Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e3132342e33322e302f32302d3332203d3e203238363439.roa
File:                     3138392e3132342e33322e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          v1OassS5eDowRTCB9mwnzyjVhpvD/py0XpJ/A00SdJ8=
Subject key identifier:   EB:65:04:30:D4:0A:A4:9D:CD:CC:48:A9:74:84:4C:32:5C:01:2E:FF
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       6B84ED7ABC7A29267745ABB9F35E6D632E9BA0B5
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e3132342e33322e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        189.124.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:84:ed:7a:bc:7a:29:26:77:45:ab:b9:f3:5e:6d:63:2e:9b:a0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=EB650430D40AA49DCDCC48A974844C325C012EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:8a:38:8c:10:f2:70:16:1d:9a:bd:6e:83:
                    25:b7:e2:6f:ea:92:47:70:87:6e:ae:b6:4a:29:26:
                    f7:d0:1e:0e:80:f1:8c:f9:b6:f8:61:5e:c1:f5:ce:
                    29:b5:27:f6:86:36:15:30:df:0e:83:0c:5e:ba:6d:
                    0f:34:8e:f3:93:45:f0:cf:63:85:41:48:59:d0:ba:
                    14:08:9c:25:ff:8f:70:8c:62:8d:05:e2:92:95:d0:
                    22:46:d6:3c:ca:d1:b2:09:dd:e7:3b:cc:4b:fb:0f:
                    27:38:34:07:b0:66:07:b4:58:ef:17:27:d4:8a:09:
                    64:bf:94:52:3c:15:dc:04:20:71:05:94:3b:be:ee:
                    54:1c:10:45:e5:45:38:65:91:14:79:d4:ea:b2:d0:
                    3b:3c:c7:08:ad:3a:4c:a0:5a:08:58:04:ee:5c:9e:
                    ee:d4:2d:d5:43:3f:87:33:63:b1:c9:5d:45:0b:4e:
                    40:47:a2:dd:14:4e:71:89:5f:e4:49:1e:2b:60:16:
                    d9:c8:7d:c9:62:2b:2e:f0:84:f7:cd:8f:b1:04:f4:
                    88:45:3d:28:9d:b8:4e:ef:82:b7:92:74:ec:c5:91:
                    d9:9d:e7:a6:2f:b7:8a:5b:d5:53:8b:0b:e0:d3:57:
                    fd:bd:a1:9f:8a:a4:e3:cf:5d:2c:72:0b:f6:9e:66:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:04:30:D4:0A:A4:9D:CD:CC:48:A9:74:84:4C:32:5C:01:2E:FF
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e3132342e33322e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:46:eb:dd:15:fa:e4:d8:e9:1a:da:b2:d5:05:e3:15:eb:6f:
         d2:f5:eb:eb:c3:b1:42:06:c4:df:84:51:f2:26:c9:2d:3f:2a:
         5b:5d:40:43:73:63:02:57:23:34:5f:bb:cd:38:8d:38:e3:4e:
         a8:2e:69:11:b6:77:69:1f:03:83:97:b2:c5:de:26:74:95:cc:
         c4:59:3d:03:66:6c:ee:21:0c:2c:85:9e:3f:ce:1b:3f:8e:6e:
         95:1e:0e:f3:4d:50:2d:0d:25:af:3e:09:c4:12:42:f7:06:c8:
         a9:6c:86:48:d1:ff:0e:62:c1:20:e8:c9:4b:07:8d:7b:cf:14:
         2b:fc:35:dd:66:15:77:4d:bd:c0:c4:19:8b:7e:3d:7b:97:f4:
         97:5a:9e:c9:65:2f:2d:a9:e1:22:3d:b0:37:87:23:0c:74:e6:
         d1:72:b5:eb:83:17:ef:23:8f:26:21:57:5f:ae:22:9b:29:41:
         d7:43:24:81:79:73:74:52:bd:c0:a8:3d:d1:19:69:ed:31:a8:
         6c:3d:0f:d7:de:da:79:7d:f5:67:37:c6:1c:66:40:b9:6a:ce:
         60:f8:82:da:66:20:fa:69:5e:ff:f1:a7:d5:cb:2d:2b:24:24:
         1d:8f:74:7b:a1:20:3d:2d:db:9b:5e:9a:ab:5f:e6:ce:6e:8a:
         38:fb:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:35:52 2025 by rpki-client