Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          enWtTeINXYVZSVwxa1Nf1PbpP8FgxYDbcKuHYq7SHq8=
Subject key identifier:   2D:D1:C8:2F:63:61:C6:DC:21:B0:DC:F1:4A:78:D4:67:B9:CA:54:6F
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       3D21C5A0F235F7A827F2722E4DA32B90F38DF3BF
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:44 +0000
ROA not before:           Tue 28 Apr 2026 19:31:44 +0000
ROA not after:            Tue 27 Apr 2027 19:36:44 +0000
asID:                     264485
IP address blocks:        189.91.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:21:c5:a0:f2:35:f7:a8:27:f2:72:2e:4d:a3:2b:90:f3:8d:f3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:44 2026 GMT
            Not After : Apr 27 19:36:44 2027 GMT
        Subject: CN=2DD1C82F6361C6DC21B0DCF14A78D467B9CA546F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:09:90:91:c3:22:11:51:10:7c:ba:ec:cd:
                    e2:e4:c4:77:87:b2:8c:40:2f:bc:4c:d0:f4:62:fd:
                    08:2f:52:fc:79:07:5c:8f:d7:e6:43:ce:18:c6:0d:
                    6c:9c:b2:9c:98:36:e2:18:9b:d1:f3:1e:a3:cc:1c:
                    16:90:61:0f:d3:56:a0:fb:cf:a2:22:0e:56:02:86:
                    d9:b1:8a:9e:67:90:45:18:e1:68:60:1a:2f:69:99:
                    dc:6e:50:05:2d:1e:ef:f0:75:c1:9a:80:d6:a0:03:
                    f2:1d:f0:73:a5:a3:e6:3f:c0:59:63:e6:35:70:c9:
                    59:85:84:2f:a6:34:cd:11:1c:d8:bb:5a:92:b8:0d:
                    3b:1c:8f:ef:93:31:70:24:01:53:05:d0:b4:ae:0f:
                    2d:76:8a:cf:25:fb:14:6d:8e:d1:8e:cd:26:62:fe:
                    96:97:11:b8:bc:98:b1:d6:b3:9b:05:68:90:b6:2a:
                    aa:13:ac:36:c1:21:6d:cd:60:fc:2a:04:cf:73:7c:
                    51:f8:c3:6b:66:02:18:97:cc:31:1d:71:a6:10:a2:
                    a2:0e:ef:7e:ef:53:6d:e0:b7:af:00:0b:23:cb:62:
                    e0:7a:13:a5:55:0b:54:b7:97:f8:d3:58:01:0c:af:
                    6c:a0:37:6f:b9:f7:c2:7c:ed:63:e1:ae:c3:79:e0:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:C8:2F:63:61:C6:DC:21:B0:DC:F1:4A:78:D4:67:B9:CA:54:6F
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135332e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:f6:92:60:5e:2b:dd:e6:6c:51:7c:b0:c9:62:e2:ce:d1:
         b9:a3:fe:f0:ef:88:81:d5:32:d7:39:b4:ae:2f:12:ee:d3:f6:
         1a:bb:16:d2:d4:14:46:6e:fe:4f:83:6a:2f:3c:41:8d:8a:d7:
         b1:fd:80:53:e1:b5:aa:03:67:cc:73:8c:d4:37:8d:f5:54:6b:
         aa:9c:14:a6:d8:d9:2d:6d:67:20:e5:f1:58:da:19:00:7b:3a:
         be:8c:18:dd:c9:58:1b:66:29:0c:d3:1b:4d:9d:9a:8a:f0:de:
         07:f0:58:50:dd:8e:5f:ec:47:22:4d:e8:f0:8f:3d:00:af:00:
         5a:61:c3:e8:5f:a2:80:aa:f4:fc:a4:b3:f0:8a:69:72:5d:79:
         58:f2:33:a5:34:30:83:be:4e:54:4a:0c:fc:13:47:5e:d7:a4:
         97:9e:cc:37:c0:cb:b8:66:a8:9b:db:49:1e:26:ad:90:d5:a5:
         0d:04:c1:8a:8e:b9:a7:ab:63:b6:1d:09:b0:5a:1d:7e:f1:f6:
         d0:31:d7:ca:5d:c3:e6:58:25:c8:5f:97:7a:52:8f:84:63:c4:
         97:eb:64:06:0b:fc:e2:72:df:f2:82:28:f6:21:b2:c1:52:34:
         24:58:07:41:85:25:53:2d:71:94:ef:fa:99:08:ca:21:d9:18:
         09:76:fa:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPSHFoPI196gn8nIuTaMrkPON878wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNjA0MjgxOTMxNDRaFw0yNzA0MjcxOTM2NDRaMDMxMTAvBgNV
BAMTKDJERDFDODJGNjM2MUM2REMyMUIwRENGMTRBNzhENDY3QjlDQTU0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQgmQkcMiEVEQfLrszeLkxHeH
soxAL7xM0PRi/QgvUvx5B1yP1+ZDzhjGDWycspyYNuIYm9HzHqPMHBaQYQ/TVqD7
z6IiDlYChtmxip5nkEUY4WhgGi9pmdxuUAUtHu/wdcGagNagA/Id8HOlo+Y/wFlj
5jVwyVmFhC+mNM0RHNi7WpK4DTscj++TMXAkAVMF0LSuDy12is8l+xRtjtGOzSZi
/paXEbi8mLHWs5sFaJC2KqoTrDbBIW3NYPwqBM9zfFH4w2tmAhiXzDEdcaYQoqIO
737vU23gt68ACyPLYuB6E6VVC1S3l/jTWAEMr2ygN2+598J87WPhrsN54NaTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULdHIL2NhxtwhsNzxSnjUZ7nKVG8wHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzEzODM5MmUzOTMxMmUzMTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9W5kwDQYJKoZIhvcNAQELBQADggEBAAD79pJg
Xivd5mxRfLDJYuLO0bmj/vDviIHVMtc5tK4vEu7T9hq7FtLUFEZu/k+Dai88QY2K
17H9gFPhtaoDZ8xzjNQ3jfVUa6qcFKbY2S1tZyDl8VjaGQB7Or6MGN3JWBtmKQzT
G02dmorw3gfwWFDdjl/sRyJN6PCPPQCvAFphw+hfooCq9Pyks/CKaXJdeVjyM6U0
MIO+TlRKDPwTR17XpJeezDfAy7hmqJvbSR4mrZDVpQ0EwYqOuaerY7YdCbBaHX7x
9tAx18pdw+ZYJchfl3pSj4RjxJfrZAYL/OJy3/KCKPYhssFSNCRYB0GFJVMtcZTv
+pkIyiHZGAl2+h0=
-----END CERTIFICATE-----
Generated at Wed May 13 21:39:22 2026 by rpki-client