Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e3139322e302f32302d3332203d3e203238363439.roa
File:                     3230312e33332e3139322e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          mtmNq83NxdYS3HCyDjCtt9Usc2tgLgqqOah11tw88HY=
Subject key identifier:   F3:2F:50:39:FA:97:4C:DD:70:BA:9D:F8:54:19:8E:1E:14:2B:AD:88
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       0723C2BE82C5976A36BB5B802EE26F2105F1DB71
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e3139322e302f32302d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:49 +0000
ROA not before:           Tue 06 May 2025 00:44:49 +0000
ROA not after:            Tue 05 May 2026 00:49:49 +0000
asID:                     28649
IP address blocks:        201.33.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:c2:be:82:c5:97:6a:36:bb:5b:80:2e:e2:6f:21:05:f1:db:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:49 2025 GMT
            Not After : May  5 00:49:49 2026 GMT
        Subject: CN=F32F5039FA974CDD70BA9DF854198E1E142BAD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:67:c5:d3:64:d1:6a:d1:70:ce:03:e1:5a:
                    1f:e5:a6:9b:f1:0b:13:82:65:1a:f8:bb:a8:81:87:
                    21:56:d6:59:53:ae:d9:24:15:09:6c:8c:89:77:d1:
                    66:fe:28:6f:16:ac:43:2e:d8:0d:02:28:39:bd:fc:
                    4a:b9:5e:3d:96:54:11:ec:aa:27:d3:c0:5d:d5:b3:
                    f0:59:d5:25:f4:a0:54:1a:78:45:71:d7:8e:ce:03:
                    17:9b:85:53:ad:c7:3b:78:7c:ac:1b:f7:18:33:c4:
                    c4:aa:ed:e6:0e:d9:64:4e:82:36:e1:ac:b4:bf:be:
                    a8:b5:37:19:81:aa:3d:23:8b:90:0e:7a:19:4b:09:
                    32:39:f1:1b:29:ec:dc:c3:db:7b:9b:85:72:67:b0:
                    83:0b:f9:06:34:6d:c9:9c:5f:d5:69:10:c1:7b:1c:
                    71:91:7d:b4:90:35:de:c3:5c:50:e5:18:29:d7:0b:
                    85:29:9d:61:e9:60:34:ca:86:67:96:97:16:f7:bc:
                    0e:c7:75:76:5c:4e:98:bf:81:3a:43:74:77:fc:83:
                    75:43:52:bb:49:17:e6:e9:9e:7b:f0:41:ae:c9:c8:
                    9c:6a:d6:ce:d0:04:6a:78:3a:a9:e0:c3:4b:56:5c:
                    88:84:7b:1f:87:83:3c:06:04:3f:d6:62:2e:bd:96:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2F:50:39:FA:97:4C:DD:70:BA:9D:F8:54:19:8E:1E:14:2B:AD:88
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e3139322e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:e0:84:e8:05:cb:f1:ee:d0:1a:74:a7:c5:57:a0:52:ca:71:
         dd:71:d6:77:a0:1a:6b:cb:42:b7:54:6b:64:48:a1:56:77:7a:
         4e:2e:47:61:7a:9b:63:78:65:fd:07:57:79:b3:37:4a:8a:93:
         9b:ce:c4:94:6a:c6:bb:31:f8:76:8e:bf:c3:a0:30:50:ec:e6:
         68:19:84:69:4b:f7:35:9e:b4:94:43:a8:78:12:a3:6a:1c:4e:
         ad:63:d6:a9:54:d7:58:3d:f8:71:25:69:54:6c:58:36:1d:9b:
         a6:2e:b8:56:85:31:1c:1b:fb:8c:19:8d:6d:43:03:7b:2a:bd:
         10:10:d2:c1:6a:6a:47:c9:f5:53:14:c7:03:3a:8b:08:91:fe:
         96:4a:17:3f:22:5d:3e:17:95:88:5c:80:c2:61:48:2d:05:4c:
         77:cd:a8:9f:f0:bc:9c:7d:91:01:35:47:34:a6:4d:1e:b3:ba:
         37:cf:e3:bc:28:a6:ea:7a:2c:0d:91:8f:68:14:a3:24:03:e8:
         f9:29:cb:8a:f5:04:9b:ab:37:07:52:e8:3e:15:95:ca:98:a4:
         c5:9a:39:d1:33:66:5a:e1:9f:99:46:95:0d:c4:a8:9c:bb:82:
         a7:94:d2:b5:07:0c:97:df:18:fd:6c:d2:1b:32:69:ab:08:81:
         a5:92:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:25:13 2025 by rpki-client