Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e302e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          oHgy0ZqkC/d+2YFoTm2WArG6kvw6JmdTjlU8Sg7pcAQ=
Subject key identifier:   D1:EC:7E:C0:E3:E3:86:0C:1E:C4:16:BA:2B:EB:DA:E8:AD:4E:2C:5E
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       4F556E30228438D15B77B536928A646EAA2E7FEA
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32332d3233203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:03 +0000
ROA not before:           Mon 15 Jun 2026 11:51:03 +0000
ROA not after:            Mon 14 Jun 2027 11:56:03 +0000
asID:                     28182
IP address blocks:        189.89.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:6e:30:22:84:38:d1:5b:77:b5:36:92:8a:64:6e:aa:2e:7f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:03 2026 GMT
            Not After : Jun 14 11:56:03 2027 GMT
        Subject: CN=D1EC7EC0E3E3860C1EC416BA2BEBDAE8AD4E2C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:e1:c8:fb:44:de:53:94:89:6d:0a:08:00:
                    d8:97:8d:8f:35:2f:d0:d2:54:99:f8:4a:ca:f7:7f:
                    00:bc:b4:57:d1:54:0f:49:2d:40:11:cb:96:61:a9:
                    46:45:8e:34:59:af:d1:a0:1b:15:cb:eb:ea:59:b4:
                    9c:03:86:0d:8b:05:70:d7:87:7b:8d:95:6d:bb:40:
                    8d:c0:92:f2:32:a0:3e:a6:40:63:9b:c4:bc:72:19:
                    21:f6:d6:4b:18:c7:72:92:fc:ad:29:7d:be:8b:34:
                    e2:85:83:f8:3c:fe:d9:a8:48:15:65:70:a8:25:9b:
                    91:1a:78:9b:38:19:a9:a3:9f:5e:03:21:12:f0:01:
                    19:f1:9e:77:ee:8e:f2:1f:02:29:59:ef:67:eb:df:
                    35:4b:ef:84:c4:b4:a8:dd:74:71:bc:9c:86:ae:64:
                    91:3f:dd:90:ca:fa:0d:1e:30:12:9f:62:8f:28:18:
                    96:40:e5:99:80:10:4d:c4:b9:3a:2b:da:c3:b9:55:
                    7a:47:cf:45:7c:28:87:8d:b0:c2:be:dd:e1:21:26:
                    02:25:7f:0f:05:b7:16:10:3f:c3:38:cd:4f:41:87:
                    72:c6:87:c2:8b:30:b4:47:1c:32:6d:bf:d1:e0:15:
                    9d:a2:3b:2d:4b:6a:b5:2d:2b:6f:3d:ee:96:59:bc:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EC:7E:C0:E3:E3:86:0C:1E:C4:16:BA:2B:EB:DA:E8:AD:4E:2C:5E
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:81:cc:50:09:93:62:cc:4d:9f:91:a9:17:1a:a3:8d:46:6f:
         1a:ff:66:0e:58:d8:c8:34:a1:5b:3e:97:00:54:ef:d3:4a:36:
         14:ba:cb:24:cd:98:51:f9:9f:19:7f:c4:14:93:17:46:e1:01:
         77:d7:21:c6:02:fc:35:4c:ba:08:92:25:2d:7b:61:21:5f:26:
         06:b4:57:03:39:18:fa:41:a6:78:2f:de:67:a1:7e:61:8f:be:
         5b:ef:43:b2:0f:76:45:23:68:d2:96:8f:23:6f:53:95:46:dd:
         9c:a3:06:0d:86:9e:43:79:8e:fd:40:9d:04:fd:17:26:81:a8:
         c8:4e:97:bb:89:1b:a8:38:bc:77:44:95:70:1e:e2:08:94:70:
         42:be:28:f2:31:44:8f:7e:ce:b3:fe:4b:a3:e4:13:0f:db:dd:
         8c:bc:96:b5:2c:46:4b:bf:1a:68:d2:bd:00:4f:82:9e:43:3d:
         e5:0a:8e:bd:46:41:bf:cf:21:86:97:8f:85:8d:d9:25:c8:ce:
         7f:8b:9e:ba:09:34:0b:cf:64:1e:b5:c1:2f:a7:3d:3a:60:5a:
         a7:c5:30:3a:53:dc:fc:94:ec:90:8f:25:8f:1a:2a:30:f2:51:
         da:bc:db:1f:b4:9a:a3:b5:65:53:db:67:03:d4:a8:7a:f8:cb:
         20:8e:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:27 2026 by rpki-client