Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3130382e3137362e302f32312d3332203d3e203238363439.roa
File:                     3137392e3130382e3137362e302f32312d3332203d3e203238363439.roa (raw, json)
Hash identifier:          8Ond6HrNjyOM+dZi2/KFTRp7yBGAe3k/WkfsKkOkWkQ=
Subject key identifier:   36:D4:08:A9:2E:15:49:5C:3F:E6:B5:FF:BD:99:89:CE:A1:8B:19:3D
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       38C8AC2FC993866DB3EEA529E6E5738D58D3DA28
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3130382e3137362e302f32312d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        179.108.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c8:ac:2f:c9:93:86:6d:b3:ee:a5:29:e6:e5:73:8d:58:d3:da:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=36D408A92E15495C3FE6B5FFBD9989CEA18B193D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:df:ad:b0:e3:7f:ca:15:00:f4:c0:69:db:82:
                    ef:6c:df:76:75:49:5f:89:7a:e2:6f:86:c2:49:f2:
                    01:e9:59:76:cf:e2:21:fa:2f:8b:44:bd:c6:f4:b7:
                    92:d1:61:d6:d0:5b:f1:93:ef:22:36:8a:0f:84:0e:
                    bf:53:33:8e:43:f3:4a:b6:4a:25:61:10:4d:64:b6:
                    82:0c:98:35:33:b9:b4:39:7f:8c:80:ff:6f:c2:41:
                    d3:92:bd:b4:bc:a2:16:7a:c0:09:2b:fe:3b:29:94:
                    45:07:02:87:c5:06:c8:4e:81:72:f8:a6:d3:00:d7:
                    1e:87:73:67:f8:b0:7c:5d:c5:83:48:20:41:60:bc:
                    7e:3f:a8:8a:2d:5f:c4:f8:72:72:9d:76:d2:d4:9a:
                    ab:3c:8f:7b:65:45:ff:43:5f:6b:18:fe:2a:4d:a9:
                    3e:8d:d4:2d:6b:93:82:1d:b7:f2:1c:58:60:63:e8:
                    15:f7:bc:52:50:a5:57:7a:fc:e6:f0:60:a2:70:74:
                    39:d6:c1:26:29:e4:7a:90:09:df:a7:06:03:4b:6b:
                    0e:55:a1:d4:46:9b:0c:c1:9b:87:4c:64:cf:7d:1d:
                    fe:11:ed:6b:7c:bf:6d:42:63:25:4d:98:44:be:5f:
                    57:ee:6e:d7:11:d7:1e:b5:9b:00:95:f3:b9:ff:e0:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D4:08:A9:2E:15:49:5C:3F:E6:B5:FF:BD:99:89:CE:A1:8B:19:3D
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3130382e3137362e302f32312d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:fb:7d:e9:82:2f:27:d1:40:61:61:09:fa:cc:c8:e7:a6:66:
         c7:37:1a:52:64:6c:cd:e3:44:04:39:41:b3:eb:8f:f5:32:5a:
         3b:69:d0:36:68:33:3c:5a:9d:71:7e:a4:4e:14:2c:4a:ff:c3:
         29:a8:4d:80:63:18:74:35:30:a7:2a:f4:c9:f9:31:63:fc:cf:
         1e:38:f6:c0:81:d3:80:cf:7b:f0:61:e0:42:88:3a:6a:b0:23:
         4f:73:a6:90:7c:01:d6:60:60:42:66:28:73:e0:a4:69:24:83:
         39:19:57:d7:0a:26:68:a6:41:37:40:52:04:0d:fa:10:40:70:
         ae:ea:c4:ca:5f:00:29:3a:11:ae:a6:46:f8:03:70:8b:f1:f1:
         cf:3d:3b:62:a5:81:79:24:52:d4:5f:dc:b3:f5:0f:bf:c3:aa:
         ab:8f:2d:0c:eb:bf:35:38:ae:1f:45:0c:fa:d9:4e:fd:8e:10:
         14:85:25:ba:01:05:f8:88:2d:88:05:67:79:4b:06:d0:a0:48:
         1c:25:1c:af:5b:15:8c:d8:cd:96:29:c4:c7:db:e5:a0:0f:ad:
         10:4d:17:2b:0a:cb:9f:7e:1d:d3:b3:ec:76:6d:85:c0:cd:b4:
         41:d4:e9:17:42:72:80:47:94:44:1d:70:f1:1b:e9:31:b3:7a:
         cf:98:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:14:54 2025 by rpki-client