Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/32342e3135322e3132342e302f32322d3232203d3e20323730353235.roa
File:                     32342e3135322e3132342e302f32322d3232203d3e20323730353235.roa (raw, json)
Hash identifier:          +55ydLE2zpZu6qxHKKtoowptRwCPCyuAiC54jzoPrE8=
Subject key identifier:   6F:0F:43:2A:71:73:76:17:85:E9:D4:52:8C:DA:06:AF:FD:74:A2:03
Certificate issuer:       /CN=1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76
Certificate serial:       22526677B286EF56F7C368398D1D80795E059B72
Authority key identifier: 1B:88:DE:D4:8E:B1:8A:72:48:FE:67:53:EE:AA:6A:64:D1:D9:DA:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/32342e3135322e3132342e302f32322d3232203d3e20323730353235.roa
Signing time:             Thu 05 Jun 2025 01:10:37 +0000
ROA not before:           Thu 05 Jun 2025 01:05:37 +0000
ROA not after:            Thu 04 Jun 2026 01:10:37 +0000
asID:                     270525
IP address blocks:        24.152.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76.crl
                          rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:52:66:77:b2:86:ef:56:f7:c3:68:39:8d:1d:80:79:5e:05:9b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76
        Validity
            Not Before: Jun  5 01:05:37 2025 GMT
            Not After : Jun  4 01:10:37 2026 GMT
        Subject: CN=6F0F432A7173761785E9D4528CDA06AFFD74A203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:db:61:de:a7:02:87:59:09:52:93:3c:76:
                    a9:f5:d0:ba:d3:3e:f6:d5:2d:c0:91:e6:61:80:b5:
                    ed:76:5f:b6:63:84:7e:96:f9:8c:71:b6:0f:af:84:
                    bc:21:78:32:c8:ed:3b:25:fe:7b:25:fa:41:b2:1a:
                    9d:5e:6b:44:dd:dc:46:cd:1a:56:59:c3:a4:dc:bc:
                    2a:4e:34:b5:df:3f:41:ab:7c:31:21:fb:9a:bf:89:
                    d9:4f:38:41:98:20:2a:66:76:3a:48:b8:fd:01:dc:
                    a5:c9:56:14:f9:bc:ca:7d:50:59:37:ae:76:99:3e:
                    a0:7f:11:20:25:f3:36:16:15:47:f3:25:25:c2:d9:
                    c9:de:1c:fc:68:6d:b3:7b:dd:b7:2e:9d:42:2d:40:
                    83:52:fe:66:88:c8:91:fb:5a:64:8d:0c:2f:d9:a0:
                    54:a5:f1:39:49:02:eb:f9:e0:58:07:e9:2c:58:81:
                    89:81:ac:70:b6:f4:5c:b2:e9:1c:d1:9a:05:8e:59:
                    65:27:20:a9:c3:45:05:2a:d3:f1:9a:ad:f9:56:a3:
                    70:3a:93:48:cf:38:0f:18:a3:b4:cb:a1:ba:b9:b8:
                    bc:5a:37:28:91:b0:3f:f2:12:10:e1:7d:34:b0:7c:
                    c5:9a:c6:b9:13:56:ee:9b:06:b5:58:0d:70:81:93:
                    be:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0F:43:2A:71:73:76:17:85:E9:D4:52:8C:DA:06:AF:FD:74:A2:03
            X509v3 Authority Key Identifier:
                keyid:1B:88:DE:D4:8E:B1:8A:72:48:FE:67:53:EE:AA:6A:64:D1:D9:DA:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B88DED48EB18A7248FE6753EEAA6A64D1D9DA76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/32342e3135322e3132342e302f32322d3232203d3e20323730353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:e4:f9:5a:6b:6c:bd:33:ae:7c:fc:bb:a1:af:fa:a5:b3:
         12:6b:9d:92:0b:39:02:81:30:78:1f:11:1b:94:cc:f0:51:55:
         44:e9:f9:68:19:1a:45:3e:68:cc:05:bd:1d:1a:6f:6e:c5:8e:
         8d:11:1b:67:94:6d:b3:96:59:d3:87:82:e0:4a:c6:2a:99:15:
         86:26:16:0e:7a:fc:93:00:d6:1a:47:aa:ff:13:b9:96:4e:a7:
         c3:86:f4:cd:9b:7d:f7:ec:49:3c:35:30:39:af:c0:b0:97:d1:
         6c:fd:65:ee:14:3d:2c:11:5c:16:eb:13:df:a1:1d:82:5b:c0:
         bc:2a:65:d8:f7:ea:76:53:2d:f0:52:d7:df:0e:1c:4a:c4:14:
         a5:54:e8:bf:5a:fc:93:33:69:96:36:cd:81:1f:a2:eb:73:dd:
         70:f5:4a:56:1c:58:7d:1a:72:91:ba:86:ec:44:c6:d6:6d:57:
         ec:93:01:e0:6f:32:8a:2d:12:dd:6b:0b:ff:b2:ac:63:16:0c:
         4e:1f:9e:a8:ed:73:3a:89:7a:10:da:22:7f:9f:62:70:1d:83:
         e9:73:52:6d:2e:9c:fe:df:7f:01:2c:3e:2c:91:06:86:34:cf:
         23:ea:aa:c3:56:ae:57:7e:cc:6d:ca:c6:a9:21:bc:56:f7:05:
         be:15:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:50:50 2025 by rpki-client