Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa
File:                     3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier:          WQjC9iwLHt1itxW766SQQU0neFDPzj4Fm/WVD6ZBXcI=
Subject key identifier:   91:1B:7D:C3:94:CE:63:FE:D6:FD:D1:DB:4D:39:98:F4:E4:78:23:2D
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       7983E00C9D3394D347902101A5E2CD50EB9DFCBB
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa
Signing time:             Tue 06 May 2025 00:54:50 +0000
ROA not before:           Tue 06 May 2025 00:49:50 +0000
ROA not after:            Tue 05 May 2026 00:54:50 +0000
asID:                     28668
IP address blocks:        187.109.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 14:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:83:e0:0c:9d:33:94:d3:47:90:21:01:a5:e2:cd:50:eb:9d:fc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:49:50 2025 GMT
            Not After : May  5 00:54:50 2026 GMT
        Subject: CN=911B7DC394CE63FED6FDD1DB4D3998F4E478232D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:8d:09:80:e6:5b:aa:96:b7:e3:21:5f:35:
                    7f:a0:1e:bb:ef:4f:bf:28:84:ff:67:0b:97:ce:dd:
                    66:bf:1e:93:9a:b3:26:29:a4:d4:d7:9d:ca:21:65:
                    5c:7d:cd:37:a4:2e:b8:f9:1c:04:a6:7a:bf:76:1b:
                    f9:fa:00:cf:68:7b:5a:ba:2a:c5:9a:34:5a:40:bc:
                    c2:c9:91:a5:12:af:1c:20:fc:23:b5:c9:fc:12:20:
                    0b:60:44:31:04:e8:16:2f:ab:c2:87:cc:bd:6d:cf:
                    fb:2b:3b:2d:2a:2c:97:81:4d:2a:c7:a6:e5:d1:33:
                    08:fa:dd:b1:69:c1:43:5a:5d:91:68:1c:d8:fb:ca:
                    98:6d:51:e8:c7:0d:da:08:e7:13:d4:ab:d2:a2:dc:
                    6f:20:42:c9:d6:0a:03:2a:79:df:14:1a:c9:21:1d:
                    29:eb:fe:4c:f1:c6:0a:fb:39:be:e2:0f:67:ad:4b:
                    a5:62:98:aa:3f:ad:9c:af:ca:ef:27:9a:94:5e:04:
                    1b:70:ac:0d:74:a3:75:46:73:96:31:5f:ba:cd:4c:
                    03:ed:cc:a5:71:2c:6a:48:1b:2a:15:aa:3f:a4:d9:
                    16:f8:44:06:b3:2d:53:97:19:a8:4b:2e:ac:22:db:
                    21:26:c3:5c:e3:30:01:5e:d5:3d:96:a4:02:5b:62:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:7D:C3:94:CE:63:FE:D6:FD:D1:DB:4D:39:98:F4:E4:78:23:2D
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e3130392e3134342e302f32302d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:c6:93:4b:24:ea:44:6a:1e:5a:b3:c0:1e:8c:ec:1f:7e:ad:
         82:17:46:67:54:f7:9d:19:4a:af:6e:3c:e7:98:dc:d7:f6:ef:
         a1:25:94:49:1f:c7:ec:80:6a:fd:d9:a8:21:6f:35:93:f2:84:
         68:b9:12:2c:b4:35:01:41:4a:97:86:9a:46:1d:27:8c:a3:1b:
         17:03:cf:0a:91:07:a6:23:5a:60:8b:34:b6:41:cc:b7:e4:54:
         6c:51:fb:b0:2a:d7:38:f1:f1:cb:37:06:24:2a:29:e9:e6:1e:
         42:34:90:b6:c9:0f:db:15:eb:27:43:2e:97:3f:90:5b:0d:62:
         1c:8f:7c:dd:2b:97:25:e6:ae:57:49:58:21:99:7b:78:4a:c7:
         0a:d2:f6:41:71:7a:ec:f3:49:9b:00:64:e8:50:ed:16:1e:73:
         f2:11:51:bd:46:d9:15:3e:43:f9:78:b0:ec:1b:36:cc:f2:29:
         05:92:1e:f3:61:31:54:03:d0:fc:59:88:f1:00:9c:8b:2d:f4:
         04:24:35:d1:94:14:a1:8e:06:9c:93:f9:12:95:69:44:98:32:
         c3:76:d1:ba:91:c3:df:dc:ce:36:e2:3c:52:77:45:c6:85:ca:
         f5:51:69:24:65:6e:10:48:02:f8:32:86:d6:20:e1:39:cd:a2:
         70:bd:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:20:47 2025 by rpki-client