Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa
File:                     3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          bHROQJU6mcS/W6je8ndz8ZNiihVJQWxD0GqghlT3b1k=
Subject key identifier:   A7:21:73:96:F9:8D:1D:44:99:1A:12:1D:68:8E:36:09:14:97:B1:E5
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       6E2B15844C6CAF58896FD39A6523C9EE0767F25B
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:51 +0000
ROA not before:           Tue 06 May 2025 00:44:51 +0000
ROA not after:            Tue 05 May 2026 00:49:51 +0000
asID:                     28649
IP address blocks:        200.236.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:15:84:4c:6c:af:58:89:6f:d3:9a:65:23:c9:ee:07:67:f2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:51 2025 GMT
            Not After : May  5 00:49:51 2026 GMT
        Subject: CN=A7217396F98D1D44991A121D688E36091497B1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:3d:b5:ad:88:aa:e3:0f:13:d7:12:4b:32:
                    3b:44:60:6c:30:da:4b:fe:bb:8d:a5:01:bb:bd:80:
                    e8:f0:b0:b4:68:1e:17:3b:ac:f6:58:b2:01:88:95:
                    77:c8:a9:88:8c:9c:7e:fe:7c:d5:46:11:3d:ba:2c:
                    83:f0:e5:e0:0b:e1:e5:e5:2b:64:dd:66:e8:c9:a3:
                    d4:b7:83:3c:4c:f9:3e:13:c7:8e:90:63:ef:93:4b:
                    a1:3a:30:57:69:46:fb:36:d3:78:cf:96:9c:3f:0b:
                    e1:9a:2d:8c:9b:64:44:ba:01:cd:47:c1:40:16:3b:
                    7d:6e:92:e1:00:f7:83:d0:f2:b1:bb:e5:56:63:c1:
                    d7:83:a0:d3:10:41:5c:f0:b9:54:83:83:99:6d:90:
                    a9:7a:7b:96:4c:08:b8:14:03:c9:d1:67:4b:02:6a:
                    43:38:f8:0f:12:3e:bb:ce:c7:71:72:13:e9:8b:eb:
                    bc:44:a0:df:ab:45:84:3b:1e:03:87:a2:c2:03:72:
                    c1:0c:0d:0b:52:e9:6f:b5:fb:54:ea:75:46:c2:25:
                    71:31:5a:92:d0:6f:a8:a9:0e:d2:64:04:51:4b:f8:
                    04:dd:77:5a:3f:d2:92:fb:2b:c7:3f:07:d5:c7:0a:
                    dd:8f:71:ab:a2:82:36:42:38:ee:58:f6:9c:07:b9:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:21:73:96:F9:8D:1D:44:99:1A:12:1D:68:8E:36:09:14:97:B1:E5
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:a6:f2:dc:80:05:4b:91:8f:e2:db:e1:41:bd:70:ac:fe:
         1a:5b:46:ab:b2:ff:3b:70:83:35:0d:8a:e2:38:ac:0c:59:8b:
         fd:81:cd:bc:0a:ea:2b:71:7c:8e:61:f6:a9:2b:57:5c:1b:85:
         6d:22:86:45:dd:4a:91:b2:6a:90:d2:89:d2:92:26:32:60:71:
         b5:76:43:fa:50:4c:04:b8:c8:00:df:9a:aa:59:8d:d5:14:6c:
         1a:6f:64:08:b5:32:28:5f:df:4e:cb:b6:b8:98:ef:83:30:a6:
         e3:b2:2b:7f:e2:9a:71:e2:f4:58:1b:d7:1c:e9:5c:2d:43:e0:
         6f:7b:b4:f7:3e:7a:f3:63:4b:9f:99:49:c6:5e:98:15:f9:d3:
         ac:bf:36:5d:ff:ee:eb:51:1f:ea:81:42:47:d1:3b:58:1a:9b:
         22:36:5b:dd:3f:c4:44:b4:2f:56:3d:7e:0c:f0:6e:0e:73:d5:
         c3:e7:02:4a:9f:01:f6:ec:31:88:aa:c9:27:eb:c3:e5:fb:cf:
         a2:ee:f6:fa:bf:03:69:5b:98:bf:34:e5:a8:71:8b:dc:20:9f:
         c7:5d:66:5f:a5:7c:38:c4:12:7c:22:db:72:25:fc:72:e6:fc:
         9b:5c:62:86:87:e3:9d:64:b6:69:dd:5d:d4:15:d8:f8:91:59:
         1d:5b:3a:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbisVhExsr1iJb9OaZSPJ7gdn8lswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM5M0UxMDM5OTJGNThEQ0EwMUY0OUNGMzRFOTkzMzdG
Q0YwREI0MzAeFw0yNTA1MDYwMDQ0NTFaFw0yNjA1MDUwMDQ5NTFaMDMxMTAvBgNV
BAMTKEE3MjE3Mzk2Rjk4RDFENDQ5OTFBMTIxRDY4OEUzNjA5MTQ5N0IxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nT21rYiq4w8T1xJLMjtEYGww
2kv+u42lAbu9gOjwsLRoHhc7rPZYsgGIlXfIqYiMnH7+fNVGET26LIPw5eAL4eXl
K2TdZujJo9S3gzxM+T4Tx46QY++TS6E6MFdpRvs203jPlpw/C+GaLYybZES6Ac1H
wUAWO31ukuEA94PQ8rG75VZjwdeDoNMQQVzwuVSDg5ltkKl6e5ZMCLgUA8nRZ0sC
akM4+A8SPrvOx3FyE+mL67xEoN+rRYQ7HgOHosIDcsEMDQtS6W+1+1TqdUbCJXEx
WpLQb6ipDtJkBFFL+ATdd1o/0pL7K8c/B9XHCt2PcauigjZCOO5Y9pwHudBzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpyFzlvmNHUSZGhIdaI42CRSXseUwHwYDVR0j
BBgwFoAUHJPhA5kvWNygH0nPNOmTN/zw20MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8xQzkzRTEwMzk5MkY1OERDQTAxRjQ5Q0YzNEU5OTMzN0ZDRjBEQjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDOTNFMTAzOTkyRjU4RENB
MDFGNDlDRjM0RTk5MzM3RkNGMERCNDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzIzMDMwMmUzMjMzMzYyZTMxMzkzMjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzgzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATI7MAwDQYJKoZIhvcNAQELBQADggEBAE7TpvLc
gAVLkY/i2+FBvXCs/hpbRquy/ztwgzUNiuI4rAxZi/2BzbwK6itxfI5h9qkrV1wb
hW0ihkXdSpGyapDSidKSJjJgcbV2Q/pQTAS4yADfmqpZjdUUbBpvZAi1Mihf307L
triY74MwpuOyK3/imnHi9Fgb1xzpXC1D4G97tPc+evNjS5+ZScZemBX506y/Nl3/
7utRH+qBQkfRO1gamyI2W90/xES0L1Y9fgzwbg5z1cPnAkqfAfbsMYiqySfrw+X7
z6Lu9vq/A2lbmL805ahxi9wgn8ddZl+lfDjEEnwi23Il/HLm/JtcYoaH451ktmnd
XdQV2PiRWR1bOmw=
-----END CERTIFICATE-----
Generated at Tue May 13 11:51:19 2025 by rpki-client