Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3230392e36342e302f32302d3332203d3e203238363439.roa
File:                     3138362e3230392e36342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          OFDDydLdmF80bD1jZTptG9xVsiTGGo91LNKnokB/6Vs=
Subject key identifier:   11:00:78:EB:DA:DF:7E:6A:89:AF:CB:86:D9:CF:87:98:34:C6:B9:5E
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       3DB25D8D61BAEDFE390EB137710F31E4D41A8B05
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3230392e36342e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:50 +0000
ROA not before:           Tue 06 May 2025 00:44:50 +0000
ROA not after:            Tue 05 May 2026 00:49:50 +0000
asID:                     28649
IP address blocks:        186.209.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b2:5d:8d:61:ba:ed:fe:39:0e:b1:37:71:0f:31:e4:d4:1a:8b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:50 2025 GMT
            Not After : May  5 00:49:50 2026 GMT
        Subject: CN=110078EBDADF7E6A89AFCB86D9CF879834C6B95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:4a:eb:46:21:d8:b2:6d:22:28:27:5b:76:
                    84:7d:2c:40:12:93:03:d5:8d:64:dc:f6:90:95:fa:
                    b7:d7:23:48:c8:f1:6a:51:50:8d:e0:11:78:f7:9f:
                    24:02:74:29:3d:59:58:e1:6e:d8:a4:4b:1a:ac:af:
                    fe:0e:5c:c1:3f:f0:dc:de:8f:38:f6:1c:e0:e1:29:
                    eb:ce:3f:3c:52:f5:46:98:c7:94:d6:79:ca:8a:11:
                    8f:ee:6f:f0:f4:61:df:3e:a4:a5:ab:9c:bc:8f:6a:
                    01:41:c8:87:15:fb:bf:7b:6a:49:93:49:a4:f8:79:
                    47:47:89:0f:04:10:7f:06:8c:de:ce:68:b5:33:8a:
                    99:af:75:00:b1:99:5d:47:ef:ca:34:f1:2b:8a:9d:
                    67:9f:ea:ed:cb:87:69:ea:43:ee:cc:88:1b:54:cc:
                    34:11:5d:24:62:0f:ca:eb:8f:fd:4d:4c:13:8b:b3:
                    90:a9:51:4b:dc:d0:ce:0a:4e:7e:60:5b:ed:75:4a:
                    1d:61:24:73:49:5a:b8:58:32:19:fa:7c:a7:7f:1b:
                    76:3d:bd:84:1b:06:2b:b2:4a:e8:d4:64:d6:ef:0f:
                    38:af:d2:12:fb:7f:77:17:b3:aa:7a:fe:24:48:d3:
                    66:22:a2:88:f6:46:6d:b5:f7:67:4d:f6:3a:31:e0:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:78:EB:DA:DF:7E:6A:89:AF:CB:86:D9:CF:87:98:34:C6:B9:5E
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3230392e36342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:f3:ab:3b:cf:1a:c3:da:b6:70:e8:29:09:97:95:fd:91:
         11:03:62:48:74:ee:dd:e5:db:d5:b7:2b:99:f9:be:07:91:a2:
         6f:53:9a:79:fe:b4:e5:93:3b:41:b4:32:ce:1c:e1:d8:6b:5a:
         ef:58:05:7a:80:4c:77:4f:b4:41:c4:5c:9b:75:c5:d4:e3:e5:
         ed:8b:c3:95:9f:72:0c:f0:bc:67:dd:63:b9:bf:4f:2d:d5:c9:
         1c:73:bc:3a:b2:2a:7a:03:ff:1d:8e:51:d2:f8:a4:8c:4c:4e:
         1e:bb:30:dc:0b:d2:3c:2e:de:cd:4d:65:f8:3a:87:c8:9d:ba:
         c4:a0:dd:eb:b0:9b:d3:de:c8:b4:b6:dd:bb:09:b8:d1:a6:9a:
         41:3d:94:f6:b6:1f:ca:e8:56:7a:1e:78:8f:91:22:64:35:45:
         ef:db:c9:b8:b2:89:f7:31:4e:2d:00:a3:ab:93:71:cd:35:35:
         3e:c1:c4:35:b8:7d:b8:91:66:82:d4:4c:53:88:0e:0e:89:87:
         e4:79:27:d9:29:8f:e7:42:c1:ec:b5:4c:e8:51:56:e1:bd:19:
         b2:4b:a6:a5:36:8d:ed:f8:87:33:44:aa:87:f5:c2:32:f9:b7:
         4d:6b:20:61:2d:54:21:b3:44:b1:56:51:c8:92:db:2e:3b:ff:
         4e:a4:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:29:52 2025 by rpki-client