Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e362e3134382e302f32322d3332203d3e203238363439.roa
File:                     34352e362e3134382e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          Z+gjz7QoO23jMj4JwSjq1pdrOjOXF2Y1uozUs85h4q8=
Subject key identifier:   C4:62:49:38:CE:FF:8F:3B:4B:BA:11:34:CC:7E:84:57:95:20:FC:64
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       35EDBBAA5916333B1202434418F9B7829F6E1FB1
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e362e3134382e302f32322d3332203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:49:50 +0000
ROA not before:           Tue 06 May 2025 00:44:50 +0000
ROA not after:            Tue 05 May 2026 00:49:50 +0000
asID:                     28649
IP address blocks:        45.6.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ed:bb:aa:59:16:33:3b:12:02:43:44:18:f9:b7:82:9f:6e:1f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:44:50 2025 GMT
            Not After : May  5 00:49:50 2026 GMT
        Subject: CN=C4624938CEFF8F3B4BBA1134CC7E84579520FC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:31:ad:e4:b7:68:d5:1b:a2:e2:db:38:8c:
                    99:56:f6:6b:08:3f:95:f4:02:32:d4:01:68:5d:c2:
                    b3:19:5e:b9:3b:5e:57:10:f3:a7:7e:b1:f2:c9:12:
                    1f:9d:7b:9e:91:aa:3d:f0:6f:de:44:39:c3:9f:ab:
                    2e:a8:61:a5:0b:64:77:a9:95:e3:23:71:e5:0e:76:
                    f5:0b:28:42:8d:18:f6:f3:6d:e6:fa:83:4f:59:7e:
                    0b:8d:eb:b5:14:da:df:2c:4b:e2:55:06:c7:0f:b3:
                    f6:b3:39:d0:49:a1:dd:87:02:8c:40:b2:46:4b:fb:
                    9f:a3:30:a1:9a:09:2c:ba:61:8b:0b:f6:1e:eb:fb:
                    49:7f:e4:88:a3:95:22:a1:24:5a:c5:bb:15:8a:08:
                    f4:a7:92:15:17:0b:b9:70:8b:e9:d8:87:89:d7:3a:
                    cd:28:92:c9:e5:89:fc:11:79:ca:de:33:7d:54:34:
                    b3:11:25:b2:9d:ae:61:b9:3e:2a:9c:ea:3a:1a:39:
                    76:e6:40:64:36:3d:f7:f4:04:07:d2:db:0b:35:18:
                    b4:9e:02:5c:50:a5:3a:e1:93:c1:14:01:6e:3f:7b:
                    cf:d1:44:f6:a7:99:0e:8c:ab:1b:50:00:59:b0:b8:
                    ae:05:75:2a:5e:4f:91:23:a9:8a:46:ef:d5:ac:bd:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:62:49:38:CE:FF:8F:3B:4B:BA:11:34:CC:7E:84:57:95:20:FC:64
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/34352e362e3134382e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:70:2e:b2:bc:03:20:11:61:5a:74:16:73:d2:28:2b:24:
         d3:92:a4:5f:37:e7:e8:39:97:64:6d:aa:85:f5:a1:70:04:8a:
         a2:97:d0:ce:20:1e:b8:18:d7:f6:4a:15:c5:c3:5b:af:f3:42:
         07:eb:b7:81:03:d0:9a:2c:35:21:28:aa:fc:f0:9c:e3:84:2b:
         9d:a1:ae:a6:89:ad:7e:5d:41:e3:0e:51:42:c3:ac:6e:0c:8f:
         15:08:0e:d0:9c:2f:23:60:cd:93:a4:fb:88:29:e9:da:b7:2e:
         92:c2:2d:e4:f6:66:9d:26:0f:2e:4d:ab:ce:26:b4:b3:eb:27:
         8a:dc:d8:c6:d5:4c:45:18:b2:1f:de:1d:91:9c:73:06:9d:09:
         0e:70:52:98:55:da:de:f5:86:49:3e:c5:64:8b:76:6f:bf:2a:
         9f:e2:41:05:ef:c8:bf:fc:f4:03:e3:8a:ba:c3:70:ab:e9:90:
         66:5c:17:14:c6:f7:71:13:d6:58:ea:2a:68:5b:34:4f:c8:27:
         08:1e:e9:59:c4:6d:fb:f0:84:ea:2c:1a:ef:18:13:f6:cb:a9:
         96:d4:50:3a:77:bd:a0:26:1b:d6:ed:64:60:30:a6:b3:0a:d2:
         65:b7:74:80:5d:58:61:a0:8c:03:ab:f2:30:b5:b3:df:ae:d3:
         90:84:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:30:56 2025 by rpki-client