Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          z0xWJbEwKjzTsPbv5KQEbRARfs5+pAaVEoEQgGU8GDU=
Subject key identifier:   EF:25:46:ED:CA:F2:09:A5:6C:52:C8:D5:0C:2A:4D:C6:EF:FB:D4:89
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       7628F112F41CA637EB38F44A77220D8576B47A61
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:38 +0000
ROA not before:           Tue 27 May 2025 19:09:38 +0000
ROA not after:            Tue 26 May 2026 19:14:38 +0000
asID:                     264485
IP address blocks:        189.91.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:28:f1:12:f4:1c:a6:37:eb:38:f4:4a:77:22:0d:85:76:b4:7a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:38 2025 GMT
            Not After : May 26 19:14:38 2026 GMT
        Subject: CN=EF2546EDCAF209A56C52C8D50C2A4DC6EFFBD489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:16:3b:a7:45:ca:3f:e0:f9:fb:ef:b2:7f:
                    b6:b3:bc:5e:e5:40:20:a7:a2:61:a3:93:5b:a2:36:
                    7b:85:95:49:7f:65:c2:74:bd:4b:1e:c4:ce:42:01:
                    c0:bd:f5:49:79:03:6b:5a:28:91:db:e0:e1:29:7f:
                    d3:49:4a:50:62:da:d6:7d:d4:95:16:eb:b7:79:fc:
                    1f:40:62:ce:98:8e:60:9e:36:cf:2c:70:68:98:7b:
                    44:3c:74:cb:76:02:69:1d:18:1a:6c:1c:3a:85:e7:
                    74:aa:27:0a:b0:14:88:50:85:3d:01:30:40:4b:63:
                    20:73:72:0d:ba:06:14:a9:ad:f3:56:26:96:c3:03:
                    69:dc:ee:62:f5:2b:81:13:e6:3a:43:d2:55:f7:bb:
                    70:ad:51:53:16:30:3b:4d:3f:6e:38:b9:3c:ee:23:
                    2b:5e:10:a7:00:f3:94:56:eb:39:bf:1d:9c:23:90:
                    de:b4:fb:0b:bb:31:02:14:2c:9a:5a:11:62:ec:cf:
                    b0:18:13:5f:93:d8:a5:bd:47:e1:fa:78:7c:33:a7:
                    ce:f8:6d:26:ea:fc:9e:36:e9:22:46:d4:ca:7a:ef:
                    9e:a4:08:0b:fe:92:78:e4:03:b0:ce:14:95:ee:81:
                    19:3f:00:84:05:13:07:c5:15:2a:a4:11:61:1e:02:
                    23:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:25:46:ED:CA:F2:09:A5:6C:52:C8:D5:0C:2A:4D:C6:EF:FB:D4:89
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134382e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:6f:d6:69:b9:56:8c:b8:fc:18:f1:72:9a:a2:4e:2d:f6:
         21:db:35:2f:ca:23:68:d0:37:d0:24:46:c9:c6:bc:da:5d:fa:
         6b:b1:41:94:67:9f:68:17:4f:d4:48:ed:ea:65:1e:43:39:9d:
         8e:04:0b:97:48:c0:a8:76:28:b3:75:b2:d2:16:20:5d:9f:11:
         cd:73:e3:80:c6:7f:9f:4d:5a:2c:a1:62:6f:7a:ad:ee:9a:f4:
         aa:48:fc:cc:45:b4:c6:74:19:b7:28:17:c0:6a:ff:b9:3a:b3:
         13:ff:f4:39:cc:28:35:6f:37:44:46:96:d0:1f:25:43:08:e5:
         30:0f:17:b8:34:ff:01:1a:ab:43:d7:e1:69:cf:19:f8:8b:25:
         c9:6d:c1:83:8b:03:98:86:53:58:a6:e4:68:c1:d8:f9:1b:87:
         8b:e4:88:8e:d7:64:ec:9b:b8:aa:a8:7e:10:08:cf:4b:6b:e9:
         ef:71:27:9f:96:75:8e:60:4d:72:82:21:3a:5c:1f:fe:15:32:
         f2:46:09:dd:73:4e:43:a0:fa:33:c3:a6:f1:d3:7f:d9:56:2a:
         bf:ec:3f:b0:d7:99:ba:97:e0:c0:f0:e7:71:a3:e0:a5:1b:ac:
         54:38:ba:27:3a:e9:7a:db:90:85:62:54:a8:47:48:56:94:4c:
         e9:cc:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:07:54 2025 by rpki-client