Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          BxtNJxijOLn53XdgpilslrKbgvyzYqUyBTn7Ezuki2c=
Subject key identifier:   E7:4D:8D:10:03:54:DA:02:08:39:93:61:6F:9B:5D:91:AF:60:4B:24
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       598F6A77DF6C9AF6E73EDDCC643A9641BA2014FE
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:38 +0000
ROA not before:           Tue 27 May 2025 19:09:38 +0000
ROA not after:            Tue 26 May 2026 19:14:38 +0000
asID:                     264485
IP address blocks:        189.91.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8f:6a:77:df:6c:9a:f6:e7:3e:dd:cc:64:3a:96:41:ba:20:14:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:38 2025 GMT
            Not After : May 26 19:14:38 2026 GMT
        Subject: CN=E74D8D100354DA02083993616F9B5D91AF604B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:23:31:90:88:3c:2f:12:39:e7:1e:6f:db:a0:
                    d5:a4:30:40:89:45:d2:3f:b3:49:f3:28:4b:0a:66:
                    7f:68:59:fa:2e:00:f3:0b:df:44:18:5d:a4:08:71:
                    16:d7:0e:9a:97:17:59:3b:e3:c0:b8:3b:b4:fc:60:
                    f1:09:2d:1e:67:a0:59:f6:f1:67:ec:6c:12:f8:a3:
                    fe:61:a6:28:70:2c:69:0c:7d:5f:1d:f3:a8:91:d6:
                    c0:9a:79:0b:93:fe:0f:77:2e:d6:f1:a4:89:40:49:
                    0a:20:1f:77:94:2c:f8:a0:a6:f8:f0:8c:5f:cf:10:
                    81:ad:90:4c:c4:bb:49:64:fb:cb:52:6e:a5:31:89:
                    2c:ab:90:6c:fa:de:29:d1:62:7f:d9:01:db:63:0b:
                    0c:48:8b:61:a2:fa:1a:65:7b:4f:99:e3:0d:c5:84:
                    df:9c:50:bf:71:0e:b9:a7:ba:2d:76:9d:ed:89:a7:
                    e3:e9:e9:3a:53:da:cc:8a:7b:cc:98:80:fd:d0:08:
                    8b:0f:97:0a:69:14:1a:39:28:42:43:ca:c8:c2:70:
                    27:01:e6:5c:a3:9f:99:9f:27:28:fc:7b:92:4f:da:
                    89:1d:b2:ee:ca:f9:7e:c1:ea:8a:83:bc:76:cc:56:
                    e4:4f:d8:26:5c:7a:c4:e1:99:09:b9:81:1f:44:fb:
                    ff:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:8D:10:03:54:DA:02:08:39:93:61:6F:9B:5D:91:AF:60:4B:24
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135372e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:6c:f7:2b:6d:66:cd:99:32:d6:7d:f4:2e:0b:38:c6:00:
         39:47:ba:0f:80:1f:bc:bb:e7:74:ea:c2:16:22:8f:dc:3c:ec:
         6b:b9:6c:b9:52:8a:f6:2b:cb:38:22:61:7c:31:d8:06:e9:db:
         ac:85:4f:1e:52:bc:7b:18:37:b2:3f:b2:2e:78:80:51:6c:cb:
         3c:93:8f:f4:ce:cb:9e:ba:ef:e1:b0:99:19:6d:ed:0f:8b:a5:
         78:c7:8a:b5:c5:58:ab:29:94:9d:1c:c3:ab:47:4f:14:1c:90:
         6d:44:34:8b:ab:86:d7:c6:bc:ca:01:c6:78:12:99:d6:c6:bd:
         da:5a:00:02:2b:b3:40:37:73:61:50:c7:94:72:39:2e:a4:c1:
         8b:57:4a:12:1d:6c:c9:84:7c:45:13:98:b0:61:05:6b:6c:e7:
         77:4a:72:2f:89:00:2b:ef:af:b2:be:2d:ba:da:30:f3:7f:16:
         64:7a:9f:9c:a8:21:e5:dd:99:cd:03:6a:46:93:ae:45:df:f1:
         6a:45:46:b8:a2:d4:97:cc:dc:16:bb:4c:71:d5:ae:88:cb:ce:
         bc:05:5c:dc:16:4c:e2:0a:7d:93:fa:ca:3a:30:ce:99:be:76:
         d3:55:7d:8c:3a:f3:22:c5:a5:44:e6:e6:18:a9:19:f1:41:d2:
         18:c4:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:54:07 2025 by rpki-client