Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134372e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134372e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          p5HqVsEnW4DCAOn0Itqx3bNs2RXtvV8rD+8qu0VhkP8=
Subject key identifier:   3F:86:D3:52:9F:7E:D3:B0:FD:40:79:6A:B5:C6:47:16:0F:DF:4A:F5
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       4333FCA928E7C0E8BC11089C63901FC706A403CD
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134372e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:43 +0000
ROA not before:           Tue 27 May 2025 19:09:43 +0000
ROA not after:            Tue 26 May 2026 19:14:43 +0000
asID:                     264485
IP address blocks:        189.91.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:33:fc:a9:28:e7:c0:e8:bc:11:08:9c:63:90:1f:c7:06:a4:03:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:43 2025 GMT
            Not After : May 26 19:14:43 2026 GMT
        Subject: CN=3F86D3529F7ED3B0FD40796AB5C647160FDF4AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:9e:ea:f0:aa:99:f2:b2:e5:dd:28:c2:8f:
                    2d:42:da:ee:ea:64:94:18:50:d2:bb:cf:06:fe:73:
                    4b:f0:e1:bb:bc:a4:6d:15:a0:18:06:f4:d8:29:8d:
                    14:b6:41:e5:d3:68:d7:66:97:b5:0f:cf:de:66:00:
                    dc:db:47:01:93:f7:3c:aa:1e:f6:f4:d0:20:82:33:
                    af:53:3c:0e:af:f7:95:eb:b2:ce:1e:1e:e4:27:0e:
                    73:ac:b4:0a:e1:84:a7:bf:45:27:71:c8:f9:44:36:
                    5e:63:ed:55:2b:39:db:73:4d:19:ba:07:2d:65:a1:
                    d7:97:2d:ee:ab:8f:28:77:9e:77:2f:1f:44:6a:a4:
                    04:55:bd:92:be:23:aa:fd:d9:ee:ff:b3:00:89:f5:
                    86:53:26:4a:3a:a6:8f:5d:0a:33:0a:18:f6:0c:02:
                    22:22:8e:aa:25:58:a1:73:d4:9e:2d:4a:67:31:97:
                    45:db:38:d3:e3:ae:86:0e:be:c3:38:19:09:53:8a:
                    7c:ef:c8:b4:9e:46:c8:70:ee:28:cd:f5:c7:dc:8a:
                    a2:90:68:15:4f:8f:b8:c4:d4:ef:f9:ae:56:e3:e4:
                    2b:5c:b4:15:97:39:49:c2:58:d8:4d:72:ac:a2:6e:
                    20:af:00:af:fc:b6:95:74:89:89:23:5e:40:65:f0:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:86:D3:52:9F:7E:D3:B0:FD:40:79:6A:B5:C6:47:16:0F:DF:4A:F5
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134372e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:79:bf:a5:47:51:2b:22:14:e7:26:d3:9b:8c:74:0d:67:0d:
         1c:f1:65:60:e0:3f:7b:ba:ee:1e:0d:58:44:96:12:38:e9:36:
         e5:40:7d:65:10:59:83:d4:27:2d:db:16:20:1a:72:65:14:8c:
         fe:26:f3:36:2f:e0:5a:9c:c9:ae:7a:60:bc:34:c2:69:9d:c1:
         7b:bf:45:f0:7f:13:28:04:15:68:9e:10:f9:35:18:63:da:07:
         7f:ea:e4:17:8b:b2:fa:92:85:73:a8:71:2c:da:dc:fb:5a:05:
         41:4f:8a:e2:d7:37:be:12:f0:4b:3f:71:c0:fb:e7:c1:55:65:
         ba:c5:08:ec:9b:63:26:8a:07:64:64:2a:e1:89:f1:d5:25:59:
         db:1f:99:3a:d3:6d:69:a7:80:24:0f:2b:1a:dc:94:cd:3d:42:
         b0:08:9a:49:e6:f6:ab:19:35:b5:44:7e:7e:88:7c:3b:65:7c:
         35:64:57:c3:92:91:d1:ed:b9:56:f2:7d:51:9e:f6:b1:50:b0:
         20:7e:6d:d7:ee:d1:92:fb:e6:f3:82:6b:47:3b:ef:be:b6:50:
         d9:cc:d0:3b:74:f3:ee:96:b1:f9:e0:1b:63:ce:eb:15:2a:6d:
         39:2c:9d:eb:03:74:85:66:7b:5d:33:ef:80:fb:24:d8:88:f2:
         3f:20:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:13:32 2025 by rpki-client