Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3139352e3230382e302f32302d3332203d3e203238363439.roa
File:                     3138362e3139352e3230382e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          3imf1ZBGjSacBX66s5K36cx3kZ7LLtmZrFR8gsv3Ego=
Subject key identifier:   F0:0D:1C:79:32:8D:D3:D1:2F:CD:97:33:A7:3B:7A:42:58:A6:63:1E
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       0D3092BB051B2909CB31EB8E78C3EADCCE5D65CA
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3139352e3230382e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        186.195.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:30:92:bb:05:1b:29:09:cb:31:eb:8e:78:c3:ea:dc:ce:5d:65:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=F00D1C79328DD3D12FCD9733A73B7A4258A6631E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:b5:6e:da:45:a2:49:6b:10:a0:6d:c3:8e:
                    8d:be:40:bd:45:85:24:42:86:a0:1e:a7:f8:7c:3e:
                    d6:74:c8:81:75:22:a7:f7:5a:26:c4:81:09:05:cc:
                    a6:ad:6d:81:16:8c:01:33:03:bd:a9:cc:20:dc:9f:
                    2e:22:c0:aa:97:3f:6e:22:2d:c1:18:26:a1:3a:12:
                    ff:f7:cd:00:4a:7f:40:7d:4e:a3:7a:1d:94:5d:64:
                    cb:f8:74:51:d2:05:bd:91:61:ab:9d:2c:34:84:02:
                    73:77:fd:9d:68:11:0a:08:1b:4f:27:06:b5:19:72:
                    c9:01:cf:55:90:23:d0:16:df:16:97:f3:89:eb:04:
                    15:6d:33:82:f8:2c:b5:a8:09:93:cc:ee:e8:f5:8a:
                    93:e7:75:be:e1:d6:aa:06:d6:ae:9d:51:fd:9d:37:
                    53:6d:87:c9:51:ed:4a:e1:9e:16:fa:23:e3:8f:98:
                    33:24:41:64:dd:c0:87:be:16:31:21:8b:dc:4a:95:
                    e5:6f:38:0a:62:c3:74:91:cc:b8:eb:aa:48:07:2f:
                    92:4f:b4:f4:44:cd:8d:12:8c:ac:05:2d:9d:57:ce:
                    88:e0:67:bf:c9:f9:ff:27:d5:7f:b0:14:e1:08:3c:
                    61:9a:d4:c7:16:9f:fb:9c:67:7c:b8:2b:0c:4c:c0:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:1C:79:32:8D:D3:D1:2F:CD:97:33:A7:3B:7A:42:58:A6:63:1E
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3139352e3230382e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:9a:d8:cd:67:2e:90:4a:f0:af:a0:c7:86:e6:32:88:25:
         dd:ac:17:8a:a7:a8:e3:d0:70:27:93:73:5f:5e:15:8f:fe:88:
         9c:d2:c7:69:48:a8:70:d5:2b:2b:da:e0:79:95:ac:e2:da:55:
         cf:d2:b7:d9:25:5d:3d:2e:4b:70:77:b9:44:eb:dc:88:a3:49:
         7d:a8:6b:ca:8d:71:74:96:1d:17:f2:8a:5b:5a:64:15:ae:32:
         a4:cf:de:ad:d1:a8:45:1a:54:fd:19:78:38:e7:90:84:3a:fa:
         9e:e7:f3:61:49:e3:d0:ab:b0:8f:f4:38:54:cf:69:58:2e:d1:
         0e:cb:21:5e:01:6e:21:f4:d3:94:ec:84:ba:7a:2a:5b:4b:34:
         93:db:a0:2e:62:8f:73:e7:ba:d2:10:05:15:53:a6:ad:f5:e1:
         30:5d:65:01:f1:b8:62:c2:3d:6d:cf:e3:3c:9a:c2:a1:c9:28:
         30:78:89:7c:f3:54:64:43:b7:19:d6:92:6a:39:af:04:10:5f:
         dd:21:76:e1:87:10:dd:7b:13:54:51:48:a3:98:b3:29:87:84:
         e3:bc:f9:5e:c8:f9:de:ec:55:d3:26:6f:be:e1:ae:69:52:59:
         46:4a:f9:16:e9:01:bb:0d:5a:b5:a2:d8:87:cc:f0:98:f8:0a:
         f2:e5:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:07:46 2025 by rpki-client