Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31332e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31332e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          2TFheLZqKpP27XF457qpqox7gTXWIwguS7/H8XdtcXE=
Subject key identifier:   FB:97:7B:9D:53:95:1E:8A:0A:A9:52:C3:02:55:C6:C3:D5:F3:ED:B0
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       028DDAAAFDB73C6701530707E752C5653ADAE644
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31332e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:19 +0000
ROA not before:           Mon 15 Jun 2026 11:51:19 +0000
ROA not after:            Mon 14 Jun 2027 11:56:19 +0000
asID:                     28182
IP address blocks:        189.89.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8d:da:aa:fd:b7:3c:67:01:53:07:07:e7:52:c5:65:3a:da:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:19 2026 GMT
            Not After : Jun 14 11:56:19 2027 GMT
        Subject: CN=FB977B9D53951E8A0AA952C30255C6C3D5F3EDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:26:5e:81:92:8e:51:b7:f5:bf:07:44:35:
                    88:fb:14:68:f5:a5:52:3a:6a:26:2d:74:97:87:d8:
                    60:29:76:de:cd:f2:82:6f:ba:9c:cf:ce:b8:47:f7:
                    1b:66:5f:d0:28:b8:5b:3f:bf:ba:b8:2a:3b:15:16:
                    c7:0b:bd:48:ef:16:0d:d2:45:3b:d5:f6:b6:c6:c2:
                    1a:aa:2f:9c:41:d7:48:b0:b0:bd:0d:72:1d:29:32:
                    3f:e7:4a:4d:0c:5e:11:c9:a6:52:f7:3f:2c:46:a1:
                    76:3c:c3:46:2c:bd:2e:d4:21:ad:77:d9:66:d6:25:
                    f3:54:cb:56:c8:9d:8b:5f:4a:02:3d:6c:00:38:5d:
                    c3:51:99:10:3a:41:3d:64:17:d4:57:09:ae:b2:01:
                    11:f1:63:86:9d:20:0d:f4:c6:3a:75:07:1e:74:b8:
                    e3:b3:b4:ec:82:44:35:97:84:3a:c1:cf:41:ec:3a:
                    60:3e:fa:0d:e6:8b:59:6d:66:bf:5b:38:01:be:5d:
                    7c:ea:00:35:b3:bd:0b:52:a9:65:74:05:8a:7a:ee:
                    17:0c:cd:a6:11:e8:1b:ad:ec:35:62:fd:de:2d:c9:
                    7f:f0:88:26:06:61:ad:ba:44:16:ad:cd:68:ba:a6:
                    4d:62:bb:5d:48:7b:f1:95:09:e7:55:de:da:16:90:
                    df:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:7B:9D:53:95:1E:8A:0A:A9:52:C3:02:55:C6:C3:D5:F3:ED:B0
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31332e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:a5:57:cb:29:69:3e:bb:ff:24:65:ee:3d:8d:5e:a2:d0:
         bc:71:c3:28:7d:73:fc:43:16:9b:56:bb:70:d2:f0:1d:27:a0:
         17:ec:56:aa:da:5c:1c:0c:59:ab:1f:35:a3:c9:91:d3:a2:dd:
         1c:8b:10:0f:7f:aa:51:dd:ab:86:00:50:6a:1b:b9:b0:eb:14:
         b6:54:27:1d:ee:d8:4e:5d:52:7e:30:e0:4e:91:d1:d2:7b:a6:
         8a:84:db:dc:06:a2:91:99:40:31:f6:34:5d:e1:c9:2f:d7:38:
         8b:8f:cb:48:e9:a5:f9:ed:d2:1c:14:c4:a5:8f:3d:df:5c:20:
         ff:c2:40:24:ad:c5:8a:66:ae:42:99:6e:d7:92:6e:be:a0:d8:
         0c:a9:b6:a8:81:31:2a:ef:9d:1a:47:9e:61:4a:ff:da:95:e9:
         c0:c1:f2:e2:bb:e5:15:34:42:11:1f:aa:6e:93:19:65:6b:af:
         b4:b1:08:96:55:10:b0:b7:56:dd:f6:26:1b:7d:fb:ac:35:fe:
         97:4d:01:a8:2c:5b:d2:9c:73:17:14:c6:d7:b3:8b:23:19:38:
         fd:63:32:66:55:d1:d4:03:a7:7e:5f:8a:11:1d:5e:68:1b:1b:
         7c:ca:db:de:b4:b6:97:48:45:0b:c1:fd:fd:2a:f4:c0:9d:91:
         82:47:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:29:50 2026 by rpki-client