Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa
File:                     3138392e39322e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          K1r3QzZCwfr3AQg7T68wnF6Q6VzNFLWx7rDAMle0rL4=
Subject key identifier:   8D:A2:55:FE:E1:EE:21:84:BD:68:B8:8E:B2:87:50:CE:BE:15:4A:07
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       111707C517CF5A6554DA0DDAEC34A30211ACD282
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 19 May 2026 15:00:01 +0000
ROA not before:           Tue 19 May 2026 14:55:01 +0000
ROA not after:            Tue 18 May 2027 15:00:01 +0000
asID:                     22085
IP address blocks:        189.92.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:07:c5:17:cf:5a:65:54:da:0d:da:ec:34:a3:02:11:ac:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: May 19 14:55:01 2026 GMT
            Not After : May 18 15:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:7a:42:24:6f:9f:99:17:b8:18:6d:ce:dc:
                    c8:ed:2a:d4:7d:ca:f2:d0:cc:7e:86:d2:79:dc:25:
                    7f:26:13:0e:f9:b0:e0:29:56:42:68:3a:28:83:6e:
                    b8:3f:54:7c:e3:8e:ee:d6:53:74:42:cc:ad:44:a3:
                    50:73:ef:af:e9:fa:1a:b0:4e:e4:a7:fb:1f:2e:72:
                    c5:a5:89:56:49:a1:9f:f0:88:c6:0e:73:b9:c0:44:
                    16:c4:cb:40:59:71:80:57:f4:38:9c:0e:87:10:9c:
                    78:34:21:b9:24:78:5d:b1:38:d3:ff:90:0a:fe:e6:
                    52:5f:10:30:a6:44:59:40:c9:eb:d7:e9:67:ee:30:
                    16:fb:96:4e:ce:ec:4d:0b:8a:af:52:c7:cd:a1:cc:
                    47:51:ca:49:c4:1a:f0:40:80:65:97:11:4c:44:28:
                    65:dc:23:29:8b:25:77:89:6d:a7:59:e8:e7:f0:3f:
                    e8:21:3f:a9:5b:57:a2:01:51:b1:57:e8:53:5c:f9:
                    5c:66:aa:1a:7e:5e:f6:c5:87:17:ea:96:66:9b:d1:
                    50:c9:0d:e1:c8:f1:3e:30:71:78:9e:41:73:69:3e:
                    34:55:b2:27:66:47:f2:f2:01:ce:8b:5b:58:bb:a1:
                    1f:ef:7e:cf:62:fd:72:59:bd:b6:db:1a:36:50:73:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:55:FE:E1:EE:21:84:BD:68:B8:8E:B2:87:50:CE:BE:15:4A:07
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.92.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:a2:40:ee:6c:b1:be:a0:38:7e:c9:5f:3b:77:1d:d3:f8:
         12:d4:61:6c:fa:e1:ba:41:a1:fb:bd:52:af:51:44:b9:4b:1d:
         0a:f0:98:d4:cb:ef:97:f7:45:5e:ca:d2:90:6d:5a:8e:ac:d9:
         4c:81:11:1d:0b:3d:fc:bf:aa:0a:56:f5:07:d5:f1:7c:a4:45:
         99:94:41:34:94:5c:82:24:8a:3d:2b:18:17:dc:bc:1f:53:a6:
         27:0a:2a:c1:93:7f:41:e8:2a:1a:0f:2c:21:cc:9e:86:b5:6c:
         1d:4f:60:1f:17:f2:41:75:cd:33:f0:1d:85:d4:2d:57:99:93:
         27:a7:4c:cd:27:91:b3:db:f4:d8:76:5f:4e:2b:a9:25:d3:41:
         33:9b:72:6d:fb:9d:58:13:be:f6:96:7e:70:1d:a5:3c:c3:7c:
         61:f8:39:21:e1:d7:b3:a0:23:b7:aa:cf:3e:15:f1:cd:95:e4:
         b0:a0:e7:c5:91:7b:b9:d7:55:d0:bc:f5:52:52:cd:11:fb:82:
         57:79:2c:a8:35:de:fa:e0:48:53:8e:97:73:04:d1:2d:3b:47:
         49:4c:d3:cc:2d:d1:b3:ee:10:42:d6:7b:05:f8:02:33:89:42:
         08:fe:2b:f2:6f:80:89:4d:07:1b:fa:41:6f:ec:1c:fb:e6:fd:
         4f:46:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:35:23 2026 by rpki-client