Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
File:                     3136382e3132312e36342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          KmzceVuYG7se4wNmBfeTB/cVGU1toHDfy7u0mBSVxJQ=
Subject key identifier:   95:5F:88:BF:3B:62:97:97:F5:A4:94:6E:26:59:6A:B1:60:1B:9B:7B
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       40C1CE9C5AAE02E1B80032F7B3AD4AD3E55C9564
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        168.121.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c1:ce:9c:5a:ae:02:e1:b8:00:32:f7:b3:ad:4a:d3:e5:5c:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=955F88BF3B629797F5A4946E26596AB1601B9B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:b4:15:39:9b:27:7c:e0:9e:e9:b6:b0:37:
                    7c:2d:39:11:3d:1b:c9:f6:e9:f3:f3:e7:4a:0a:a5:
                    02:9a:df:b7:70:f3:52:92:a0:b9:73:d0:f6:3b:c3:
                    f8:ea:8a:ff:12:e0:d4:49:00:51:0f:a6:6f:79:52:
                    d1:c8:f5:6a:c3:a2:9c:42:72:b8:d4:43:04:c4:92:
                    37:aa:49:92:bc:95:95:49:d7:2b:66:7b:b1:38:43:
                    9a:67:71:55:69:45:70:e8:88:1a:4a:9c:ef:dd:72:
                    4c:7d:d9:ea:01:19:41:5c:fc:d1:6b:18:68:87:b1:
                    40:9e:bc:01:cc:d8:80:08:53:ed:d0:6a:0e:f4:9b:
                    fe:4e:18:c6:38:2b:0e:41:69:8d:1c:f3:df:31:30:
                    d3:2c:54:f4:b1:6c:f7:61:15:14:49:ec:4a:1a:52:
                    32:6d:0f:76:6e:bf:cf:cc:21:6c:f9:be:85:41:6f:
                    24:3d:a3:b9:d5:cb:dd:fe:44:01:50:64:97:aa:f2:
                    79:a7:7b:6a:3d:d3:ff:f0:8b:6c:87:98:4a:17:13:
                    9a:7c:b2:e2:ba:8d:87:65:2b:d1:0e:79:2b:dc:d2:
                    a2:98:b3:34:f1:e3:59:fb:a0:b8:01:37:59:5d:29:
                    0d:8b:98:7d:f8:6d:bb:f8:be:a3:ee:25:65:22:b9:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:88:BF:3B:62:97:97:F5:A4:94:6E:26:59:6A:B1:60:1B:9B:7B
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:80:41:79:f3:fe:51:b2:b0:9d:34:58:f3:b2:36:2a:c4:
         a1:14:e9:92:40:55:3f:1b:e1:09:a5:56:b6:8e:bd:78:68:c9:
         41:d3:fe:79:be:81:49:66:30:06:a9:35:5f:1e:14:1b:90:fc:
         5e:5e:b4:62:8e:7b:91:b8:62:b2:83:2e:8c:af:74:2a:62:97:
         a5:99:01:78:31:61:a0:13:52:3f:c1:bb:e8:6a:84:9d:b4:9a:
         67:d7:62:59:2a:34:5e:73:97:7f:b6:ef:5b:f5:bd:27:16:2c:
         fc:41:5b:c0:e2:c8:fe:4a:25:32:1c:1c:fe:09:28:4f:13:52:
         52:73:ff:89:f2:1f:8c:d6:26:1c:c5:2d:f1:b4:8f:a1:5d:5a:
         14:b8:da:00:41:88:0b:9a:02:b5:1c:b8:96:60:e8:d1:6d:d1:
         9c:17:e6:d6:91:6f:24:d0:81:be:7d:ce:9b:ce:fb:ab:d2:bd:
         7c:f7:10:63:be:58:a8:cc:3e:7e:0b:eb:5a:15:af:36:3a:14:
         4b:41:ad:9d:33:54:f5:34:73:15:e1:84:cc:79:65:51:42:a7:
         00:70:ce:1a:01:36:5b:86:09:45:a7:98:00:9e:1f:a5:89:fc:
         04:34:fb:49:3a:b0:66:9c:f0:dc:08:ce:b5:8d:ab:56:d2:d4:
         0f:9a:27:05
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQMHOnFquAuG4ADL3s61K0+VclWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM5M0UxMDM5OTJGNThEQ0EwMUY0OUNGMzRFOTkzMzdG
Q0YwREI0MzAeFw0yNTA1MDYwMDQ0NDlaFw0yNjA1MDUwMDQ5NDlaMDMxMTAvBgNV
BAMTKDk1NUY4OEJGM0I2Mjk3OTdGNUE0OTQ2RTI2NTk2QUIxNjAxQjlCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfbQVOZsnfOCe6bawN3wtORE9
G8n26fPz50oKpQKa37dw81KSoLlz0PY7w/jqiv8S4NRJAFEPpm95UtHI9WrDopxC
crjUQwTEkjeqSZK8lZVJ1ytme7E4Q5pncVVpRXDoiBpKnO/dckx92eoBGUFc/NFr
GGiHsUCevAHM2IAIU+3Qag70m/5OGMY4Kw5BaY0c898xMNMsVPSxbPdhFRRJ7Eoa
UjJtD3Zuv8/MIWz5voVBbyQ9o7nVy93+RAFQZJeq8nmne2o90//wi2yHmEoXE5p8
suK6jYdlK9EOeSvc0qKYszTx41n7oLgBN1ldKQ2LmH34bbv4vqPuJWUiufShAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlV+Ivztil5f1pJRuJllqsWAbm3swHwYDVR0j
BBgwFoAUHJPhA5kvWNygH0nPNOmTN/zw20MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8xQzkzRTEwMzk5MkY1OERDQTAxRjQ5Q0YzNEU5OTMzN0ZDRjBEQjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDOTNFMTAzOTkyRjU4RENB
MDFGNDlDRjM0RTk5MzM3RkNGMERCNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNjM4MmUzMTMyMzEyZTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqHlAMA0GCSqGSIb3DQEBCwUAA4IBAQCLK4BBefP+
UbKwnTRY87I2KsShFOmSQFU/G+EJpVa2jr14aMlB0/55voFJZjAGqTVfHhQbkPxe
XrRijnuRuGKygy6Mr3QqYpelmQF4MWGgE1I/wbvoaoSdtJpn12JZKjRec5d/tu9b
9b0nFiz8QVvA4sj+SiUyHBz+CShPE1JSc/+J8h+M1iYcxS3xtI+hXVoUuNoAQYgL
mgK1HLiWYOjRbdGcF+bWkW8k0IG+fc6bzvur0r189xBjvliozD5+C+taFa82OhRL
Qa2dM1T1NHMV4YTMeWVRQqcAcM4aATZbhglFp5gAnh+lifwENPtJOrBmnPDcCM61
jatW0tQPmicF
-----END CERTIFICATE-----
Generated at Mon May 12 15:52:04 2025 by rpki-client