Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          gvi8TLJunZXjmI340SR9ZP2om3f1WjPmhAn2Uyn5JsM=
Subject key identifier:   3B:C7:70:2F:A6:96:9E:0E:AB:8A:11:2F:55:35:3E:EB:11:86:C4:FD
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       47EB0B78E84F772DBF9C9B15BD004E824AAE3091
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:05 +0000
ROA not before:           Mon 15 Jun 2026 11:51:05 +0000
ROA not after:            Mon 14 Jun 2027 11:56:05 +0000
asID:                     28182
IP address blocks:        189.89.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:eb:0b:78:e8:4f:77:2d:bf:9c:9b:15:bd:00:4e:82:4a:ae:30:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:05 2026 GMT
            Not After : Jun 14 11:56:05 2027 GMT
        Subject: CN=3BC7702FA6969E0EAB8A112F55353EEB1186C4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:92:8c:bf:9d:3d:2d:bc:f2:d7:82:48:fd:
                    35:99:bb:50:e4:81:73:8e:a7:e4:e4:53:ae:fe:8e:
                    a0:26:f9:e8:10:65:3d:e1:8b:f8:c3:b0:48:5e:58:
                    fe:ea:0b:3b:2f:3c:1c:58:ee:ad:83:47:34:65:47:
                    a6:cd:81:4d:ea:68:77:62:0c:dc:b2:89:88:80:7e:
                    f0:0c:0f:ff:60:ab:a8:0b:3b:6f:f8:94:32:d3:50:
                    19:ff:97:37:3d:cf:52:7e:e4:dd:1f:7c:05:c6:68:
                    46:7e:4c:54:ff:98:93:62:96:10:af:67:0a:28:d3:
                    66:71:33:f0:8b:e6:49:bf:41:70:03:9d:a7:42:0e:
                    da:a3:7f:45:bd:59:0f:f5:bd:b5:f3:77:17:85:b1:
                    21:61:e5:7d:95:67:0b:13:09:8f:57:17:fe:fa:28:
                    1d:c3:d9:32:2e:32:39:ee:fd:7b:03:a8:4c:00:ff:
                    d3:a5:cf:1a:62:7d:f9:fa:29:73:8e:66:94:77:c3:
                    13:47:0c:7f:c6:bb:79:71:9e:37:d1:c8:2d:35:e0:
                    68:bd:23:0d:d1:1c:56:10:94:27:15:68:c4:f6:0b:
                    91:80:26:b0:71:27:ee:ed:1d:55:a9:ba:83:49:0b:
                    07:45:e9:33:83:88:7c:26:60:27:60:d0:54:c2:20:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C7:70:2F:A6:96:9E:0E:AB:8A:11:2F:55:35:3E:EB:11:86:C4:FD
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:1b:d8:3b:25:0e:80:f1:cb:6c:fa:ae:5a:4b:0d:4b:cd:
         f5:1d:68:4b:2a:4b:20:91:96:2d:fb:9e:16:41:6b:94:a1:b8:
         7e:da:fd:5b:14:8f:09:28:ef:23:94:93:c3:17:b3:fd:6c:6e:
         c9:f0:de:25:87:0d:e6:f2:7f:f5:ab:1b:6a:1f:eb:3b:e2:1d:
         74:67:f2:3a:f0:80:94:04:0b:69:f8:a9:7d:d0:0d:1e:50:fb:
         a4:11:e8:93:74:af:b1:31:26:3d:87:8a:c3:5f:02:d7:0c:98:
         0e:57:65:df:1c:7c:7c:23:76:b3:9b:01:c4:dc:f6:62:2b:e8:
         4c:71:2e:bf:73:ac:94:0f:27:2a:95:eb:57:b5:69:e8:69:2b:
         c4:c8:9d:7b:93:2a:59:cb:03:60:b7:4a:f9:f7:fa:41:2b:a6:
         5c:ec:85:02:38:74:c6:16:fb:19:b8:28:b6:62:68:f6:9e:0d:
         a3:04:ee:a4:38:f8:3b:da:85:02:ee:a4:42:e8:6b:92:be:93:
         9d:37:f5:64:0d:50:45:51:3e:c7:76:22:ff:07:51:07:fa:8b:
         00:4c:11:e0:f8:85:4e:4f:42:31:3c:c2:56:b6:11:f8:d4:20:
         64:55:13:a9:1b:01:48:b8:dc:95:c0:1e:a7:43:8a:c2:33:01:
         b5:7f:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:27 2026 by rpki-client