Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3132302e302f32322d3332203d3e203238363439.roa
File:                     3137302e38332e3132302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          Fx/79+30r24jIdSCPuLnBJ9z4WYYFTXcSgeFHjV5du8=
Subject key identifier:   C0:A8:F3:76:98:07:6B:FC:14:65:6A:05:02:22:BD:87:D4:F4:A1:C2
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       0A150CCF8C9AA65B26D811BAE0E35C4E0C575478
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3132302e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        170.83.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:15:0c:cf:8c:9a:a6:5b:26:d8:11:ba:e0:e3:5c:4e:0c:57:54:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=C0A8F37698076BFC14656A050222BD87D4F4A1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:17:d8:6d:b6:9f:dc:bd:65:94:05:f5:72:
                    b8:e8:7f:e7:97:c7:a4:27:95:4e:95:82:7b:ba:bb:
                    1e:41:a3:1b:bb:20:ff:7f:6f:9b:c9:70:4f:68:65:
                    ee:84:d6:01:98:04:f2:65:1e:17:5e:86:3c:99:6d:
                    61:68:49:de:2c:65:22:8f:0a:2a:9d:ee:db:f9:7c:
                    88:02:64:7e:26:4c:ef:a2:79:e1:74:e7:44:a4:4a:
                    61:81:0a:73:53:dc:c9:01:60:5d:14:41:d4:6d:ec:
                    c6:7f:68:69:34:3b:50:24:14:d1:25:01:c1:2a:d1:
                    01:3f:a3:16:55:d3:15:1a:7d:7c:34:e9:28:b2:ac:
                    76:a7:5b:37:6f:73:e9:93:06:e7:dd:87:d5:ef:cd:
                    8a:10:43:87:e3:b8:86:a2:59:07:c7:19:31:af:94:
                    8a:2c:8a:d9:05:8a:42:3f:ac:76:ab:d1:64:89:16:
                    f2:9b:0b:06:ff:9e:23:1e:16:00:d0:ea:34:e1:9f:
                    b8:38:dc:ca:13:b4:f8:71:88:11:86:72:04:f6:d1:
                    7d:07:54:65:2c:94:db:b6:ef:e1:12:29:9d:df:bf:
                    67:14:90:8e:ab:55:3b:15:34:ce:4d:1b:dc:1a:1c:
                    d1:4e:bf:e5:cb:96:0e:a6:a0:18:8f:98:5b:ee:81:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A8:F3:76:98:07:6B:FC:14:65:6A:05:02:22:BD:87:D4:F4:A1:C2
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3132302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:bf:d8:d5:e1:b1:1c:14:2e:d1:14:1a:a0:38:1f:61:cf:
         2f:d9:02:f8:1d:e0:c6:e7:3b:5d:3f:f8:9f:8c:26:69:35:c9:
         62:78:23:fd:6d:a3:a5:ca:ef:7b:15:94:77:35:56:c0:2e:1c:
         fb:9d:bd:8b:15:87:c7:4c:f1:83:c9:1d:93:e6:9e:80:72:3a:
         02:58:81:1c:a3:35:5f:e9:4c:96:23:08:47:8e:e1:c5:25:e3:
         47:9c:7e:b6:36:0d:ae:f2:a3:ef:ac:46:55:c9:74:99:ea:ef:
         f7:9b:07:39:c8:08:a4:2c:31:95:b6:c8:61:77:0f:dd:ae:b4:
         79:a5:73:b5:4d:c4:50:63:38:d0:e6:c3:01:a4:29:01:dc:14:
         fd:f7:12:60:09:6f:ce:20:fb:50:3b:bc:62:7e:28:ae:4a:3b:
         78:4a:40:40:08:09:ed:6b:62:37:ee:03:5a:e5:eb:9c:f4:d5:
         0b:87:16:68:0c:f9:1b:47:8e:8e:e1:05:16:c2:cc:f6:88:e0:
         ca:6d:60:56:e9:94:b9:60:eb:f6:8d:a4:79:a3:e0:25:5f:82:
         38:79:86:49:8f:03:84:12:47:67:3c:b3:3d:b9:68:13:b1:39:
         f7:f5:1e:be:3e:3b:78:f2:39:fd:7a:f3:91:f3:e0:c9:36:47:
         13:54:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:24:47 2025 by rpki-client