:1D:1F:B8:33:18:34:8F:71:1A:0B:5C
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135322e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:0e:76:d2:f0:36:e4:e6:a7:85:31:83:7e:dd:f3:95:00:9f:
         a5:e0:7c:6f:5c:29:80:81:9c:cb:c7:4a:16:c9:93:37:c6:16:
         37:d3:d4:a3:02:91:d4:bd:c0:0f:55:2b:31:7b:08:8c:e2:78:
         50:d3:4d:20:7c:a1:c6:b7:d9:cd:92:06:c7:10:e0:4a:6c:4f:
         80:29:9b:0c:79:c1:af:6c:3e:73:5c:5f:54:f4:38:42:e0:70:
         c2:43:51:1d:19:c6:5e:20:57:46:7c:67:0f:cf:80:cc:22:a2:
         bf:88:cd:f8:68:78:af:91:37:19:2b:da:7d:a9:ed:04:f9:11:
         99:6a:3e:02:bf:b1:d6:3c:62:ec:9d:8e:7d:63:c0:fd:42:9c:
         15:f0:52:58:1e:c0:a1:5c:50:25:45:38:82:bd:f6:6b:e8:1f:
         88:bd:e5:1c:bd:38:4e:7f:68:5d:1f:25:a7:89:ba:1d:66:53:
         91:65:c1:34:04:1b:0b:70:43:bb:b6:9d:05:d9:81:2a:b3:db:
         34:b3:c7:b7:90:ab:02:4e:79:b9:31:de:2e:c6:29:45:ec:c5:
         bf:81:2e:fb:ac:21:e6:da:8d:1e:6d:81:70:06:1d:a2:e5:93:
         ec:7d:2b:59:ad:fa:ec:98:74:9d:41:64:21:12:65:bb:79:e2:
         b6:65:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:22:27 2026 by rpki-client