Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e302e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          yX28EzE7fpvn9A7aIoqPzvWly2kGvB7sKVHR7PHEojE=
Subject key identifier:   04:52:4F:C5:15:26:AB:BE:D0:01:B0:49:48:E4:E5:9B:EA:15:C4:C7
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       11F65A9275CF86452D44B7107B0236215368D595
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:15 +0000
ROA not before:           Mon 15 Jun 2026 11:51:15 +0000
ROA not after:            Mon 14 Jun 2027 11:56:15 +0000
asID:                     28182
IP address blocks:        189.89.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:5a:92:75:cf:86:45:2d:44:b7:10:7b:02:36:21:53:68:d5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:15 2026 GMT
            Not After : Jun 14 11:56:15 2027 GMT
        Subject: CN=04524FC51526ABBED001B04948E4E59BEA15C4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:20:1c:f2:62:77:d7:61:92:88:a1:5e:b0:
                    48:84:4f:32:2c:e9:a6:10:0b:c8:5d:6c:e0:8d:30:
                    b0:f5:dc:5f:02:0d:d2:a8:d7:ce:90:1c:91:32:82:
                    1c:2e:eb:21:9d:1a:65:8f:e9:be:6e:0f:79:be:ce:
                    d8:c2:fb:89:06:36:ad:46:d7:ef:96:11:9b:2b:40:
                    2d:5b:c2:0a:be:17:a5:c9:ce:55:fa:a0:37:2c:40:
                    84:a2:ef:cb:ab:07:a1:25:d5:22:9e:97:3d:c8:14:
                    bd:99:7b:bc:a6:78:46:de:97:7c:0f:e1:dd:45:fa:
                    be:a9:f5:41:39:f9:0d:6a:7d:92:22:f8:e4:b2:3f:
                    58:2c:a4:c9:5c:65:b4:db:03:7b:10:4b:32:c4:ad:
                    2f:9b:9c:4a:30:64:44:e0:3b:53:6a:18:27:9d:db:
                    c9:2f:5a:25:45:b8:ba:ac:bf:a0:b0:f2:47:14:88:
                    f9:f5:c8:2d:95:f8:33:05:37:9d:3e:5e:82:e6:8f:
                    cc:43:a1:26:6b:a0:66:c0:a1:d6:1d:9b:be:a7:75:
                    1c:1a:0d:08:67:e9:45:f3:48:43:c9:1f:d5:eb:c8:
                    3d:de:83:78:e8:f6:b0:79:e1:49:20:85:dc:9f:fd:
                    36:9d:a4:3f:8f:3e:88:14:a4:6c:4a:ce:23:21:8f:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:52:4F:C5:15:26:AB:BE:D0:01:B0:49:48:E4:E5:9B:EA:15:C4:C7
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:87:d8:35:17:bc:e7:b9:e8:06:4e:bc:68:c1:9f:f9:cf:cd:
         fe:d9:d5:8b:4e:11:b1:b3:67:5b:05:e5:0b:a3:95:f9:ca:a8:
         c7:ad:ad:1f:29:69:8b:30:64:dd:4d:87:25:cb:f3:8a:b0:cf:
         06:cc:60:0d:3e:59:98:fe:f3:3d:38:a8:5b:f2:9b:bd:1c:d6:
         2a:38:99:d4:70:38:36:57:64:c0:f0:12:7f:7d:4b:fe:0e:ea:
         38:c6:20:74:97:ff:67:32:0d:f6:12:d1:4a:49:5d:5c:02:33:
         e1:95:33:ea:04:28:0d:1c:d9:c7:00:11:00:0a:7b:d0:23:b6:
         af:43:5c:1d:f3:82:a4:9f:e0:b7:3c:9f:37:fb:6d:08:71:70:
         0f:8b:bb:22:8e:01:31:94:d1:5d:d3:63:23:50:e5:e2:5c:c0:
         5e:ac:f3:3e:d6:04:68:87:a4:72:2b:e7:73:53:8e:61:07:f0:
         6a:88:94:94:d6:83:48:6a:55:5a:86:25:58:c4:53:68:bd:1a:
         0c:7f:b1:79:ca:c0:48:46:42:4b:cc:73:d4:85:c6:a8:b3:19:
         a6:a4:1d:96:6a:19:6e:da:13:4c:37:e3:9c:b4:6b:91:fc:2f:
         fc:6b:31:49:46:ff:59:c3:0c:7a:04:7f:1b:40:5b:33:0b:38:
         e5:07:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:30:15 2026 by rpki-client