Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
File:                     3138392e312e3134342e302f32302d3332203d3e203238363638.roa (raw, json)
Hash identifier:          2ICnOnV3hr8araEM0vT7ulfIUgf3UX/+Hw5Kt/5nRg8=
Subject key identifier:   14:62:C0:4B:7F:7E:80:6D:C5:39:90:94:80:5D:6F:69:42:78:CE:09
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       72A6E93F8BBE7A3695EEB391A0FE814C82F8763E
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa
Signing time:             Tue 06 May 2025 00:21:36 +0000
ROA not before:           Tue 06 May 2025 00:16:36 +0000
ROA not after:            Tue 05 May 2026 00:21:36 +0000
asID:                     28668
IP address blocks:        189.1.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:e9:3f:8b:be:7a:36:95:ee:b3:91:a0:fe:81:4c:82:f8:76:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:16:36 2025 GMT
            Not After : May  5 00:21:36 2026 GMT
        Subject: CN=1462C04B7F7E806DC5399094805D6F694278CE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:ac:74:32:aa:34:fa:bf:ef:38:19:19:6c:
                    79:b9:ba:ee:fb:ac:23:49:7b:e8:94:dc:23:72:5c:
                    08:dc:a7:80:f2:ae:2e:00:ad:23:99:ad:61:6a:ad:
                    e8:bb:e7:db:61:c6:cb:d8:4a:db:b9:9d:d4:4b:51:
                    a0:69:aa:42:31:24:1a:39:1a:97:9f:5d:f0:2b:50:
                    eb:52:ca:16:98:0a:16:2a:b2:01:8d:19:e8:f9:fd:
                    1b:68:1b:0d:15:f1:cf:e1:7b:bd:59:8d:e0:60:20:
                    aa:5a:4e:fd:77:35:23:eb:7e:c4:3e:a3:e7:5e:ef:
                    8d:af:81:70:e9:50:13:c2:f2:92:1b:3d:a4:50:4a:
                    98:42:bc:52:0e:19:35:11:58:a6:68:8c:b5:e5:c0:
                    eb:61:e5:be:68:f6:60:5e:4d:9b:2d:7c:d8:b4:df:
                    0b:bf:ec:e6:76:57:80:7b:a5:27:24:d1:d9:11:4e:
                    d0:c5:3b:1d:0c:a8:e3:dd:ef:f6:3d:0b:15:6b:99:
                    0f:a2:b5:0a:f1:fe:a6:f4:33:8f:04:26:bb:01:9d:
                    ee:ec:17:92:48:e6:a1:1f:3a:4b:d2:02:21:17:45:
                    77:d3:64:17:ca:ce:f1:17:d0:8c:0b:fa:3d:e9:db:
                    68:a0:e5:8d:1f:21:e0:1c:36:fc:44:7f:c4:60:08:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:62:C0:4B:7F:7E:80:6D:C5:39:90:94:80:5D:6F:69:42:78:CE:09
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e312e3134342e302f32302d3332203d3e203238363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:98:f7:cd:59:20:92:80:45:59:f6:4c:66:48:44:a5:45:35:
         9b:ca:3a:f1:1c:21:7b:24:29:54:34:e9:93:a4:e7:55:56:67:
         6d:36:33:5d:bf:59:d5:40:ef:0c:3c:e6:7f:b2:c4:31:0b:c0:
         f2:87:78:6e:40:6e:02:8e:b2:dd:22:a9:0f:bd:68:98:a3:2e:
         43:d5:de:ab:f4:76:18:26:19:e3:d1:b3:14:74:2a:3c:b8:56:
         24:03:17:91:4d:40:f2:8b:ee:d4:00:84:3f:cf:bd:3d:61:f9:
         f1:85:af:3e:2a:1b:b2:dd:82:f2:8b:c9:18:f0:09:5f:fd:8b:
         e7:8a:23:fc:e8:be:c9:55:cb:18:c6:37:4a:84:01:bd:e0:e7:
         74:38:da:c3:8f:87:1b:c7:f0:44:da:be:b5:a9:3b:6e:13:18:
         41:66:f4:cd:e9:4d:61:bb:66:63:0f:1b:c0:ee:53:c2:33:21:
         f3:36:43:62:f0:0f:1b:22:05:c5:4a:e3:fe:f5:a4:97:f9:c5:
         40:41:36:ee:a3:b6:ec:19:85:c7:95:f6:61:19:00:fa:10:62:
         52:39:cb:6d:1e:a8:f4:f0:b3:39:fa:9d:4c:66:f4:f0:51:59:
         31:41:2a:b2:23:1f:d7:08:54:27:3b:39:20:56:22:f1:d6:c4:
         f5:a8:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:57:48 2025 by rpki-client