Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          c2fN/LLaXnuRPoL4/t7INnN02+Y8de83bIvS3FF3NLA=
Subject key identifier:   F4:B5:6A:C4:AB:84:E4:9E:14:E9:01:00:AE:1F:95:EA:F7:D2:DC:B9
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       6B8B093456A7A23BE8D07B7AE831A47B7CF594F5
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:13 +0000
ROA not before:           Mon 15 Jun 2026 11:51:13 +0000
ROA not after:            Mon 14 Jun 2027 11:56:13 +0000
asID:                     28182
IP address blocks:        189.89.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8b:09:34:56:a7:a2:3b:e8:d0:7b:7a:e8:31:a4:7b:7c:f5:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:13 2026 GMT
            Not After : Jun 14 11:56:13 2027 GMT
        Subject: CN=F4B56AC4AB84E49E14E90100AE1F95EAF7D2DCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:7f:be:01:6a:36:2b:53:3e:91:60:1c:44:
                    4a:39:85:36:56:01:92:57:72:b4:23:b9:35:44:58:
                    41:88:bf:9e:ef:df:d8:31:25:b9:15:6a:13:6a:b9:
                    1b:3b:34:72:92:c5:3e:e4:5b:d5:ca:65:c2:3a:61:
                    d9:e0:63:19:18:d3:b6:5d:ef:fa:6e:e4:96:88:a7:
                    9f:f5:d3:66:22:bf:1a:b5:c5:d4:a0:6a:38:aa:f2:
                    c5:ba:8b:65:bc:d1:87:7f:43:65:8c:60:3d:09:1a:
                    9b:6f:81:08:ae:42:bf:2f:36:a3:97:a1:91:87:6a:
                    57:55:61:2f:16:9c:2a:8f:f2:57:f9:c7:be:27:a7:
                    0c:ad:65:dc:16:42:ca:82:87:85:c0:a0:42:d0:7e:
                    30:ec:68:d8:83:cc:30:37:08:88:b2:31:ec:23:5c:
                    06:14:71:0f:ad:1e:6b:68:e7:2f:f1:9d:19:06:a7:
                    49:d9:76:e5:d1:2d:46:1c:87:a6:97:a6:b7:8b:6c:
                    23:ef:a6:ef:46:7e:6f:2c:e2:0c:1c:35:3f:87:29:
                    6a:ac:77:3a:53:2e:be:08:e0:da:89:4d:44:9e:11:
                    69:a4:ac:fd:98:24:ee:17:67:a0:ce:cf:cb:12:58:
                    f9:f3:78:87:5e:f8:16:b7:5a:20:9a:9c:ff:43:9c:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:6A:C4:AB:84:E4:9E:14:E9:01:00:AE:1F:95:EA:F7:D2:DC:B9
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:16:b6:c8:86:bc:4f:50:3d:c5:59:1c:2a:5d:35:b3:9b:
         76:7f:c3:1f:26:0a:e3:cd:1f:61:3d:cd:da:a2:87:cc:f8:cc:
         8a:70:7f:e2:19:ff:b3:35:e2:61:01:f7:a5:d6:64:5e:69:25:
         56:2f:48:99:bd:cf:1d:c3:98:22:1a:d8:cd:af:86:b3:13:cf:
         0b:fa:f4:eb:1c:e7:db:a2:1e:37:9e:0f:a1:28:f5:48:be:24:
         a4:a9:fb:14:58:cf:ad:96:d8:39:bc:58:23:2a:6b:4d:94:f5:
         78:66:3d:fd:4b:58:32:c9:66:89:ef:03:fc:4e:bd:83:dc:b5:
         d1:33:62:bb:a8:9c:67:c1:5d:cf:d4:f6:9b:41:73:d0:a2:2d:
         ed:3b:c2:fd:97:6c:92:44:c1:63:ff:33:f0:66:8f:fb:62:c6:
         09:a6:fd:d2:c6:1c:e2:3b:70:17:61:b2:28:e2:51:53:b2:0f:
         f2:63:67:e4:b3:7a:ae:dc:c4:3f:db:8e:e9:8a:b9:c1:9a:b7:
         ce:83:82:40:a1:5c:97:6b:82:f3:58:e9:67:25:ee:3c:37:a2:
         fe:c1:8f:20:9b:9e:a4:4c:3d:d3:e8:06:45:44:03:92:0f:42:
         85:99:7d:11:90:62:30:9d:05:72:38:73:33:03:b6:db:4e:74:
         02:bd:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:31 2026 by rpki-client