Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135362e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135362e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          tQ+NW/hEwX0qyszPdCWBBbGMO+FZn8kMjRedWza8WAc=
Subject key identifier:   8C:49:46:30:B2:70:72:15:8A:1A:E4:7E:74:C1:F9:C3:9E:C5:43:C1
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       67059064FB481A7F800B7EB854ECC08B53E5D6B4
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135362e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:44 +0000
ROA not before:           Tue 27 May 2025 19:09:44 +0000
ROA not after:            Tue 26 May 2026 19:14:44 +0000
asID:                     264485
IP address blocks:        189.91.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 15:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:05:90:64:fb:48:1a:7f:80:0b:7e:b8:54:ec:c0:8b:53:e5:d6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:44 2025 GMT
            Not After : May 26 19:14:44 2026 GMT
        Subject: CN=8C494630B27072158A1AE47E74C1F9C39EC543C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:9a:72:b8:d2:a1:ee:24:a6:e1:68:c6:c5:
                    86:30:c4:a6:87:95:f6:18:c9:a8:5c:1a:ed:2b:98:
                    92:e2:ca:76:d7:55:c7:27:29:7b:c7:4e:8d:7a:3f:
                    17:0d:69:ce:34:9a:20:dd:3b:85:80:42:96:68:18:
                    bd:0e:32:08:4c:65:53:82:e7:82:3a:88:0c:46:9b:
                    3f:85:69:92:05:c4:07:df:00:9c:e4:3b:f5:c7:b4:
                    3e:7c:28:c6:db:f4:4d:c2:b0:e5:e9:7f:c0:4e:78:
                    56:ca:67:40:35:8e:1f:af:39:75:6f:c5:1c:c0:45:
                    aa:26:e5:dd:bb:e9:bd:93:d4:94:d9:ca:d3:b1:b7:
                    52:9b:33:30:da:f3:af:5e:87:ff:6a:46:bd:f1:05:
                    b9:72:9d:6f:93:d4:f9:50:29:73:30:42:56:83:87:
                    a8:1c:aa:12:a3:29:e1:43:af:10:6f:a7:c2:47:b8:
                    57:6a:c9:2a:0d:d8:80:43:c9:91:63:98:e2:67:78:
                    12:70:2d:c7:45:2e:9d:1d:fa:d9:2c:47:43:92:c4:
                    75:f6:3b:35:68:8a:f8:b2:0f:c6:fc:b1:b2:c8:e9:
                    bf:50:1d:c3:8a:3a:a0:b3:cd:ec:35:bd:d4:39:21:
                    2a:f0:e7:2c:c8:30:47:52:a5:e7:8c:69:d4:35:cd:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:49:46:30:B2:70:72:15:8A:1A:E4:7E:74:C1:F9:C3:9E:C5:43:C1
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135362e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:53:b3:a5:5f:f1:55:ed:0d:70:6f:91:f3:5a:7d:d3:58:
         72:de:0b:10:d1:e4:de:5d:54:c3:43:65:42:25:35:bf:c2:5b:
         47:80:88:a8:ec:ac:b4:7b:fc:50:2f:e7:b2:7c:f9:68:4e:d7:
         d5:23:0a:08:63:54:e8:9d:2e:73:37:94:17:92:f5:20:4d:6e:
         06:e1:fc:1c:5e:2c:9a:9a:f4:be:48:5f:4c:46:a1:df:b4:17:
         8d:b5:19:f1:aa:f8:24:1e:22:9b:cd:17:08:2f:0b:02:e7:cf:
         06:10:34:e5:d0:1a:bd:53:47:e4:95:76:97:22:d8:df:19:44:
         9e:57:06:17:ce:cb:12:b9:36:58:7a:eb:3a:74:5d:c3:79:cd:
         77:86:8b:92:10:98:5d:dd:55:a0:cc:ce:c4:fe:c9:93:72:2e:
         9b:aa:08:dd:29:b1:db:98:b0:7d:1d:a9:1f:ac:22:37:4c:1c:
         86:5b:47:c6:f8:75:0c:d3:61:27:b1:26:e1:d6:7e:aa:77:b3:
         4d:9a:6c:1f:68:10:a2:7e:3b:e0:d9:89:66:5c:b4:70:fc:d2:
         85:6e:09:3c:45:34:e2:c7:65:e4:23:2a:84:f1:36:48:78:bb:
         a8:bf:a4:e3:53:b1:38:08:95:1a:57:28:ce:c4:4e:cb:28:d0:
         db:f9:da:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:35:38 2025 by rpki-client