Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
File:                     3138392e33362e3232342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          uaCPXZ01x6hQttvsHqDxWlE+9aOGgJFG7Xm6SZIWD1Y=
Subject key identifier:   D2:42:10:D3:C8:5C:03:9A:48:20:3B:82:8E:9B:A3:9E:4A:CD:77:61
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       7159B2EC3E5DF067B3B751850917B63A378D05AF
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:48 +0000
ROA not before:           Tue 06 May 2025 00:44:48 +0000
ROA not after:            Tue 05 May 2026 00:49:48 +0000
asID:                     28649
IP address blocks:        189.36.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:59:b2:ec:3e:5d:f0:67:b3:b7:51:85:09:17:b6:3a:37:8d:05:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:48 2025 GMT
            Not After : May  5 00:49:48 2026 GMT
        Subject: CN=D24210D3C85C039A48203B828E9BA39E4ACD7761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:b1:23:a1:76:97:06:dd:0e:d5:0c:a3:53:
                    d9:72:6b:f6:75:b1:04:2c:1e:b6:94:00:53:a1:29:
                    80:90:8e:ef:21:9c:23:c2:f3:b5:17:40:4b:d7:53:
                    c7:02:2a:0b:20:95:dd:b7:b8:81:2a:b0:c3:8c:ab:
                    a5:4d:c1:38:ca:aa:b7:3e:48:89:d8:2f:d3:17:3b:
                    79:91:ce:9b:41:7b:a6:9e:57:18:f7:50:ed:31:5b:
                    b4:42:53:ec:e5:df:f4:09:20:65:c5:51:6c:af:30:
                    94:4c:0f:dc:9b:90:a7:de:eb:45:08:cb:ce:d6:9f:
                    98:d0:a5:95:fe:7a:8b:0d:02:74:a0:85:7a:35:32:
                    38:08:4c:59:bc:7f:9d:d8:aa:47:5a:16:d9:38:55:
                    3f:5d:b1:69:98:b7:f8:14:9a:7d:64:4e:18:ef:41:
                    77:72:a4:f4:81:f9:de:03:42:81:9c:fa:02:05:c1:
                    79:b8:03:2f:95:57:6d:01:5d:76:c2:99:9b:4f:4d:
                    89:64:66:2a:93:27:f7:81:e1:f7:83:f1:87:89:25:
                    ea:29:48:f6:ec:ab:7e:56:fb:4d:17:d5:a5:24:45:
                    ef:61:f4:e3:4c:72:01:66:2c:61:f0:4f:6e:49:f2:
                    69:34:a1:e7:7f:5e:d6:d8:12:85:36:3b:31:f2:72:
                    4a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:42:10:D3:C8:5C:03:9A:48:20:3B:82:8E:9B:A3:9E:4A:CD:77:61
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:06:68:39:cd:0f:6c:92:1e:4c:d0:c0:eb:96:f7:bb:d7:8a:
         b6:55:9c:66:1c:8e:a8:a6:a4:b1:4a:b2:23:9d:46:2a:ed:8c:
         bd:cb:49:0a:3c:d8:47:d7:a5:90:28:24:b2:3f:43:5d:53:ff:
         10:55:0b:f4:28:a5:c8:81:43:76:7d:45:89:55:60:ec:8d:6c:
         ae:8f:2d:19:31:83:39:7a:37:77:17:41:ec:3f:29:77:ae:7a:
         76:29:00:4b:58:57:18:9d:3d:53:7d:67:f8:9d:b5:ad:e2:56:
         5c:ad:48:c5:12:50:50:8f:22:4b:84:c2:02:fe:88:61:d5:e4:
         97:fd:e3:bc:19:8a:42:38:00:f2:74:64:07:84:f0:0b:87:d5:
         65:7e:9b:e4:1c:07:5b:2f:60:18:d0:b7:2a:79:7e:e8:0e:f5:
         2f:24:7e:37:5f:14:af:2f:e0:97:50:97:e7:27:c5:49:9d:25:
         13:ff:c8:37:1d:98:c4:07:76:4a:fa:59:b3:4c:60:ee:9e:b1:
         a3:51:1b:cd:68:af:30:3a:76:a9:56:a8:66:52:fd:76:2b:70:
         7b:25:ae:54:b6:2d:fd:f1:d7:9a:47:fd:94:54:2e:68:2f:c5:
         4f:45:3a:54:6c:df:47:00:55:7a:5d:9f:6a:62:8f:c5:ce:8c:
         c9:48:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:12:25 2025 by rpki-client