Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39352e3136302e302f32302d3332203d3e203238363439.roa
File:                     3138372e39352e3136302e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          hwR27uM9N8RPxx8Etmmc7f1dbO1JnMQzc4AVkqjB+Mw=
Subject key identifier:   ED:F0:0D:9C:DA:6D:A3:C5:A8:13:F7:40:AB:CC:13:CF:A4:48:8B:66
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       01FE18EA3C497EDBFDCEF7F8E8903834777AE31E
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39352e3136302e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        187.95.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:18:ea:3c:49:7e:db:fd:ce:f7:f8:e8:90:38:34:77:7a:e3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=EDF00D9CDA6DA3C5A813F740ABCC13CFA4488B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:49:a5:7f:9c:2b:2a:af:e3:17:a1:ba:e2:
                    4d:c7:39:b8:02:24:a1:be:07:e9:59:5c:6f:e8:2a:
                    24:0c:be:df:f1:4f:5f:cd:e5:8f:7d:a2:4a:07:03:
                    bc:2b:45:c6:57:ba:a0:31:99:8b:48:77:89:6a:ab:
                    be:cd:d7:cc:d5:dd:19:58:22:25:96:3b:fa:ed:3a:
                    9c:d2:f7:06:a0:93:f3:00:be:3f:cc:05:a0:ba:73:
                    1c:20:ff:ec:02:7e:72:0d:ab:79:55:d1:f3:33:80:
                    b9:53:84:35:4e:dc:a6:5f:9f:a4:8f:95:08:bb:47:
                    be:70:bf:5d:74:2a:aa:5b:86:09:d2:af:57:b4:f0:
                    7c:3b:21:88:c0:d6:9b:df:72:16:50:04:f4:23:83:
                    ec:96:f2:25:31:ad:07:03:3a:75:ad:f2:86:de:eb:
                    7d:a1:92:0d:31:a3:ae:b8:41:51:0b:3e:30:53:91:
                    71:c6:ed:81:64:11:28:f4:b0:48:f0:39:42:17:33:
                    19:34:e4:34:e4:e9:dc:36:e3:ce:20:8c:16:20:ef:
                    4f:94:f3:5d:6b:a9:da:91:d0:54:1e:30:dd:8e:e6:
                    da:82:11:20:f8:95:0c:4a:66:2b:07:54:47:93:42:
                    3e:8a:d4:4f:11:2d:33:f2:2e:96:14:0c:7f:86:12:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F0:0D:9C:DA:6D:A3:C5:A8:13:F7:40:AB:CC:13:CF:A4:48:8B:66
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138372e39352e3136302e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:91:29:ea:3d:1c:16:c6:3f:57:59:42:d6:84:07:a7:c7:8f:
         16:21:8b:ab:ca:a8:ca:a1:43:4e:14:ca:6b:04:99:f2:ab:b2:
         96:5f:f9:c4:0c:ef:0b:6e:d8:80:39:3b:01:33:64:50:aa:f4:
         52:2e:a0:9f:e5:a1:11:f0:00:88:5b:a6:4b:22:8e:a9:54:44:
         b2:af:43:f7:a4:5a:0d:29:86:0b:4a:41:e1:a7:c5:0b:dc:4c:
         a0:33:df:05:c2:7d:ae:8b:d2:ee:0f:ce:5e:6b:25:6d:ec:b6:
         dc:c0:3e:b8:79:27:d3:9f:98:75:6c:df:21:b4:3c:b9:48:64:
         0a:33:c9:cb:ff:2b:27:dd:8b:0b:3d:c3:f4:f7:c8:ef:70:8f:
         96:7f:a3:26:87:2b:5c:ac:98:ae:89:ae:09:f3:15:a7:04:e5:
         a3:27:d6:e7:c5:49:4b:8a:b8:dd:52:69:cd:a8:4d:31:af:58:
         db:ae:07:a6:91:49:b8:cd:fe:4b:ed:19:c0:a9:12:0d:4d:b6:
         f9:18:46:19:a9:a4:cc:27:36:26:65:02:fe:48:af:af:92:63:
         23:d7:ff:d7:f8:1f:5f:bd:0f:c6:8e:48:4a:ea:57:a3:25:53:
         3a:98:10:6f:2b:59:f2:ba:28:2d:f4:df:4b:77:3b:dd:fe:83:
         c0:6f:64:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:45:28 2025 by rpki-client