Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          BKyZ/NJhzKzO1zEQvNPxuY5GmMv8CLRoYhJ9wgcTyrU=
Subject key identifier:   41:61:E4:5C:31:12:86:0D:93:A0:DD:54:48:7B:F9:03:86:7D:C9:86
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       5C57ED915BEE151351A1DB1760D308365E68BB16
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:24 +0000
ROA not before:           Tue 27 May 2025 19:09:24 +0000
ROA not after:            Tue 26 May 2026 19:14:24 +0000
asID:                     264485
IP address blocks:        189.91.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 05:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:57:ed:91:5b:ee:15:13:51:a1:db:17:60:d3:08:36:5e:68:bb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:24 2025 GMT
            Not After : May 26 19:14:24 2026 GMT
        Subject: CN=4161E45C3112860D93A0DD54487BF903867DC986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:cf:1e:3c:fe:54:85:05:f8:d4:2e:8e:c6:
                    67:3d:e6:29:a9:8f:14:b4:6b:6d:60:79:5a:e2:d3:
                    7a:83:4e:79:92:99:ce:6b:d4:26:29:ac:86:11:90:
                    50:1e:3a:53:66:f6:1a:38:7c:60:75:99:67:87:cb:
                    72:7a:c8:dd:f2:e2:cd:4c:49:28:3a:20:18:7f:c3:
                    d6:7f:6c:c4:25:21:7a:5a:d9:6d:72:63:7e:66:c3:
                    69:3c:f6:39:cb:cb:d8:d2:d4:96:4a:36:b2:1c:c8:
                    e3:f9:59:02:5d:72:c4:e4:8c:50:04:27:79:71:dd:
                    cd:14:4e:20:fc:a3:2c:73:d9:c5:42:fd:3d:0c:8d:
                    35:25:c2:21:38:ba:26:35:47:55:95:18:11:03:34:
                    32:15:95:b8:af:78:52:b0:66:b5:1b:2c:d4:f3:82:
                    4b:14:ce:2f:32:d0:5e:f3:ea:a4:aa:4a:12:2a:0f:
                    58:05:ed:ce:dc:ba:72:64:9f:b3:6a:df:4c:68:71:
                    a8:8a:3b:ef:45:36:27:fa:c1:84:44:1b:0b:33:7a:
                    de:f6:14:b4:81:ad:f5:8f:e2:ac:53:ef:51:e6:ba:
                    0a:b8:0a:ff:57:87:b3:64:b0:36:39:74:e8:7f:6e:
                    4c:45:95:8d:ac:4f:2f:07:05:5d:44:ea:3d:53:ca:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:E4:5C:31:12:86:0D:93:A0:DD:54:48:7B:F9:03:86:7D:C9:86
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134342e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:82:1f:85:6c:ab:7a:b3:b9:dc:2c:5f:43:91:80:32:e0:
         20:18:d4:bb:21:12:43:23:b5:f8:e9:47:83:f6:4e:a6:ea:b6:
         89:21:6e:26:5f:67:ab:20:0a:63:5b:dd:ec:32:ed:5a:dd:32:
         1a:d2:d6:38:99:c0:e9:eb:8a:22:d2:79:e5:ba:b7:31:1e:4e:
         07:ae:eb:dd:c7:19:ef:93:f9:55:ad:a7:dd:3c:0f:9b:b1:89:
         2a:32:64:39:d6:f2:13:a6:69:7d:92:86:41:de:5c:90:e7:4f:
         9f:8a:f0:6d:86:6b:8d:25:4f:b1:8d:02:94:03:98:1c:2f:a0:
         44:52:fc:31:7c:bf:10:9c:7b:73:eb:bf:2e:d0:24:34:26:3f:
         67:bd:1c:1c:88:76:cb:ff:66:6f:3a:70:22:56:c0:a5:a6:63:
         ba:ea:59:be:5a:4c:7f:25:8a:47:e4:5d:78:ec:71:a8:d8:1b:
         3f:ab:9a:b9:1e:09:ef:c2:30:8b:7f:1e:ca:38:eb:18:ee:c7:
         ef:7f:bc:73:51:b9:9b:4e:04:f4:85:bc:da:6a:42:ed:fc:68:
         81:1e:c6:fa:0f:0e:bd:ba:b7:62:fb:55:9e:bd:1e:97:84:f9:
         84:27:11:c1:b1:08:7d:8c:bd:bc:79:e6:0d:a2:fa:ed:20:3a:
         ae:a7:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 16:15:10 2025 by rpki-client