Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa
File:                     3133312e302e3230302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          rLhkvgLOqvOYdLBJ37wMc7Divc8wA53m1A9ysZj/GfE=
Subject key identifier:   5D:90:F2:EF:79:74:B4:05:6A:BB:9B:29:FA:BC:B4:80:F1:A8:B0:C9
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       4F86BF4EFDB921AA2622FE2032D7A0595DEBA7A7
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:48 +0000
ROA not before:           Tue 06 May 2025 00:44:48 +0000
ROA not after:            Tue 05 May 2026 00:49:48 +0000
asID:                     28649
IP address blocks:        131.0.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:bf:4e:fd:b9:21:aa:26:22:fe:20:32:d7:a0:59:5d:eb:a7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:48 2025 GMT
            Not After : May  5 00:49:48 2026 GMT
        Subject: CN=5D90F2EF7974B4056ABB9B29FABCB480F1A8B0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:a8:ed:aa:2e:3d:3f:4c:a3:82:cf:46:44:
                    3a:3a:7e:e0:79:9a:b7:b4:a0:65:42:92:03:51:6b:
                    e8:cf:00:c8:b7:d2:e7:b1:ca:be:b5:50:c2:0f:f6:
                    b3:5e:2b:f8:67:be:b7:d1:69:7c:df:a6:f6:c4:75:
                    12:3b:42:f0:c3:c8:41:06:1b:70:fb:72:e0:4f:a5:
                    55:c8:14:b8:56:1e:26:6b:db:5a:46:d3:47:6b:6a:
                    75:99:c2:05:95:ce:2d:89:1d:46:b2:0a:01:42:d0:
                    0c:49:17:8b:2a:e1:bd:6f:1b:a2:be:e8:d4:35:b5:
                    a0:3f:87:e3:f0:98:3e:5e:9a:8f:e4:e4:c7:dd:bb:
                    26:00:cd:9d:4b:8c:09:e5:eb:bc:47:32:a9:d4:1d:
                    d1:79:cd:03:49:fb:6b:1d:a0:ef:40:58:b9:89:a4:
                    43:86:2b:58:d1:51:00:7f:b1:54:55:4f:8e:70:f2:
                    f7:e4:8b:28:fd:a0:d5:c6:13:2d:d7:4c:7a:36:ba:
                    82:fd:47:95:02:b9:24:f1:25:41:2f:83:db:8f:bc:
                    95:84:dd:87:36:65:4f:ac:d2:a8:1b:12:7c:5b:98:
                    73:c9:75:c1:30:50:7d:fd:1e:2d:6d:8c:5b:61:14:
                    fa:18:eb:0a:6f:91:ff:f5:6c:62:c9:94:f5:41:c4:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:F2:EF:79:74:B4:05:6A:BB:9B:29:FA:BC:B4:80:F1:A8:B0:C9
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:36:79:a9:26:c1:e5:2d:4a:0d:47:3f:36:dc:a4:22:91:49:
         28:a9:f7:c6:a9:f4:93:39:88:66:68:77:bf:20:d0:75:30:ff:
         9c:9c:c1:82:5f:04:f3:81:e7:30:73:a1:e3:d2:5c:88:e9:ec:
         73:7d:96:db:5b:58:e6:b6:22:41:78:2d:d2:ab:46:2a:95:bb:
         84:dc:d7:9b:c9:52:be:f3:3c:5d:2c:ff:0d:32:30:38:25:05:
         24:05:18:ae:fb:cb:38:51:07:c5:31:4b:2c:5e:b6:34:37:bb:
         89:20:f9:2e:cf:57:3a:db:41:b6:15:13:98:30:8a:44:91:57:
         91:ae:79:42:05:e1:72:f7:17:d5:fe:52:5f:99:c8:2f:5e:80:
         52:91:84:ac:c1:1f:c2:2f:4d:f0:a1:03:92:c6:5f:83:95:22:
         80:86:d2:6e:34:75:45:d7:77:11:b4:77:36:e9:0b:65:b1:1e:
         d0:eb:c3:1d:87:f0:3f:16:42:76:49:ce:85:6b:78:1a:eb:7e:
         e8:3c:c9:68:f5:f4:bd:d8:64:98:10:63:61:cd:22:36:e7:03:
         5f:cb:07:ef:ee:58:1c:e4:9c:e2:c4:55:3d:9f:f6:83:55:26:
         be:60:30:b2:b0:07:88:ea:c3:29:6b:82:c8:ed:18:32:5c:b7:
         e6:e5:d1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:36:28 2025 by rpki-client