Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          ofM0XxMEJedpAAZlWFfAmVHv5xKw2WPsIC8EkeWTzS4=
Subject key identifier:   C9:94:5C:2E:E4:C1:16:26:21:45:75:53:A5:72:75:9E:B7:1A:FE:36
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       5894A73FA308D08F6DE982B33790ED4B90B953A6
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:22 +0000
ROA not before:           Mon 15 Jun 2026 11:51:22 +0000
ROA not after:            Mon 14 Jun 2027 11:56:22 +0000
asID:                     28182
IP address blocks:        189.89.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:94:a7:3f:a3:08:d0:8f:6d:e9:82:b3:37:90:ed:4b:90:b9:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:22 2026 GMT
            Not After : Jun 14 11:56:22 2027 GMT
        Subject: CN=C9945C2EE4C1162621457553A572759EB71AFE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:c3:d0:99:57:3c:79:fd:26:ff:dd:76:64:
                    57:e8:f6:d1:2c:64:c4:f6:dd:37:69:34:f8:e8:12:
                    be:1a:05:4b:ab:a7:72:a4:a4:be:2c:f6:16:32:3b:
                    f7:96:24:3c:28:06:df:3e:c8:26:7d:da:3d:32:6c:
                    e8:82:98:bb:45:de:18:a8:c0:81:cf:4a:39:ef:09:
                    78:00:24:4b:03:c3:b3:22:d9:36:08:3b:0e:75:86:
                    4c:1e:a0:97:7f:3d:b6:9a:d0:51:ca:19:d6:22:b1:
                    7e:99:bc:df:a0:28:55:41:70:cd:06:42:7e:68:59:
                    28:bb:06:11:20:dc:d2:bb:74:8b:55:3c:eb:d7:0b:
                    25:81:6a:1f:e3:09:d8:c0:60:63:3b:2e:2a:51:c1:
                    5e:ed:2e:e8:e2:d7:0c:e6:4f:d4:e6:6a:ed:53:ae:
                    f4:ef:e6:60:e5:82:da:d9:e3:8e:94:57:ad:c8:5e:
                    94:74:dd:39:be:df:f7:6d:c3:7f:c5:e2:87:dd:9c:
                    22:79:0b:e7:e7:52:7f:fb:15:86:25:a6:19:41:f9:
                    e7:7a:f7:2e:67:aa:ec:bd:c7:57:44:b3:73:d3:d6:
                    0d:9e:f6:be:4c:d5:59:69:34:ae:0c:a7:f8:9c:ae:
                    e8:ad:87:ec:44:47:e9:3c:43:0d:38:4a:d5:b2:6f:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:5C:2E:E4:C1:16:26:21:45:75:53:A5:72:75:9E:B7:1A:FE:36
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:5a:95:f9:c1:d7:74:9e:5c:6d:17:71:f7:6b:93:55:68:75:
         8c:2b:bf:82:60:f9:21:e0:04:5f:65:f5:52:9f:07:7f:3a:a3:
         0b:b6:d1:a1:66:9b:de:17:79:6e:25:9c:4a:e6:60:23:3f:f9:
         d6:77:d9:68:6c:89:fd:5e:30:b7:5c:28:02:c0:c3:cf:89:64:
         24:97:ad:0a:73:21:e0:56:fe:ad:c8:5f:6d:84:58:aa:65:dd:
         8e:88:da:7a:23:4b:58:bb:66:01:5e:f9:a3:61:87:5d:21:bf:
         68:70:90:00:09:b7:a0:00:8e:83:cf:fd:73:29:e7:aa:1f:a2:
         fb:3e:e7:ae:73:7c:c0:62:6c:dc:e3:f9:dc:8f:2f:ca:d9:e2:
         5d:e6:e6:e3:6e:f1:8a:d1:e9:45:54:2d:13:5f:d9:e6:c5:c7:
         f5:ad:95:c8:95:1e:45:73:ce:11:8f:70:78:45:32:ca:eb:d1:
         45:9e:69:20:ea:86:a8:e8:76:2b:27:cd:dd:40:ba:70:6a:91:
         b7:3f:b6:d8:2a:44:9c:e4:28:2c:59:f5:5f:c7:84:aa:a9:1a:
         a6:a7:c9:45:52:4d:b5:ba:d3:c7:61:db:68:6b:1f:e3:fd:e2:
         62:a2:0d:f9:6e:c1:e4:9f:f0:83:8a:3f:c4:2c:8d:9a:d4:40:
         ed:e2:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:00:16 2026 by rpki-client