Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          TDEic9r0NDrlt5GbEzk43sl8ft0MNH4yXqjJaykbRHI=
Subject key identifier:   C2:D8:8C:BE:E3:7A:69:BE:D1:02:D0:5D:70:E7:F2:9E:49:90:D1:3B
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       11A7CE16772FD2145B27858191CAB3200E4B80D6
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:28 +0000
ROA not before:           Tue 27 May 2025 19:09:28 +0000
ROA not after:            Tue 26 May 2026 19:14:28 +0000
asID:                     264485
IP address blocks:        189.91.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 10:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:ce:16:77:2f:d2:14:5b:27:85:81:91:ca:b3:20:0e:4b:80:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:28 2025 GMT
            Not After : May 26 19:14:28 2026 GMT
        Subject: CN=C2D88CBEE37A69BED102D05D70E7F29E4990D13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:9a:59:7a:e8:0c:74:64:76:28:da:aa:83:
                    b3:51:b9:5a:a9:de:f1:fd:24:3c:e4:2c:d5:b4:74:
                    57:b2:b8:c7:85:86:ff:7f:56:27:96:e1:30:53:26:
                    78:5d:53:1c:84:9f:99:8b:00:c7:b2:20:a5:44:3a:
                    6d:bc:e6:6b:0d:5e:b5:94:e6:87:ce:cc:47:55:f5:
                    51:97:1c:d1:16:7f:88:c6:17:a8:ac:d7:2c:e2:d6:
                    57:66:41:ca:6f:c9:6d:83:5d:80:13:64:83:b6:75:
                    20:9f:4f:74:96:ec:ac:de:a7:4d:af:98:bd:c8:5c:
                    8b:83:1b:93:fc:2e:3f:0a:50:e9:fb:a8:ba:d8:15:
                    f0:b5:33:2b:13:3d:75:85:d8:b6:14:5e:1e:55:b4:
                    0e:5e:54:9f:b3:98:03:32:60:54:19:c1:80:48:d8:
                    ed:2e:c6:78:ce:68:ae:9f:ae:59:2f:16:3a:7c:af:
                    35:5c:c4:0f:cc:fb:e6:15:00:45:85:6c:2e:0d:ee:
                    96:96:95:6d:e1:6e:40:6a:f1:9d:08:9e:45:0f:12:
                    6f:33:13:f4:f6:a4:28:c1:0a:bb:60:ac:96:d0:c8:
                    96:db:e0:ac:b2:a6:b0:f6:7f:04:af:00:89:4b:c0:
                    c7:eb:e3:cd:d7:ba:b0:d8:d5:96:b8:68:e4:3d:19:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D8:8C:BE:E3:7A:69:BE:D1:02:D0:5D:70:E7:F2:9E:49:90:D1:3B
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3134392e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:1b:1e:64:cc:af:ba:a2:d9:8a:44:7a:b0:ad:80:43:1d:de:
         2f:dc:36:9d:57:5b:5b:89:b6:12:a0:0c:e6:9d:0a:2c:b5:7a:
         79:56:c1:6b:f2:fe:54:18:9c:c0:34:5d:ea:a9:e9:4f:9b:32:
         68:f5:89:33:e6:94:39:a2:1d:b5:43:61:4d:25:08:33:ed:ce:
         9b:51:d7:36:14:3a:eb:28:41:36:29:97:ca:8a:67:d1:25:88:
         93:6d:90:86:93:93:c0:27:88:f7:ed:2f:e7:c3:8a:f0:c6:b1:
         7e:76:d8:c5:08:64:44:c5:ae:36:ed:24:af:23:13:48:36:21:
         e4:bc:ac:11:e0:bd:79:2d:16:f6:7e:94:23:11:9d:fd:1f:8b:
         76:1f:31:15:23:8d:fe:29:b6:1e:4a:ba:7d:ef:18:84:84:26:
         91:a9:f4:e6:fd:9c:e7:48:c9:7a:b2:a4:dd:58:8a:8a:08:a2:
         92:20:99:3a:2a:ab:70:19:43:b8:33:30:65:6a:eb:29:48:d6:
         b3:d4:9a:e7:7b:16:d4:38:8e:de:4b:53:b7:8b:40:99:57:3c:
         94:32:6c:19:05:31:cc:c9:f5:e3:18:df:72:f1:63:fa:d5:2d:
         47:bc:64:18:bf:e6:c1:86:9a:fb:46:01:1f:39:69:6f:32:31:
         20:f8:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:34:41 2025 by rpki-client