Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e302e32302e302f32322d3332203d3e203238363638.roa
File:                     3137302e302e32302e302f32322d3332203d3e203238363638.roa (raw, json)
Hash identifier:          EFaHK4OMyBfieZQZ0p5vzvhRm5/9hur7mJODNDgESuw=
Subject key identifier:   A7:D5:04:DC:07:ED:52:0F:9D:AD:6D:DF:08:A1:F0:76:D9:A5:A0:8F
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       25754A44EB178698D8FB283FD016F3282DC3763A
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e302e32302e302f32322d3332203d3e203238363638.roa
Signing time:             Tue 06 May 2025 00:54:51 +0000
ROA not before:           Tue 06 May 2025 00:49:51 +0000
ROA not after:            Tue 05 May 2026 00:54:51 +0000
asID:                     28668
IP address blocks:        170.0.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:75:4a:44:eb:17:86:98:d8:fb:28:3f:d0:16:f3:28:2d:c3:76:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:49:51 2025 GMT
            Not After : May  5 00:54:51 2026 GMT
        Subject: CN=A7D504DC07ED520F9DAD6DDF08A1F076D9A5A08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:23:77:d9:75:13:87:84:1a:2e:77:52:2b:
                    17:48:70:0f:1f:6f:4e:cb:d3:93:b0:48:4a:50:df:
                    32:23:59:a1:06:ed:73:fe:b2:0c:da:a4:51:04:35:
                    48:0f:ed:c1:9c:7f:5e:d1:47:ca:f8:e7:b2:5c:57:
                    58:d9:30:2f:e6:c2:0b:fa:f6:77:8e:0c:6c:b5:40:
                    d7:77:1c:04:4b:9e:c6:33:c7:f3:bd:ba:8a:a8:b2:
                    b7:e1:c9:f6:92:45:43:65:30:83:86:5c:1e:0e:98:
                    de:b2:20:4e:8c:83:06:06:ca:1b:71:a1:50:94:25:
                    76:e2:88:61:52:fc:9c:f4:ab:7f:b6:2b:32:24:f5:
                    bb:75:9a:b1:e6:94:59:06:6f:c7:cf:cc:0b:e7:62:
                    71:c5:c2:66:7f:ef:5e:36:87:65:6a:4c:c9:6b:06:
                    9b:96:41:d2:0a:ae:b1:9e:02:16:66:76:49:12:99:
                    ef:28:3f:1c:d4:09:71:eb:81:37:70:da:15:9c:97:
                    c8:8f:c5:95:0c:c9:0a:c0:93:ad:a6:3c:64:64:8e:
                    e6:c1:c1:3f:7d:32:dd:12:f5:b7:25:99:fe:6e:9b:
                    9b:0e:64:d3:6a:fc:75:ce:9d:6d:60:be:b2:fb:b1:
                    69:65:3d:08:de:73:07:c1:9a:a6:5a:7e:c9:06:f2:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D5:04:DC:07:ED:52:0F:9D:AD:6D:DF:08:A1:F0:76:D9:A5:A0:8F
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e302e32302e302f32322d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:5f:7f:65:e2:08:8b:fc:e1:a5:2e:13:8a:a5:e3:d8:a2:
         54:36:25:08:18:93:cd:f2:ef:bc:25:2e:94:95:6e:0a:0f:99:
         03:a2:c3:16:79:f3:dc:24:b1:ef:f3:db:51:18:c4:b2:e2:9e:
         ae:90:ee:ea:d2:f7:17:3a:ee:31:41:07:13:38:15:8d:9e:cc:
         94:a0:08:11:8a:be:96:d3:99:1c:c8:5a:ac:44:35:46:1f:75:
         68:bd:fe:6b:5d:18:9c:54:c0:92:e9:2a:b6:08:42:d8:0c:36:
         5d:95:62:61:14:33:11:ef:f3:ae:43:2a:1c:b5:6a:d3:5b:b0:
         fa:97:be:2a:06:17:1e:96:f7:03:d2:09:27:0b:a3:a5:ec:a7:
         c0:46:b4:ed:b6:27:4e:2d:c9:8c:b2:1e:b4:eb:48:92:68:96:
         b9:92:0a:67:1b:d0:2d:5c:db:88:32:f3:3d:57:7b:0d:87:54:
         64:67:b5:e2:8b:b2:da:77:b7:d6:13:aa:7e:21:20:28:78:58:
         30:c3:dd:78:81:e1:da:c4:0a:e9:b6:c2:18:60:93:aa:41:cd:
         80:6a:60:c5:69:c0:aa:d6:c5:d4:85:44:40:39:0f:2d:c9:9f:
         d4:ec:77:08:f3:9a:7e:96:05:e8:b8:bf:3f:54:f1:38:30:f9:
         57:76:c2:0a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUJXVKROsXhpjY+yg/0BbzKC3DdjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM5M0UxMDM5OTJGNThEQ0EwMUY0OUNGMzRFOTkzMzdG
Q0YwREI0MzAeFw0yNTA1MDYwMDQ5NTFaFw0yNjA1MDUwMDU0NTFaMDMxMTAvBgNV
BAMTKEE3RDUwNERDMDdFRDUyMEY5REFENkRERjA4QTFGMDc2RDlBNUEwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVSN32XUTh4QaLndSKxdIcA8f
b07L05OwSEpQ3zIjWaEG7XP+sgzapFEENUgP7cGcf17RR8r457JcV1jZMC/mwgv6
9neODGy1QNd3HARLnsYzx/O9uoqosrfhyfaSRUNlMIOGXB4OmN6yIE6MgwYGyhtx
oVCUJXbiiGFS/Jz0q3+2KzIk9bt1mrHmlFkGb8fPzAvnYnHFwmZ/7142h2VqTMlr
BpuWQdIKrrGeAhZmdkkSme8oPxzUCXHrgTdw2hWcl8iPxZUMyQrAk62mPGRkjubB
wT99Mt0S9bclmf5um5sOZNNq/HXOnW1gvrL7sWllPQjecwfBmqZafskG8gkbAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUp9UE3AftUg+drW3fCKHwdtmloI8wHwYDVR0j
BBgwFoAUHJPhA5kvWNygH0nPNOmTN/zw20MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8xQzkzRTEwMzk5MkY1OERDQTAxRjQ5Q0YzNEU5OTMzN0ZDRjBEQjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDOTNFMTAzOTkyRjU4RENB
MDFGNDlDRjM0RTk5MzM3RkNGMERCNDMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNzMwMmUzMDJlMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzgzNjM2
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKqABQwDQYJKoZIhvcNAQELBQADggEBAARaX39l4giL/OGl
LhOKpePYolQ2JQgYk83y77wlLpSVbgoPmQOiwxZ589wkse/z21EYxLLinq6Q7urS
9xc67jFBBxM4FY2ezJSgCBGKvpbTmRzIWqxENUYfdWi9/mtdGJxUwJLpKrYIQtgM
Nl2VYmEUMxHv865DKhy1atNbsPqXvioGFx6W9wPSCScLo6Xsp8BGtO22J04tyYyy
HrTrSJJolrmSCmcb0C1c24gy8z1Xew2HVGRnteKLstp3t9YTqn4hICh4WDDD3XiB
4drECum2whhgk6pBzYBqYMVpwKrWxdSFREA5Dy3Jn9Tsdwjzmn6WBei4vz9U8Tgw
+Vd2wgo=
-----END CERTIFICATE-----
Generated at Wed May 14 09:55:38 2025 by rpki-client