Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa
File:                     3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa (raw, json)
Hash identifier:          PcZ+WZOtk8kP55M43fU68arm6e3c0ZDfEwhadi17YoM=
Subject key identifier:   9C:D5:C4:C4:1A:26:53:94:D2:85:E5:38:F8:9E:B5:2F:15:7D:46:30
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       63CDA8F0E6D8DD847CFC2C81580AFADBC6B18C06
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        179.125.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cd:a8:f0:e6:d8:dd:84:7c:fc:2c:81:58:0a:fa:db:c6:b1:8c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=9CD5C4C41A265394D285E538F89EB52F157D4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:ff:b9:21:9a:64:8f:7d:d1:e3:d5:0c:72:
                    fd:b7:ed:9d:33:ba:1c:c5:8b:d9:30:25:cb:51:52:
                    0e:de:a2:25:19:37:e5:4d:23:1a:68:6a:78:e6:0d:
                    ee:91:0e:c5:12:d9:66:01:a3:e1:44:37:5d:4f:cd:
                    e6:ae:61:6b:e2:fc:e1:67:ac:06:dc:f8:b8:b4:30:
                    2f:bd:02:bb:e4:a2:10:29:52:03:f1:7d:26:ef:b4:
                    8c:b0:a9:61:a9:dd:02:f1:21:76:f3:0c:30:e0:3c:
                    5c:04:3e:0c:3c:57:53:41:d0:c9:25:ef:f9:d2:0f:
                    14:96:8b:a6:9c:cd:e3:14:db:36:4b:63:22:ca:ee:
                    e3:73:0a:40:04:7c:31:95:71:67:b6:f3:ab:a1:16:
                    77:5e:2f:f4:69:21:44:97:b0:b3:52:59:80:30:4b:
                    89:7d:ff:6d:93:1b:b4:e9:b8:56:48:36:d0:42:ce:
                    32:8e:07:25:f7:2a:3d:17:14:8b:0b:eb:09:f8:0c:
                    99:24:7b:ea:e9:6e:8a:be:d7:1c:79:b3:2f:85:77:
                    57:fc:bb:79:0f:3e:5b:f0:1c:d0:c7:cb:08:91:75:
                    ac:07:07:7b:83:62:04:a9:46:08:39:d8:aa:a3:f2:
                    05:9a:12:b0:65:fc:d6:01:38:1c:02:0d:6e:21:e0:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D5:C4:C4:1A:26:53:94:D2:85:E5:38:F8:9E:B5:2F:15:7D:46:30
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137392e3132352e3132382e302f31372d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         09:5a:a6:9e:4e:9c:3d:42:76:db:43:42:b9:5e:ad:a0:aa:2e:
         21:11:83:4f:18:69:de:29:89:ef:ac:aa:7e:24:ab:f8:08:38:
         5d:43:8d:46:38:2b:d8:6c:b0:2b:1d:a4:a1:3a:0f:ae:55:ec:
         21:2c:a2:4f:a6:e7:e0:0d:4e:3f:0e:5d:fe:9e:59:e5:5e:8e:
         2a:ed:2d:cb:64:a2:36:54:79:58:af:5c:fe:1d:08:97:21:fe:
         e8:24:cc:3e:2b:47:00:8b:84:cf:57:e9:99:d5:ca:01:4d:5d:
         a0:e9:8c:7f:09:9b:05:92:9d:96:37:18:90:ef:81:a1:56:dd:
         af:f2:33:8d:be:a6:bd:03:b9:54:c0:f0:34:ce:81:a3:3d:1c:
         37:59:5a:0a:bc:f8:43:6f:af:71:4a:a7:19:6c:1f:49:af:38:
         0c:45:5c:d1:a5:c0:73:01:67:3a:2c:0a:6d:37:54:b2:8c:42:
         03:f2:59:88:17:7a:87:20:db:60:ad:52:5d:99:56:07:7f:4a:
         ac:26:a0:96:dd:0f:c5:89:71:d3:a2:47:33:52:04:7d:bb:69:
         1d:39:39:7c:23:a4:c2:ef:be:e9:5f:90:ac:2a:13:de:89:6d:
         a7:cd:36:b5:5c:62:16:92:23:1b:12:cf:0d:f3:15:c0:11:43:
         49:7c:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:02:14 2025 by rpki-client