Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          8qH11Dqku9yiDpLyv0c5JJDqSeoZOvGrdSiEw6QBeUQ=
Subject key identifier:   6D:0A:9C:4E:20:FC:09:B1:57:38:D8:18:C8:3E:03:A0:DE:35:52:00
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       611B75949EB219FB4A4E852831394C776F239B52
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:19 +0000
ROA not before:           Mon 15 Jun 2026 11:51:19 +0000
ROA not after:            Mon 14 Jun 2027 11:56:19 +0000
asID:                     28182
IP address blocks:        189.89.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1b:75:94:9e:b2:19:fb:4a:4e:85:28:31:39:4c:77:6f:23:9b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:19 2026 GMT
            Not After : Jun 14 11:56:19 2027 GMT
        Subject: CN=6D0A9C4E20FC09B15738D818C83E03A0DE355200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1c:26:9b:dc:16:fd:95:e2:39:e7:9b:ad:3c:
                    47:3d:f6:6d:a6:13:81:fd:10:08:b7:74:59:66:a1:
                    11:e2:89:34:25:90:e6:e4:59:e1:f7:4a:ae:5a:39:
                    d1:89:8e:f9:61:c8:7f:93:84:87:aa:16:04:76:70:
                    63:c0:ae:a9:35:b4:da:c5:08:03:ea:af:e7:46:95:
                    41:95:d6:a2:c7:7c:15:39:4c:72:ae:bd:2f:20:8e:
                    af:29:99:76:da:29:eb:c1:32:68:9e:d7:44:88:c2:
                    aa:04:36:f4:93:d5:d8:ca:9c:16:2b:2e:cc:0e:65:
                    af:32:b3:b6:1a:fb:29:a7:6e:95:19:5d:36:fb:d4:
                    cd:91:49:51:e1:d2:ec:34:fc:5b:1f:11:46:46:23:
                    7f:f5:de:cb:a6:44:65:e9:42:f8:0d:18:ec:5f:56:
                    4e:d6:12:d3:d3:2f:86:b4:c1:62:38:96:60:b9:c3:
                    6f:8c:64:e8:6e:c4:94:3b:8d:c3:98:e0:f9:72:f2:
                    73:e5:dc:c7:0c:86:e2:fd:7b:86:1b:c3:34:33:10:
                    15:e1:72:bb:bf:98:3f:01:3a:b7:ef:56:f2:1e:13:
                    c3:3f:9e:ab:85:49:d5:dd:33:b1:f8:6d:d4:f3:59:
                    9a:b4:32:db:1e:1a:21:56:ea:d0:43:ed:9f:49:6f:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0A:9C:4E:20:FC:09:B1:57:38:D8:18:C8:3E:03:A0:DE:35:52:00
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:75:df:05:2c:f3:68:ea:77:99:1b:f8:a6:88:95:f5:a5:
         e0:2e:71:8e:37:6c:68:3f:06:ae:f3:24:7e:c0:c4:d3:73:d9:
         82:50:13:42:1f:77:fb:b9:a0:c8:9a:ac:b8:6b:f3:be:bd:41:
         f3:42:42:96:a9:36:d6:b0:12:75:10:d3:d3:6d:5f:43:90:f8:
         98:88:32:03:8c:a7:e6:51:4c:5a:ad:3c:40:74:17:9a:9f:c5:
         9d:91:d5:08:d6:aa:da:16:cb:76:7f:89:3a:2d:e7:50:f8:e5:
         73:86:43:9d:4a:f3:ba:2c:05:76:f3:34:05:e4:52:48:9b:ec:
         59:1c:e5:87:08:85:2e:07:72:d6:00:13:6e:45:14:7f:4b:d8:
         a5:bf:e1:00:41:ef:83:f7:56:70:fd:9e:c8:82:6d:d6:ea:1d:
         3a:55:7d:62:10:29:b6:26:93:89:ee:23:39:96:a7:4a:1c:5d:
         3d:6c:ae:43:68:2d:c2:41:58:83:e4:57:8e:7a:e1:ac:0d:94:
         cd:4f:1c:0e:6c:03:1d:5b:e6:9a:e6:ab:b9:03:98:7f:a5:6e:
         4b:7a:4c:51:f3:4b:8b:54:78:a4:bd:bd:f4:01:b6:3f:d1:68:
         fe:b4:85:10:79:26:d7:b5:76:70:b4:dc:cf:4f:1e:be:85:f1:
         06:e6:85:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:37 2026 by rpki-client