Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa
File:                     3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa (raw, json)
Hash identifier:          69f23jchQx3R05RqVX8TBD0Hohyjm25beL7qrV0oFtk=
Subject key identifier:   9D:54:1C:1C:3F:AD:54:BD:71:23:89:A8:2E:71:A2:26:2E:C7:BA:87
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       7E0CB81CBEA9F769B1A84CE011D465CB79F025A4
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:22 +0000
ROA not before:           Tue 27 May 2025 19:09:22 +0000
ROA not after:            Tue 26 May 2026 19:14:22 +0000
asID:                     264485
IP address blocks:        189.91.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 03:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0c:b8:1c:be:a9:f7:69:b1:a8:4c:e0:11:d4:65:cb:79:f0:25:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:22 2025 GMT
            Not After : May 26 19:14:22 2026 GMT
        Subject: CN=9D541C1C3FAD54BD712389A82E71A2262EC7BA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:79:0a:fa:65:25:c8:21:63:3a:3c:aa:d4:
                    d3:e4:a0:b8:e4:b3:ae:0c:db:40:75:d6:37:11:02:
                    2e:61:99:e7:e7:ad:63:8d:06:2f:2b:56:ff:e5:cc:
                    35:db:62:6b:8f:f7:ba:e3:79:75:bd:2b:1d:f0:60:
                    16:58:dc:9f:d8:b3:01:dd:5a:de:6e:3c:36:dd:b4:
                    88:3f:25:bc:57:27:e2:4b:e1:be:1c:6f:a1:7e:89:
                    6d:e8:1b:f9:a8:17:fb:7e:44:44:9d:e3:d2:60:74:
                    bd:b6:bb:7f:cc:40:7f:c2:9f:ad:33:97:ac:19:3b:
                    c2:ea:12:48:af:4a:86:27:bc:00:17:c5:ce:10:9d:
                    7d:5d:fa:16:ed:16:59:57:23:90:fc:fe:d2:a4:1c:
                    e9:0a:15:37:20:bd:43:2b:7f:0d:41:45:51:92:81:
                    0a:09:a8:75:e2:ea:cb:c7:40:99:08:80:7e:52:fe:
                    1c:55:29:36:85:e5:76:a8:ee:bd:81:78:0b:3a:92:
                    f8:d7:96:cc:c0:24:f6:eb:57:f8:d0:e3:57:08:8a:
                    0c:21:7b:44:08:b2:50:58:98:05:5c:f4:5d:89:e3:
                    40:f0:28:ed:79:96:0c:5b:fa:c9:51:50:f5:bd:18:
                    8c:e1:17:9d:f3:5d:5e:41:ee:cf:62:20:e4:41:cd:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:54:1C:1C:3F:AD:54:BD:71:23:89:A8:2E:71:A2:26:2E:C7:BA:87
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/3138392e39312e3135382e302f32342d3234203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:3d:e5:db:89:fc:9f:a2:22:b4:93:78:b3:34:9c:98:34:37:
         e9:34:09:c9:c8:97:33:7f:ee:52:ca:3f:75:6d:67:98:a6:ce:
         d2:8c:69:7b:89:d0:ad:9c:db:77:fe:97:71:03:73:b3:12:90:
         41:00:80:af:32:c0:a1:29:2e:9f:52:0b:26:e6:5f:45:0f:a1:
         fc:9c:c7:70:5d:04:52:2d:dd:de:8c:20:1f:ac:51:54:35:4a:
         21:3f:63:15:bf:14:e3:07:76:52:dc:2c:02:b4:cf:1e:9a:0a:
         8e:58:bb:d0:9a:74:e2:02:f4:9d:62:b3:8a:1e:06:c2:1b:85:
         0b:af:b5:a8:67:f9:68:6f:ba:cd:17:26:9d:00:78:3c:2b:2e:
         23:7b:39:d5:57:b6:6f:1d:a2:89:d7:21:88:6d:07:43:69:27:
         f1:b2:4f:c6:74:2a:e9:d0:bc:f3:bb:e3:2f:52:72:1d:5c:a1:
         5b:c2:0b:46:1a:16:75:e5:8d:4c:90:14:43:1a:fb:6b:c6:f5:
         86:f7:87:d7:d0:dd:67:75:f7:cc:22:c0:08:e7:68:a1:39:9c:
         a7:7b:36:17:c0:5c:74:71:ca:0e:31:6b:88:68:66:0d:b3:79:
         3e:8e:6f:69:59:9e:7c:82:fc:3a:83:4f:4d:13:35:29:9b:0b:
         d0:fe:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:12:21 2025 by rpki-client