Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e352e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e352e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          3/b0y/WyBSci8nnpEfm9PHyWXDmNlvgo2ZMxc9HspTc=
Subject key identifier:   B1:7E:A1:9D:EE:E7:85:82:CE:40:79:3C:9F:2F:EE:4C:5D:4D:C9:20
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       3F7D48FF6985E1DE8CCA1529C6306F76A0C16774
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e352e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:11 +0000
ROA not before:           Mon 15 Jun 2026 11:51:11 +0000
ROA not after:            Mon 14 Jun 2027 11:56:11 +0000
asID:                     28182
IP address blocks:        189.89.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7d:48:ff:69:85:e1:de:8c:ca:15:29:c6:30:6f:76:a0:c1:67:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:11 2026 GMT
            Not After : Jun 14 11:56:11 2027 GMT
        Subject: CN=B17EA19DEEE78582CE40793C9F2FEE4C5D4DC920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:75:71:00:46:18:67:56:cd:84:d5:54:e7:
                    51:5e:9d:f4:9e:46:34:70:b4:66:00:fc:5c:70:48:
                    dc:d5:02:33:37:fe:76:d1:82:8a:dd:93:27:e3:ff:
                    08:c3:70:55:f7:37:84:b5:0f:b8:02:3f:b6:82:81:
                    a0:8f:f8:a8:d6:fe:11:36:b8:cd:e4:28:67:bb:86:
                    56:c7:f4:09:51:35:38:8c:9d:b3:9b:87:4c:80:bb:
                    78:7c:6a:e9:5d:bb:e4:32:09:34:f1:67:36:4d:54:
                    08:b8:79:04:dd:c3:4e:e8:0e:cf:d1:33:12:6a:f0:
                    eb:98:4c:aa:d7:3c:59:1e:a1:65:3e:14:e4:b3:e2:
                    b2:ff:70:9b:47:29:78:df:0c:dc:fd:68:88:70:03:
                    3f:95:60:c7:39:5d:71:72:c3:3a:ee:11:59:65:26:
                    ad:97:4e:f9:bf:37:8b:cc:e6:3d:a7:31:98:78:ce:
                    1d:75:8d:3d:de:3f:51:79:ba:93:0e:2d:f2:74:98:
                    45:b7:1f:c4:24:6c:f3:df:9a:97:e7:98:fb:26:60:
                    97:81:6a:5a:71:ae:96:88:85:c7:90:db:1e:e3:ec:
                    3b:a4:ef:bc:2d:99:33:e2:18:be:a3:91:8a:5b:34:
                    0a:3c:34:c3:2b:aa:78:40:9c:5c:20:4b:ac:8f:03:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7E:A1:9D:EE:E7:85:82:CE:40:79:3C:9F:2F:EE:4C:5D:4D:C9:20
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e352e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:00:93:1e:dd:5b:ae:ea:b2:db:a1:39:bd:03:db:7d:c7:ab:
         e3:ed:d3:86:4e:68:51:90:1b:82:61:f3:d2:9e:61:66:71:fd:
         cf:e6:18:4e:d1:3c:ba:3c:97:2e:aa:0b:17:09:5c:85:ad:9e:
         6d:02:68:7f:ae:85:88:d3:be:d3:12:4c:ad:03:03:4d:ec:6a:
         e1:85:a4:5c:7f:36:cb:92:54:c8:2b:6c:8c:64:15:b6:41:af:
         2c:0b:53:24:cd:8e:54:94:86:d4:36:a5:0d:0c:a4:94:78:40:
         47:4f:d6:20:90:49:9e:be:5b:56:3b:63:9a:7e:ff:12:63:1d:
         36:8b:41:ca:5f:8e:a0:14:c6:52:3c:df:3b:62:76:54:8f:28:
         67:d4:b3:99:98:a9:74:a3:35:00:6a:f0:51:51:26:04:b9:f4:
         73:b4:e2:54:42:b8:c9:b2:8c:44:af:3a:dc:83:35:4f:20:ba:
         3d:ab:82:a8:02:39:76:a0:ad:52:49:92:12:fc:9b:b4:40:95:
         f5:ff:bf:9f:9a:a1:d7:8f:b3:95:a6:91:59:4c:b1:71:6a:70:
         2e:80:7c:f9:5f:d9:40:6c:8c:56:76:ad:9b:5f:b2:04:12:ca:
         36:1e:ac:e9:65:3a:fd:e7:9d:75:5a:2c:cb:60:ee:ab:bf:a7:
         b0:ad:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:30:08 2026 by rpki-client