Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa
File:                     3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          Z21NHrJI15DPmTDLF2Mp+49/ldMOp9Coc0rco3Ak0Jw=
Subject key identifier:   CD:99:C5:66:B6:26:D3:2C:6C:13:1B:D5:18:3C:DE:20:AA:29:15:EC
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       051ADA7E48999A528DD037EDEFA96091890776E9
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        186.251.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1a:da:7e:48:99:9a:52:8d:d0:37:ed:ef:a9:60:91:89:07:76:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=CD99C566B626D32C6C131BD5183CDE20AA2915EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c5:0d:e5:9f:78:2e:52:3d:a0:4e:20:2d:7b:
                    62:ee:c6:ac:07:4c:34:51:a9:e1:5e:d3:09:3d:53:
                    5b:96:d3:81:d5:3e:f0:e0:a0:3e:c4:b3:7e:19:50:
                    bd:5f:c3:e2:d5:2c:f1:51:36:0c:04:48:84:08:84:
                    0e:db:c2:64:44:34:aa:67:db:c3:48:db:87:6e:8d:
                    94:f1:47:98:80:94:79:4e:ce:43:0c:ef:33:ab:8d:
                    23:0b:ef:0d:f5:cc:08:ae:e0:fd:76:cd:01:6b:80:
                    a0:b5:70:eb:72:c3:56:61:e0:95:82:18:0b:11:87:
                    8a:0e:e1:09:e9:8a:4a:a7:8d:0f:7f:7e:76:9e:4a:
                    8b:ba:83:53:e7:41:38:40:97:ba:4b:17:ff:f0:06:
                    75:83:a0:b8:f2:eb:2f:32:28:28:36:5b:9a:4d:2a:
                    ae:09:7b:a9:1c:34:f2:b5:43:5d:34:99:87:c7:cf:
                    89:47:84:98:92:89:89:92:b8:8c:ef:8b:e7:7f:a3:
                    65:ad:1c:52:9e:81:7e:c8:4d:32:09:50:e0:ae:10:
                    40:60:8d:84:4c:11:12:e3:be:76:96:50:42:6c:e7:
                    e4:fd:ae:24:ad:ae:05:11:45:ec:67:ca:26:ff:46:
                    16:bd:b2:12:87:9d:0a:0d:69:c3:44:39:c0:62:aa:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:99:C5:66:B6:26:D3:2C:6C:13:1B:D5:18:3C:DE:20:AA:29:15:EC
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:05:38:79:a6:f6:3e:38:22:8a:dd:1e:59:eb:d7:a2:76:85:
         a8:76:e3:ed:61:7b:aa:8b:dd:d1:93:6a:49:d0:de:4e:e5:54:
         fb:4d:b3:d6:34:cd:04:c7:51:a0:25:53:a4:c9:17:5f:8c:7f:
         fc:e2:1e:21:a8:26:20:6c:26:e6:c2:13:67:ae:62:bc:8f:04:
         51:55:b7:3c:b9:d1:bc:0d:da:97:ac:1a:df:dd:0a:ff:4c:84:
         3d:05:dc:6c:29:73:98:a5:ac:6e:7c:6d:29:c6:f3:ee:59:dc:
         3d:71:9b:33:fe:0c:f9:a6:a8:a7:31:f4:a5:3d:34:18:12:82:
         f5:0b:4a:c5:5f:d8:5c:e7:bd:51:3b:28:5e:1e:49:66:2e:8a:
         c1:6c:c8:c2:9e:f8:59:12:59:28:ac:ec:32:a1:37:7c:ec:8d:
         92:9d:57:1f:01:40:a4:7f:5f:f4:17:7c:0e:f9:58:4f:0f:22:
         dd:ce:4b:c9:4e:aa:3d:50:51:e4:bb:b3:01:4d:6a:47:6e:ce:
         30:f2:b8:c9:d7:cc:79:d1:49:59:85:79:f5:fe:87:5c:b4:ce:
         6f:ca:78:6e:c0:5d:f2:5f:3c:6a:e6:60:2b:34:d2:20:d2:b9:
         12:40:75:90:5f:cb:9d:3b:f0:be:91:11:68:8c:92:5a:87:bd:
         02:8c:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:54:02 2025 by rpki-client