Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          tLwaRPo1SwKfNAnrfG9OW8pXZAIFD2V57mjhWHGzJQo=
Subject key identifier:   EC:86:57:66:A5:81:37:6A:F1:8E:50:37:C0:B8:34:77:52:A6:66:5B
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       5B6FEB2E91E6C93C02266E6C4DE18495E9EE7BC9
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:36 +0000
ROA not before:           Tue 27 May 2025 19:09:36 +0000
ROA not after:            Tue 26 May 2026 19:14:36 +0000
asID:                     264485
IP address blocks:        189.91.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6f:eb:2e:91:e6:c9:3c:02:26:6e:6c:4d:e1:84:95:e9:ee:7b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:36 2025 GMT
            Not After : May 26 19:14:36 2026 GMT
        Subject: CN=EC865766A581376AF18E5037C0B8347752A6665B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:74:26:b4:94:53:44:57:4f:46:9b:fd:e6:
                    c1:e1:59:f7:85:81:52:3b:4d:22:ef:38:f8:68:0c:
                    0e:2f:75:22:b3:8a:85:c5:43:b5:ad:9a:dd:22:58:
                    e9:a9:62:c0:6c:34:93:2a:f8:1b:b1:a1:0c:11:2b:
                    97:c4:62:d4:54:12:51:5b:45:e4:2a:e7:12:6b:e4:
                    fd:22:0e:c6:b2:71:01:20:3e:ac:6f:ef:61:4b:66:
                    ef:3f:e6:81:d6:fb:1a:19:ce:cc:ee:6b:8e:2a:73:
                    8f:20:a3:2f:22:d2:2b:dc:e2:8f:ee:91:e7:d0:f5:
                    49:05:c0:9f:2a:b3:84:3b:ab:4c:f4:3f:5d:63:7c:
                    b1:46:7d:1c:64:65:80:a6:6b:f9:ff:81:ec:23:1f:
                    d2:cb:06:55:a9:9a:e3:32:ee:12:ec:4f:b7:8f:6c:
                    45:9e:5b:0f:c0:29:3a:54:38:73:1b:dd:e3:d3:9b:
                    05:2a:90:24:62:99:98:ea:f0:40:8f:0e:0d:c4:73:
                    69:64:5c:a6:b4:b4:95:fb:e3:1a:d2:5f:f5:b1:fb:
                    a7:8a:01:4a:66:d8:22:8f:8c:0b:63:b4:8c:da:30:
                    24:25:7a:8a:b0:35:43:4c:6c:c0:c3:18:1e:4f:07:
                    ac:7c:98:b2:5e:76:34:60:05:36:7d:73:11:4c:d7:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:57:66:A5:81:37:6A:F1:8E:50:37:C0:B8:34:77:52:A6:66:5B
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135302e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:19:41:0d:71:af:5a:59:c9:41:d8:ce:45:2d:bd:dd:47:
         86:6e:8c:c8:68:c5:7d:e8:01:b5:99:84:30:60:f0:2e:6f:0a:
         af:2d:aa:70:f7:7f:43:08:6f:60:29:76:42:e5:13:d4:c8:08:
         67:94:c4:e1:48:75:53:17:06:14:78:f9:95:02:59:58:c6:b0:
         8d:7d:4b:05:21:6a:14:09:dd:eb:99:b6:7d:15:17:ae:b0:fb:
         03:30:47:70:a8:33:52:b3:ec:17:b9:cc:99:80:d0:db:c0:99:
         89:1b:b4:4d:0c:25:ee:4d:a6:e7:86:cc:a7:52:5c:5c:cd:2c:
         b3:4d:57:e1:3c:d1:57:93:f2:a0:e9:c4:8c:46:1f:50:54:f7:
         40:d1:39:94:8f:64:73:b3:74:ba:4a:03:af:0d:cc:0f:87:f9:
         14:46:22:2a:53:06:2e:9d:5b:96:63:69:60:6f:24:70:ca:6d:
         a3:5e:30:b9:f2:41:e9:06:dc:c3:59:51:ae:16:c8:ff:7e:0c:
         2e:c2:f4:13:3e:05:02:8c:64:60:38:e2:89:f0:e1:20:e7:ad:
         ac:8b:29:bc:f6:27:eb:84:94:c8:5c:4a:6c:49:48:fc:d4:b5:
         85:1d:77:97:7c:55:d2:36:7f:d5:08:9a:45:07:56:2e:e8:bd:
         c5:83:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:52:14 2025 by rpki-client