Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa
File:                     3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          gDVAp/uKyO3DTut2JTkm+iRSzZBpG2RTSQJfHm3IYTI=
Subject key identifier:   4D:95:79:99:E1:71:58:D7:29:5F:FD:96:10:54:AF:99:87:FC:FD:8A
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       2D7D48C534D79B357523D9F489594CA4277CDE30
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        177.125.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:48:c5:34:d7:9b:35:75:23:d9:f4:89:59:4c:a4:27:7c:de:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=4D957999E17158D7295FFD961054AF9987FCFD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:08:5d:c4:ee:8c:68:7d:7c:40:cb:71:ec:
                    5f:c9:c0:b8:40:0d:7b:95:ee:51:69:b2:6b:cc:a2:
                    80:31:2a:1a:fa:b6:64:9e:e5:2a:90:c7:4a:43:7f:
                    fb:a7:94:81:d1:4a:f5:ea:d4:89:3e:91:5a:fa:48:
                    00:19:b1:b5:04:ee:67:bb:09:5c:ed:05:80:4c:6f:
                    18:3c:13:99:f6:48:f8:b5:22:d2:88:1d:7a:69:91:
                    fe:98:c3:97:93:f3:cf:75:42:48:02:c9:e4:b6:fe:
                    70:ea:9d:9c:b9:45:57:1e:77:13:60:4c:30:1b:53:
                    34:ae:13:9b:d6:b1:78:84:58:5a:65:b5:33:3c:c5:
                    b4:dd:cc:89:4a:68:cf:cc:c1:e2:36:cf:a7:e8:e3:
                    96:5e:f8:13:e0:f4:ee:57:b6:85:fa:23:9e:ae:12:
                    fe:fb:25:7b:f1:11:80:9e:b6:f4:74:02:44:0c:00:
                    2b:9e:ef:e6:75:fd:c6:54:c4:7f:f6:7d:65:7d:36:
                    cb:9e:03:07:a4:2c:93:ae:aa:e0:23:22:76:0e:6b:
                    7e:f2:34:d8:aa:b5:8a:b8:eb:bf:8e:ee:ac:ff:1d:
                    f0:29:0e:60:3a:03:ba:db:01:d8:e8:18:aa:37:78:
                    ed:3b:72:a9:01:d2:f9:4a:08:90:ee:aa:b6:d7:7c:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:79:99:E1:71:58:D7:29:5F:FD:96:10:54:AF:99:87:FC:FD:8A
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137372e3132352e3230302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:72:c0:e1:07:3b:53:cd:c7:6e:25:be:fe:e8:9e:3f:97:b9:
         40:fe:62:4c:2e:69:75:03:1e:2c:e5:bf:c5:6a:ce:09:b3:b9:
         cd:97:d7:f5:3b:e7:5f:ac:e0:ed:d8:ec:fe:a3:90:b5:d8:75:
         4b:b0:5b:8f:85:dc:00:95:54:2a:a1:f7:91:34:dc:14:d5:a2:
         bf:22:c1:06:4e:3f:ec:57:4d:73:d1:cf:a8:bb:a9:aa:63:78:
         74:90:f2:4a:e6:7a:fd:ae:fc:f7:1e:8a:ab:0e:bc:57:6b:b4:
         a8:9d:b2:31:7d:f4:ea:e8:10:05:f2:0d:0e:d5:34:ad:bf:aa:
         fc:90:5f:59:c8:86:36:a1:a8:79:71:c5:88:9a:32:1a:8b:91:
         1b:77:c6:a6:f7:c1:a3:e6:f7:71:28:27:64:6b:12:ce:1d:37:
         fe:7c:6f:9a:a3:4a:64:00:1c:8b:eb:cb:72:f0:01:68:85:24:
         d1:0b:1a:2e:83:11:9d:61:52:40:29:d2:39:eb:fe:1e:f2:5b:
         39:a4:19:2e:cb:4f:af:22:d3:fb:a0:fd:3b:e0:05:ba:6c:7e:
         8f:2b:19:37:40:7c:e0:f7:8c:60:2d:fb:0e:9a:c6:62:a9:1a:
         1d:8b:6c:9d:fa:41:0e:be:f8:e3:82:3c:d1:e2:8a:82:0f:fe:
         20:a8:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:37:19 2025 by rpki-client