Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          6o7KRcimMBNurSSkSZF9LPTYh2pukeYPO0TCFPqf764=
Subject key identifier:   AC:24:C1:71:50:23:D3:E1:F5:0F:F4:97:10:29:6B:6C:1B:02:59:47
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       204B35B4AB258DACDC71E45C2003CB387DF09751
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 28 Apr 2026 19:36:43 +0000
ROA not before:           Tue 28 Apr 2026 19:31:43 +0000
ROA not after:            Tue 27 Apr 2027 19:36:43 +0000
asID:                     264485
IP address blocks:        189.91.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4b:35:b4:ab:25:8d:ac:dc:71:e4:5c:20:03:cb:38:7d:f0:97:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: Apr 28 19:31:43 2026 GMT
            Not After : Apr 27 19:36:43 2027 GMT
        Subject: CN=AC24C1715023D3E1F50FF49710296B6C1B025947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:ab:4e:f3:d9:14:88:37:57:2f:59:4b:c8:
                    5d:ea:83:89:a3:36:20:d6:53:ac:29:f1:7e:ba:62:
                    73:ef:8d:da:04:51:4f:b4:51:51:b3:3d:c2:87:00:
                    67:e0:37:a2:60:13:d2:77:77:5a:f1:43:b3:8a:50:
                    4d:30:a0:58:1c:2a:9a:41:b1:36:42:58:c0:24:52:
                    ac:e6:bb:e2:61:36:83:9a:af:b4:f6:02:d6:8b:ff:
                    18:73:15:1b:87:6c:64:bf:1f:47:81:8d:4e:e8:58:
                    28:b4:4b:cc:0b:e8:99:36:0f:22:fb:20:67:82:12:
                    5e:5a:5d:03:fc:0c:35:08:bb:57:d7:b9:78:04:08:
                    a0:5a:6d:59:c6:c4:de:d9:59:3f:75:74:95:bf:4e:
                    05:87:d5:ef:2b:0e:aa:ee:14:bd:74:a3:db:90:f3:
                    93:fb:43:02:80:94:6d:11:1a:47:66:6d:94:25:d7:
                    6a:64:cc:f3:15:25:6d:0f:e7:3a:6a:6e:1c:42:de:
                    ba:22:57:a1:75:bd:1d:38:5d:fd:a0:57:a0:d1:a4:
                    7f:1c:89:29:f6:a5:25:bb:2b:12:9f:a1:0c:e8:23:
                    70:bf:c9:3f:f1:74:4d:8a:6d:ab:3e:71:2c:ad:dc:
                    6f:13:c4:28:1e:57:6b:fe:a7:ee:c1:06:99:7f:3a:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:24:C1:71:50:23:D3:E1:F5:0F:F4:97:10:29:6B:6C:1B:02:59:47
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135352e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:04:93:e4:ed:1a:df:58:64:57:7a:eb:91:52:32:08:0d:84:
         40:ad:f8:8c:3b:ab:6f:7b:69:b3:66:41:5b:b2:3a:4d:50:a0:
         d8:22:9a:b4:fd:a7:f0:96:f1:30:5d:5a:d4:a0:ef:26:56:be:
         01:b5:13:45:bd:9d:d8:dd:bd:4e:f1:1e:d2:58:a0:ae:a2:ff:
         0b:5f:f3:d5:df:99:ae:b2:29:48:90:da:30:cd:ff:d1:fb:9c:
         5b:52:15:c7:41:a0:58:d0:b7:fb:00:59:eb:99:f0:3f:54:5d:
         87:b7:d4:47:48:c5:6a:4c:59:9e:1f:8e:a3:3d:53:00:79:86:
         92:15:6e:7f:2d:48:19:ac:29:41:e5:3e:97:7e:2e:77:49:db:
         7d:a6:c6:74:ea:a7:a4:93:3d:c9:c1:f8:c5:86:cd:61:c3:2e:
         b7:a1:44:3d:e5:cd:40:fa:46:19:4e:54:43:45:d8:3b:e2:1b:
         0f:5c:57:c6:5e:66:51:82:69:25:06:44:ed:13:86:3a:26:61:
         16:fb:63:62:fa:47:43:b6:9b:5c:bf:64:e5:1d:71:2e:10:cc:
         d7:00:7b:9e:b5:10:38:cd:3a:a4:9e:93:0d:12:08:64:2c:26:
         9a:6f:d0:e5:48:f5:93:bd:c7:20:8a:19:15:9e:8b:03:89:a8:
         1e:fc:05:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIEs1tKsljazcceRcIAPLOH3wl1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNjA0MjgxOTMxNDNaFw0yNzA0MjcxOTM2NDNaMDMxMTAvBgNV
BAMTKEFDMjRDMTcxNTAyM0QzRTFGNTBGRjQ5NzEwMjk2QjZDMUIwMjU5NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzKtO89kUiDdXL1lLyF3qg4mj
NiDWU6wp8X66YnPvjdoEUU+0UVGzPcKHAGfgN6JgE9J3d1rxQ7OKUE0woFgcKppB
sTZCWMAkUqzmu+JhNoOar7T2AtaL/xhzFRuHbGS/H0eBjU7oWCi0S8wL6Jk2DyL7
IGeCEl5aXQP8DDUIu1fXuXgECKBabVnGxN7ZWT91dJW/TgWH1e8rDqruFL10o9uQ
85P7QwKAlG0RGkdmbZQl12pkzPMVJW0P5zpqbhxC3roiV6F1vR04Xf2gV6DRpH8c
iSn2pSW7KxKfoQzoI3C/yT/xdE2Kbas+cSyt3G8TxCgeV2v+p+7BBpl/Ong9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrCTBcVAj0+H1D/SXEClrbBsCWUcwHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzEzODM5MmUzOTMxMmUzMTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9W5swDQYJKoZIhvcNAQELBQADggEBAJcEk+Tt
Gt9YZFd665FSMggNhECt+Iw7q297abNmQVuyOk1QoNgimrT9p/CW8TBdWtSg7yZW
vgG1E0W9ndjdvU7xHtJYoK6i/wtf89Xfma6yKUiQ2jDN/9H7nFtSFcdBoFjQt/sA
WeuZ8D9UXYe31EdIxWpMWZ4fjqM9UwB5hpIVbn8tSBmsKUHlPpd+LndJ232mxnTq
p6STPcnB+MWGzWHDLrehRD3lzUD6RhlOVENF2DviGw9cV8ZeZlGCaSUGRO0Thjom
YRb7Y2L6R0O2m1y/ZOUdcS4QzNcAe561EDjNOqSekw0SCGQsJppv0OVI9ZO9xyCK
GRWeiwOJqB78BTA=
-----END CERTIFICATE-----
Generated at Wed May 13 19:44:11 2026 by rpki-client