Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          bX/cQt5dWPCz6XEgbKcpOEF0VnFOyGJ2QOk2oVOE8Ks=
Subject key identifier:   03:B5:C6:F0:3E:D4:88:FB:AC:94:F2:E1:FB:07:E0:D0:4F:2E:33:B0
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       45CD92D620DADB77A1AACCCD03381709DD1462DF
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:12 +0000
ROA not before:           Mon 15 Jun 2026 11:51:12 +0000
ROA not after:            Mon 14 Jun 2027 11:56:12 +0000
asID:                     28182
IP address blocks:        189.89.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cd:92:d6:20:da:db:77:a1:aa:cc:cd:03:38:17:09:dd:14:62:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:12 2026 GMT
            Not After : Jun 14 11:56:12 2027 GMT
        Subject: CN=03B5C6F03ED488FBAC94F2E1FB07E0D04F2E33B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:8a:d8:68:9a:f3:37:8e:ec:d6:a6:32:31:
                    d8:13:24:3a:31:e4:91:64:6e:57:5b:a3:b2:1b:3d:
                    40:78:6f:c7:a8:a7:b9:a0:67:a1:a1:62:a9:77:09:
                    80:5c:19:49:b4:71:50:03:ab:aa:cb:76:6b:00:50:
                    f4:f3:af:c3:f5:c6:5b:03:ee:47:0c:cd:f0:50:63:
                    47:1c:df:95:04:54:9c:cd:79:d8:06:e8:03:71:91:
                    b5:66:17:1b:d0:4e:23:48:7d:66:e2:b4:b7:6f:8f:
                    02:07:d4:fd:e2:ba:7c:92:7b:84:a7:cb:64:b3:6e:
                    be:90:a2:fb:90:1a:45:6b:fe:20:43:cd:47:9c:06:
                    5b:91:74:af:5b:a4:91:dc:d1:ae:db:9c:68:fb:7c:
                    04:39:aa:0b:1e:c9:a1:50:93:0c:ae:e0:a0:01:6c:
                    25:09:58:fc:25:18:f1:58:f1:c7:e8:85:63:3c:a2:
                    59:96:64:fb:81:94:d5:27:34:c4:32:6e:86:28:d4:
                    3f:56:bf:53:6c:40:57:ce:ea:3a:1e:1d:82:7e:47:
                    4b:67:9d:7c:7a:3f:4b:f2:53:06:9c:42:7e:b1:93:
                    76:c0:76:29:6a:dd:a4:66:9b:4e:b0:a0:6d:75:1f:
                    0e:d4:f9:52:cf:3b:62:45:e5:60:28:e7:a8:87:fa:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:C6:F0:3E:D4:88:FB:AC:94:F2:E1:FB:07:E0:D0:4F:2E:33:B0
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:46:96:c8:59:d1:07:bb:bb:ae:9d:e3:5b:0a:be:d4:1e:11:
         bf:b2:f1:0f:03:07:33:45:c5:a3:f1:aa:fb:83:da:d0:fd:18:
         72:c2:fd:7f:fd:46:4a:cb:d4:e4:56:92:d7:d0:4e:4e:b2:40:
         5b:9e:89:91:10:c0:a1:26:49:4a:12:a5:54:c5:1d:48:6c:74:
         b4:f1:75:5c:20:23:38:5d:a2:94:d5:69:81:e0:61:72:99:f7:
         4e:18:46:fc:41:f9:36:20:92:92:e7:92:60:52:31:03:e3:12:
         3b:ca:ac:12:6f:85:1d:d4:10:8f:96:a3:ba:d4:61:44:dd:db:
         36:b9:66:fc:24:a5:38:f8:ef:e7:54:83:ec:33:9d:be:07:6e:
         b1:5c:92:5f:53:2d:c3:fb:d6:5e:96:21:89:fa:24:02:db:2d:
         39:e1:b0:b9:66:ef:a1:d6:ce:b0:50:e0:15:e9:ec:4f:c9:f6:
         1f:2f:f6:d2:4a:73:86:7c:a5:a9:02:a5:78:1f:e2:72:6c:2b:
         4d:21:5a:6b:19:ce:bc:ab:a4:42:4d:ff:31:58:6a:e2:d4:5c:
         d4:90:01:6d:a9:0b:f0:03:21:b5:1b:70:2b:85:19:12:e8:86:
         57:fb:99:39:59:43:56:31:52:a2:06:7b:e8:50:44:7d:01:fb:
         84:8c:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:30:29 2026 by rpki-client