Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3131382e39362e302f32322d3332203d3e203238363439.roa
File:                     3133382e3131382e39362e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          ANKExQnaS6x486Z+PJk17Wjo32R/xDMp143UXM1yJCs=
Subject key identifier:   42:C8:D8:40:C4:16:0A:38:AB:EE:25:46:75:88:17:C8:5B:EC:71:AC
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       42DA08D957B65E033ADEB922DA22B87C04BF2A26
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3131382e39362e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        138.118.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 12:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:08:d9:57:b6:5e:03:3a:de:b9:22:da:22:b8:7c:04:bf:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=42C8D840C4160A38ABEE2546758817C85BEC71AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:ad:f1:b5:bc:00:67:28:de:fa:8d:11:62:
                    32:ae:3b:f5:c4:be:5d:a2:92:00:0d:95:e8:73:8f:
                    df:ae:2f:1d:b8:cd:24:66:18:12:49:33:a9:fb:0b:
                    90:5c:aa:d7:92:6e:67:4d:11:df:9f:18:08:41:ec:
                    06:f4:7b:05:fc:2a:bc:79:2f:84:44:02:42:79:16:
                    62:7d:bd:92:1e:b7:dd:e5:ab:59:81:74:41:97:ae:
                    47:ef:7a:4a:69:49:8b:db:5f:1a:92:c2:92:94:5c:
                    14:1a:79:9d:1d:22:b2:5f:9f:6c:8a:ba:1f:b1:a7:
                    94:cb:a3:d6:d8:c1:d5:f0:50:f4:da:f0:b7:bd:00:
                    0f:dc:35:a9:d8:42:5f:4f:09:2b:ff:a8:8e:ab:7d:
                    8d:91:cf:e5:af:cb:57:fd:5b:9d:ba:65:a9:78:65:
                    de:cb:09:61:ed:70:f8:d8:8a:c3:31:4b:14:70:a5:
                    6c:5c:96:55:87:36:93:53:8e:46:e6:fb:6f:fc:20:
                    22:3e:bd:85:34:88:d5:b5:27:10:72:26:54:ad:52:
                    b9:0e:e3:f8:18:b1:48:bd:bc:b1:f4:94:fd:b6:44:
                    4a:76:6c:cf:88:92:39:bd:bc:f8:db:58:a4:1a:ca:
                    50:b3:b8:0c:a4:a2:d1:65:a1:58:49:04:fd:04:0d:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C8:D8:40:C4:16:0A:38:AB:EE:25:46:75:88:17:C8:5B:EC:71:AC
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133382e3131382e39362e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:2a:5d:11:05:fb:f2:68:a6:8b:c0:5d:2a:23:60:a8:67:
         3f:7f:c1:ad:ba:a3:48:16:9e:f2:0c:72:74:fc:cc:bf:35:61:
         d9:39:a4:2d:95:71:64:c7:7e:aa:17:7f:9a:d1:4f:b9:a7:76:
         f0:dd:d9:84:68:a8:43:21:42:01:c6:81:03:58:7a:1c:fe:4c:
         4b:b2:93:3d:c1:6e:f7:6d:64:75:e0:f3:74:2c:a9:f8:d9:f3:
         29:f4:7e:df:38:1f:82:1d:6e:b4:5a:2b:7f:27:85:e3:4b:7a:
         02:df:d8:a1:b1:c6:69:78:4e:40:92:73:47:b2:8f:db:e4:15:
         99:d2:a5:d3:a6:16:6b:12:75:99:ad:50:6f:b8:9c:51:46:c1:
         59:c3:32:e4:60:6e:9c:7c:19:40:d6:d8:9d:e1:e1:f7:d1:a2:
         c1:e6:3e:03:81:b8:af:f0:69:17:80:70:e6:e8:58:f5:9a:0d:
         ce:fa:2d:52:a2:64:fa:53:c7:41:f9:64:a6:87:d5:39:c7:6b:
         10:01:b8:74:bd:4f:a6:15:f7:d9:67:3f:2e:a1:0d:14:8a:32:
         62:75:1e:30:d2:b4:ce:d9:87:5e:69:cf:e7:87:c7:34:34:30:
         c8:3e:34:3c:d3:3a:be:14:a5:66:76:14:4b:06:cb:4b:fd:52:
         7a:66:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:12:45 2025 by rpki-client