Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/32342e3135322e302e302f32322d3332203d3e20323639343831.roa
File:                     32342e3135322e302e302f32322d3332203d3e20323639343831.roa (raw, json)
Hash identifier:          mrYj5PfHpVIg25olFqGJ7bb6lin+ykVvEDj0EOB/IzM=
Subject key identifier:   B7:07:49:46:CF:2F:19:C4:5A:78:ED:3C:A0:30:9E:20:16:00:74:01
Certificate issuer:       /CN=2917CE017809B6041B895DCC93EFF28388A27E5E
Certificate serial:       722EBE7FF860C6F2A9BFAAC28131125B2C6498E0
Authority key identifier: 29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/32342e3135322e302e302f32322d3332203d3e20323639343831.roa
Signing time:             Thu 04 Sep 2025 15:17:42 +0000
ROA not before:           Thu 04 Sep 2025 15:12:42 +0000
ROA not after:            Thu 03 Sep 2026 15:17:42 +0000
asID:                     269481
IP address blocks:        24.152.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl
                          rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:be:7f:f8:60:c6:f2:a9:bf:aa:c2:81:31:12:5b:2c:64:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2917CE017809B6041B895DCC93EFF28388A27E5E
        Validity
            Not Before: Sep  4 15:12:42 2025 GMT
            Not After : Sep  3 15:17:42 2026 GMT
        Subject: CN=B7074946CF2F19C45A78ED3CA0309E2016007401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:89:33:58:df:12:73:82:87:f4:b0:e1:31:
                    6b:bd:3d:18:63:8c:81:44:d6:87:3d:df:d8:cc:7b:
                    10:bf:15:6e:91:5e:90:e5:ad:78:2c:e7:b5:b9:6c:
                    60:81:b8:80:bd:3a:55:26:62:7e:74:ae:db:ab:0c:
                    0e:a9:9a:a6:2e:5b:73:61:3a:51:83:7c:e8:3e:0a:
                    1d:d4:86:db:a6:35:1a:6d:36:9c:ff:ab:c8:36:6c:
                    d8:9b:ff:d1:5f:6c:0e:ed:c5:6f:5a:6c:2f:90:da:
                    07:62:8a:79:54:57:cb:71:b0:e8:b8:16:89:3a:0f:
                    43:7b:30:df:76:bb:11:2b:7c:de:f5:81:65:97:9b:
                    83:03:b5:43:ee:db:22:04:ad:b8:36:14:2f:37:9e:
                    17:ac:f5:a2:e4:26:ed:8b:93:9d:02:b0:e5:8d:8b:
                    b1:c9:0a:85:20:ac:c6:1f:79:3d:61:01:75:f7:ab:
                    86:7e:a7:06:e1:f1:bf:5d:a5:f4:4b:0f:cd:40:39:
                    b3:99:3a:89:8f:d6:63:34:99:fe:8c:94:2b:a4:b2:
                    9f:0e:15:37:79:c2:1f:8a:45:d3:4f:fd:59:c9:08:
                    20:bf:fd:1b:36:10:e3:eb:b6:dd:53:6b:c9:99:8b:
                    c7:b7:f7:e3:32:c3:c6:4a:f9:eb:45:9e:13:66:61:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:07:49:46:CF:2F:19:C4:5A:78:ED:3C:A0:30:9E:20:16:00:74:01
            X509v3 Authority Key Identifier:
                keyid:29:17:CE:01:78:09:B6:04:1B:89:5D:CC:93:EF:F2:83:88:A2:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/2917CE017809B6041B895DCC93EFF28388A27E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2917CE017809B6041B895DCC93EFF28388A27E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25L2PHHSqQUqb4YqGRq2iFWgczHTJrH6HtxdW9xVHNBj/0/32342e3135322e302e302f32322d3332203d3e20323639343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:4e:ad:ca:5f:c1:09:fd:c3:0d:ff:d3:2d:3a:d2:d8:c3:
         8e:9c:5a:fa:67:ab:31:df:46:5e:11:c7:b9:66:ab:89:b1:d5:
         4a:0c:c8:b0:43:d2:2b:4e:83:5a:cf:01:d3:7e:eb:b4:d5:da:
         cb:5e:18:e4:7d:44:c9:41:12:12:f0:d9:63:be:a8:7b:58:26:
         2e:ff:c5:87:45:51:30:dd:ab:b0:3f:38:2b:a5:1c:d9:aa:e7:
         82:f1:63:00:9a:e0:58:af:bf:85:44:04:6e:7b:0d:8f:d2:aa:
         dc:1b:03:1b:00:8a:fd:17:01:b5:05:49:b3:c5:8d:d8:87:12:
         fe:60:05:28:3a:55:3b:df:a4:1d:94:f8:52:40:7d:ef:9d:50:
         f9:b2:b7:da:55:73:76:4a:09:1a:f9:cf:47:a3:b2:18:f1:f0:
         20:fc:d3:82:f3:b7:f3:95:6f:cd:89:5a:33:6d:37:65:4d:90:
         e6:dd:77:7b:94:99:35:e2:b5:3e:38:48:4f:a8:ae:37:b5:a8:
         96:4d:a3:5f:9e:d2:72:a8:ee:6c:9d:64:bd:d9:87:1d:0a:6e:
         e2:45:b3:25:c9:3b:7f:b0:10:23:24:2a:48:14:53:18:e1:f5:
         77:ca:f2:b6:55:c4:da:bb:47:d6:f6:74:0b:9a:b6:40:f5:6e:
         ba:87:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:30:52 2025 by rpki-client