Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
File:                     3138372e38352e33322e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier:          9WePUamk2xuxsHE3d2W2+5wVzAirNf1xOgRnZtOHNIU=
Subject key identifier:   F6:45:74:FD:46:2D:7C:4D:E3:F7:BC:94:32:D4:91:EE:72:6B:46:8D
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       0AEE044A72C2A9F9E6F12069C43CA0096066AD2C
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa
Signing time:             Tue 06 May 2025 00:54:50 +0000
ROA not before:           Tue 06 May 2025 00:49:50 +0000
ROA not after:            Tue 05 May 2026 00:54:50 +0000
asID:                     28668
IP address blocks:        187.85.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ee:04:4a:72:c2:a9:f9:e6:f1:20:69:c4:3c:a0:09:60:66:ad:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:49:50 2025 GMT
            Not After : May  5 00:54:50 2026 GMT
        Subject: CN=F64574FD462D7C4DE3F7BC9432D491EE726B468D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:9f:0e:8d:43:ce:42:2b:0d:86:c9:ed:0f:
                    12:45:73:00:5a:f6:61:56:7f:2f:36:3e:a5:c9:31:
                    bb:29:74:e5:fd:e1:85:08:b2:43:dc:ed:ff:d7:97:
                    86:93:31:bc:40:b3:d7:30:04:bd:c7:d9:70:84:ec:
                    15:9d:f1:01:0d:a6:cd:da:54:5a:9f:a2:d2:2e:26:
                    83:46:3b:94:0e:ee:9f:3c:ae:34:a8:54:85:e0:76:
                    ce:38:7b:04:6c:c1:fc:56:30:ef:93:c3:f5:96:91:
                    5b:b1:ba:e0:a1:23:cf:ae:0f:15:38:ec:9b:d5:6a:
                    49:ea:78:06:42:13:a7:75:03:08:5c:68:89:90:f2:
                    27:9c:5b:40:97:28:3e:fd:c9:e2:27:2e:26:3a:88:
                    c8:8e:ab:25:5d:08:15:7c:6e:49:bb:51:0b:2d:30:
                    c8:b4:05:be:e8:5b:fe:e8:10:9a:f2:68:82:47:53:
                    fb:57:c9:0b:9c:96:3b:fd:90:3d:08:da:e7:01:8f:
                    74:14:a9:02:e0:09:bc:53:3a:7a:b2:86:e6:24:e9:
                    49:8c:fe:1e:4e:e7:88:fc:d7:0c:f2:79:c2:b2:25:
                    ca:91:b9:d7:ce:fd:a5:b3:38:4e:bd:cf:52:0a:9e:
                    0f:f3:f9:3e:b8:a6:d9:54:72:cb:52:2d:cf:b2:13:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:74:FD:46:2D:7C:4D:E3:F7:BC:94:32:D4:91:EE:72:6B:46:8D
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e38352e33322e302f32302d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:4e:04:a6:da:d2:06:f7:70:bf:bb:ac:a5:0d:8d:9c:84:
         11:0f:24:2b:7c:ed:9a:8e:8a:7a:48:17:74:19:22:48:e4:ba:
         19:f1:ec:1b:9a:8c:49:0b:cc:26:73:f4:da:19:c6:95:17:31:
         1c:db:51:eb:d2:04:f9:22:5e:48:d8:28:c1:b2:f3:16:3d:86:
         f7:72:85:33:09:c6:db:cd:35:e9:39:62:27:d0:79:76:d9:3a:
         51:65:4f:dd:29:35:a3:ae:5a:53:99:e9:30:7c:37:1e:c3:83:
         0e:85:49:f2:ae:3b:27:5e:c1:88:e7:3d:19:b0:8f:2f:c2:ba:
         89:19:f6:9e:02:a7:21:5e:8d:e5:7f:52:11:8f:74:c5:fd:4e:
         dc:7a:8f:8b:6c:af:e9:73:19:6d:14:43:91:18:66:e8:75:33:
         0b:58:38:c5:a6:41:ae:45:bf:1b:cc:75:30:fc:13:9b:b8:da:
         a0:0d:ef:9f:2b:6c:f8:35:2b:7d:06:fc:e6:ea:f3:ba:06:19:
         8f:16:3c:08:e6:f4:ba:68:11:01:07:ff:ad:f7:ae:f3:a3:0c:
         02:ba:65:83:7d:c0:7a:20:74:3b:dc:d3:2f:be:d0:51:dd:88:
         6c:8a:ba:e8:e2:18:69:6d:f7:2d:67:1d:8f:1b:c3:91:3f:cf:
         7c:c6:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:48:14 2025 by rpki-client