Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3232372e33322e302f32322d3332203d3e203238363439.roa
File:                     3136382e3232372e33322e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          TItXqtB7CGhXdYGEj5eX1TisRLeiOm0E8tqPBpAP+p4=
Subject key identifier:   88:7C:63:CC:72:81:A7:CF:AD:E1:95:DF:DE:7F:66:A4:4D:7E:E2:8B
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       7C98C804D214C30A6BE2D99D12AC8ABDEBE0C6FE
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3232372e33322e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:50 +0000
ROA not before:           Tue 06 May 2025 00:44:50 +0000
ROA not after:            Tue 05 May 2026 00:49:50 +0000
asID:                     28649
IP address blocks:        168.227.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:98:c8:04:d2:14:c3:0a:6b:e2:d9:9d:12:ac:8a:bd:eb:e0:c6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:50 2025 GMT
            Not After : May  5 00:49:50 2026 GMT
        Subject: CN=887C63CC7281A7CFADE195DFDE7F66A44D7EE28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:b6:3c:ee:85:23:b4:ec:88:10:bd:69:21:
                    40:78:22:6c:e7:08:54:7b:02:e3:d8:e9:fc:cc:1f:
                    b5:3f:b2:86:b4:b0:b9:4f:f4:0c:39:7f:cd:33:f8:
                    8b:35:9e:96:1e:71:f6:30:43:b7:bb:9b:52:de:ed:
                    df:c4:4a:9c:86:67:6c:62:ad:ad:3d:66:77:69:1d:
                    24:ef:ef:81:0a:6f:11:79:fb:e8:54:a7:b7:4e:95:
                    09:d2:c3:f6:8c:f3:e1:e1:06:7e:59:05:07:74:a9:
                    0e:a2:ff:ac:b5:71:7b:38:2b:97:82:37:cb:f3:bf:
                    50:d2:10:30:10:60:8f:f0:c5:8d:30:58:de:f3:f0:
                    4d:9c:52:af:50:e6:32:17:d4:41:ee:07:78:48:f1:
                    ed:b2:ef:e7:05:83:76:ae:7c:51:57:00:5d:bc:04:
                    3f:ca:cf:d8:94:71:70:42:4d:93:55:4e:10:73:b8:
                    5e:77:48:ce:a0:0f:e2:a1:c6:b4:1e:7a:a2:06:6e:
                    c7:db:5c:b9:89:35:ac:ed:7b:78:be:48:d0:5b:03:
                    4a:d6:5e:84:6a:cb:d7:40:ae:59:e2:8e:cf:e1:9b:
                    a2:76:4e:00:26:42:33:ad:f3:bf:dc:9b:9e:87:58:
                    25:f4:30:25:9a:81:57:7c:7b:10:38:23:07:05:6f:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7C:63:CC:72:81:A7:CF:AD:E1:95:DF:DE:7F:66:A4:4D:7E:E2:8B
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3232372e33322e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:38:25:c4:86:4b:ac:2a:10:c4:f4:93:b2:42:fc:85:bf:
         29:17:7c:9f:3c:89:5b:16:15:fb:b1:51:7b:1f:37:1b:ff:fe:
         97:e7:0d:20:0c:0b:5d:3e:fe:a8:32:4e:f0:9b:7d:34:d3:71:
         20:da:fe:62:06:dc:0c:cc:e4:1d:b3:53:03:85:de:7f:3b:62:
         4c:f7:38:ab:6e:68:f1:fa:12:b3:9f:ab:bf:d7:c2:7f:0b:fb:
         00:5d:ab:3c:2f:a6:fb:ba:95:a8:b0:8a:20:f0:d7:e5:34:a8:
         a8:42:a3:c4:33:bb:35:85:e6:7f:af:01:52:4b:3f:9f:fc:da:
         03:19:b6:f0:cb:64:a2:84:f9:c6:e8:dc:f8:4d:3b:90:81:da:
         8a:5c:03:7e:0d:ea:a6:15:e7:2a:2b:0a:f1:16:44:c8:72:09:
         4f:18:e7:a5:38:ca:00:e2:32:23:84:1f:b9:3a:27:26:01:d0:
         67:b9:0c:4f:31:01:9a:e6:a7:45:9f:0e:5c:80:71:92:6c:df:
         fc:86:c4:94:24:70:d3:52:24:26:fa:ff:84:fe:cc:f8:78:1f:
         af:cf:5b:2e:32:88:2b:d0:f3:78:98:85:a8:47:c3:a4:b5:55:
         76:be:3f:b3:97:cf:77:dd:4c:b6:92:b6:9d:01:9f:6a:af:f1:
         ab:c8:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:40:43 2025 by rpki-client