Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e3132342e36342e302f32302d3332203d3e203238363439.roa
File:                     3138392e3132342e36342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          WlTk/B76yjq268bW4qybaUegqrK0aP2lsIo893pElDs=
Subject key identifier:   9D:E2:30:08:80:FB:95:39:29:97:B9:30:02:22:53:2A:4A:71:2C:B0
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       07FEE98D0CA5B2489ECBBEFA25A03A855C9FFE0B
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e3132342e36342e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:22:51 +0000
ROA not before:           Tue 06 May 2025 00:17:51 +0000
ROA not after:            Tue 05 May 2026 00:22:51 +0000
asID:                     28649
IP address blocks:        189.124.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fe:e9:8d:0c:a5:b2:48:9e:cb:be:fa:25:a0:3a:85:5c:9f:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:17:51 2025 GMT
            Not After : May  5 00:22:51 2026 GMT
        Subject: CN=9DE2300880FB95392997B9300222532A4A712CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:ad:7e:35:c8:d6:70:fc:0b:17:8b:96:ae:
                    7a:75:e0:de:16:d9:fc:87:fc:16:11:ab:6c:31:8e:
                    57:4d:ff:34:66:00:48:eb:0e:e9:93:fb:90:a5:8e:
                    96:ed:36:ad:6f:de:ce:6f:59:02:d2:70:6a:47:cf:
                    4d:31:6c:e6:f6:e2:48:74:06:1e:8d:e1:48:c7:64:
                    e9:76:db:f2:84:b2:5e:db:3f:e8:2c:e4:3d:0d:a1:
                    26:3b:ea:be:49:b9:65:41:db:e6:8c:be:84:f7:ff:
                    35:06:29:e5:92:77:dc:cd:28:ea:79:ff:7d:75:6c:
                    bb:b2:5a:fa:fe:fc:c8:89:c4:90:6f:a2:28:79:c9:
                    1e:4e:39:04:5e:63:d0:40:c7:5b:5b:c0:9a:ca:34:
                    40:76:08:ed:b3:d0:7d:2e:91:f1:af:1f:a2:a2:37:
                    db:49:c8:0e:50:6e:5b:db:2f:b5:5e:1f:bf:77:7d:
                    01:a3:2e:c7:13:d3:eb:aa:3b:9f:ea:f4:aa:9c:2b:
                    bb:bb:f1:b9:dd:5f:c1:ba:ba:56:b9:da:06:1c:b2:
                    19:69:6e:6e:eb:70:33:03:4d:86:72:34:7c:3d:3c:
                    21:ea:d3:58:7c:73:9a:ba:04:11:89:07:29:ce:9b:
                    ef:2c:a2:68:18:4d:1e:bb:fe:43:77:b1:80:18:6d:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:30:08:80:FB:95:39:29:97:B9:30:02:22:53:2A:4A:71:2C:B0
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e3132342e36342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:e1:ee:1b:a4:23:b9:2a:4b:bf:15:e6:5d:ba:65:32:38:
         e1:0b:e8:46:33:99:9a:64:5b:43:ba:5a:bc:77:06:98:61:85:
         21:76:4e:3a:9f:89:23:1d:49:a4:33:69:1e:78:9c:28:31:46:
         b8:52:3b:bb:7e:20:f9:53:df:8b:87:7a:96:08:5c:dc:e2:c6:
         7b:c6:32:8d:a3:c8:2c:f8:54:f7:f9:87:aa:f1:39:df:0c:8e:
         7a:0b:23:25:63:e7:68:6e:f9:9c:fc:ab:94:19:2e:9a:e5:48:
         47:4d:19:82:4c:58:40:b4:b6:d5:22:fe:bb:90:eb:46:cc:78:
         40:fd:61:04:01:1d:38:f6:f2:7d:bc:92:f4:c8:4a:05:53:81:
         10:47:72:f5:17:f5:9d:f1:9e:7a:07:9d:3d:ce:97:99:1a:35:
         d2:ab:81:9d:ec:12:e0:43:62:de:7a:9c:d8:2a:97:04:a9:5a:
         3a:ae:55:4c:78:be:ea:1d:9d:83:b7:6c:f9:cb:8c:39:82:f0:
         87:79:b1:a6:9d:04:24:69:13:31:ca:37:48:fc:50:63:e9:bb:
         a4:13:0d:ee:de:f8:4a:63:de:ce:0b:9b:99:28:d9:0a:12:61:
         10:63:f8:3a:02:cb:1a:11:08:9f:60:49:ed:5f:a7:2e:44:05:
         f3:31:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:42:26 2025 by rpki-client