Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa
File:                     3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa (raw, json)
Hash identifier:          4bJ4WVusjKrM6jQfo4zVkc1GIIeUr9n+H7NAhqFXld0=
Subject key identifier:   35:D2:8E:4E:8C:06:81:F0:BA:68:D9:F9:7A:06:9F:97:2D:37:EE:6B
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       6C8DAD81BA186E5797C978D7CFE993F37E68C2CE
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:51 +0000
ROA not before:           Tue 06 May 2025 00:44:51 +0000
ROA not after:            Tue 05 May 2026 00:49:51 +0000
asID:                     28649
IP address blocks:        186.249.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8d:ad:81:ba:18:6e:57:97:c9:78:d7:cf:e9:93:f3:7e:68:c2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:51 2025 GMT
            Not After : May  5 00:49:51 2026 GMT
        Subject: CN=35D28E4E8C0681F0BA68D9F97A069F972D37EE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:0a:20:ab:b1:7c:50:0c:a1:fc:26:b8:7c:
                    15:1c:b6:6e:a2:3b:36:bf:a6:ed:60:5a:80:d9:2f:
                    b4:5e:20:84:ee:e3:2d:5b:9d:ce:98:19:09:72:12:
                    c0:6f:30:60:99:7d:84:c7:dc:11:b3:27:b4:61:1e:
                    d1:9e:b9:1e:31:4d:8b:f3:28:d9:68:1f:04:0a:11:
                    ab:48:96:46:f7:e5:47:da:5a:2a:3e:68:b6:36:49:
                    1d:20:25:ff:d8:ff:79:d0:39:52:1a:84:a6:3e:cd:
                    bb:3b:02:e7:36:e2:07:6a:0d:ac:ba:a6:84:5d:14:
                    6f:69:9c:2e:af:55:1f:bd:b1:57:6c:95:0c:c9:87:
                    99:bf:37:85:5d:de:38:5a:5b:e7:60:d9:5a:29:e8:
                    47:69:63:af:0b:17:d5:8c:4f:ce:f3:d8:09:a4:1c:
                    01:3d:dd:e8:72:6a:64:9b:bb:2c:62:e8:8e:25:7c:
                    e8:64:5a:bf:3f:b2:4d:e9:a6:b3:ce:68:d8:98:38:
                    f5:f0:06:dd:2b:60:53:83:62:36:91:b7:77:b6:d5:
                    d9:cb:72:f0:4d:f9:fc:cb:cf:01:48:17:9c:58:1e:
                    bc:78:1d:02:76:21:45:84:17:b4:91:dd:ad:98:9e:
                    12:46:0f:e4:5e:3b:b8:cb:93:49:f0:e2:a6:51:ad:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:8E:4E:8C:06:81:F0:BA:68:D9:F9:7A:06:9F:97:2D:37:EE:6B
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3234392e3132382e302f31392d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:f0:91:a8:02:66:dd:2a:65:78:16:8c:ae:a5:9f:08:5e:82:
         ab:06:12:22:d1:40:e3:0c:da:8b:66:4a:e1:33:8a:8e:fe:f8:
         e5:7b:e8:d0:51:4b:ef:d4:d3:22:af:dd:2a:75:d0:10:75:6b:
         ab:a8:0a:d9:c8:76:e3:8d:dd:2d:3c:0e:6d:13:ae:89:1a:76:
         34:69:50:b9:09:d7:13:09:cd:cd:39:f7:01:33:5f:69:f2:89:
         54:80:9e:43:a0:c0:17:0d:0f:69:f7:4a:85:99:a2:07:ec:3d:
         84:05:30:8e:7f:67:3a:e0:ef:06:75:4f:57:72:4d:00:64:73:
         88:31:e3:68:bc:9f:0f:ba:cd:f4:b2:fc:ca:57:cd:a0:d7:09:
         9c:5a:3a:34:c7:b2:cb:cf:a6:a3:c5:4f:8c:8c:46:16:89:ab:
         bd:26:10:e2:cb:dc:28:c0:48:a3:e4:37:30:16:48:59:8f:a5:
         31:e5:98:44:ce:7d:72:98:e7:20:f6:bb:31:28:ab:fa:b5:ba:
         73:b8:22:55:a1:a9:92:f1:ff:4e:58:d9:6f:09:aa:ee:e2:1c:
         aa:b0:c1:da:82:82:2d:8d:a2:a9:c3:eb:1b:33:3c:68:06:1f:
         5b:c0:41:1f:8c:30:50:cb:6a:1e:aa:fe:4b:e6:89:f5:9d:a8:
         30:20:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:50:41 2025 by rpki-client