Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa
File:                     32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          B0g0/6dpDwpXEPB2OXlQQy2yzhoKUdtgY5moX7NXSJg=
Subject key identifier:   3C:63:8C:71:57:8C:52:CA:B0:5C:B9:62:E9:AA:02:A6:D7:17:A7:9F
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       1096D8FEB1D256EA5E00BEE5FE2EA2C070A91D11
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa
Signing time:             Thu 29 May 2025 20:21:47 +0000
ROA not before:           Thu 29 May 2025 20:16:47 +0000
ROA not after:            Thu 28 May 2026 20:21:47 +0000
asID:                     265369
IP address blocks:        24.152.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 22:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:96:d8:fe:b1:d2:56:ea:5e:00:be:e5:fe:2e:a2:c0:70:a9:1d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: May 29 20:16:47 2025 GMT
            Not After : May 28 20:21:47 2026 GMT
        Subject: CN=3C638C71578C52CAB05CB962E9AA02A6D717A79F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:c8:05:69:d1:06:9f:c5:e7:af:54:d9:fa:
                    ea:c8:4a:37:44:b8:c3:68:8c:4c:2f:b4:d4:c4:f7:
                    37:8c:e6:39:01:83:c1:95:b4:4c:8d:fb:a2:27:48:
                    ec:44:a4:a8:9c:7a:1d:1d:38:1f:ea:fe:44:50:93:
                    e6:c5:dd:a0:83:df:b9:b0:5e:cc:22:62:07:a3:6d:
                    5e:34:f1:5d:a4:90:cd:65:71:74:3f:ac:a4:a2:48:
                    45:3c:1e:aa:66:72:56:d0:e7:8f:01:56:95:8d:c4:
                    6b:19:78:79:f5:cc:76:56:2d:07:bd:13:ef:3f:07:
                    4b:f1:7a:ae:f0:f5:64:54:b6:95:aa:d2:d1:aa:7c:
                    e1:62:90:2d:9f:46:15:0d:e0:4b:cb:75:fd:34:35:
                    aa:15:9d:bc:b8:a6:fa:14:50:f0:5d:8f:3b:4e:95:
                    8e:18:9f:be:7e:33:95:ee:13:08:61:81:8f:9c:e7:
                    88:53:fc:f9:8c:f4:c9:9a:da:74:e8:6d:0b:5c:ff:
                    d6:ca:60:fa:d0:b5:2c:5a:6f:4c:77:85:bb:8f:49:
                    d9:cf:ee:a4:f9:a8:a6:2d:34:e8:27:0e:25:3f:3c:
                    df:8a:59:b5:64:d0:a7:9f:5c:37:f0:73:dd:59:56:
                    5d:71:de:1d:ef:c3:64:e8:e7:8d:5e:be:fd:3e:d6:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:63:8C:71:57:8C:52:CA:B0:5C:B9:62:E9:AA:02:A6:D7:17:A7:9F
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:0e:6d:d5:dc:49:13:67:47:da:e6:5e:2a:24:35:a8:49:
         7e:b7:e4:5d:f8:b2:61:68:cf:0f:b4:9b:8c:a5:d7:7b:8b:1e:
         90:38:d8:d7:91:99:9d:51:09:98:b3:0d:71:c0:ec:6b:89:8c:
         7b:0c:d2:9c:69:0e:36:d6:2c:3a:19:55:c6:d6:8f:a4:47:05:
         f3:55:1c:3e:55:92:0b:73:97:50:51:03:bd:87:5e:e1:91:ff:
         0c:55:ae:b1:07:f1:97:31:72:cb:dd:b6:3e:01:f5:ff:63:9b:
         d4:a8:b1:e9:eb:54:20:f1:4f:41:f4:f1:79:2d:3e:30:9b:4c:
         f8:cd:f0:f1:95:4a:a6:e3:32:c2:f1:80:4c:bf:cd:9c:9b:ac:
         49:f9:3f:67:f8:03:74:9e:4b:3b:75:f5:d5:73:66:f5:9a:64:
         4f:f6:c1:50:f9:91:7e:ed:27:ea:7d:dc:ae:97:58:c2:38:b2:
         6b:72:dd:8a:04:1b:36:23:1d:f9:fc:91:7f:62:35:21:a1:e6:
         7f:02:0a:14:bf:65:fa:0c:ed:67:ac:0b:eb:d2:f7:a3:9e:29:
         46:03:64:61:f0:93:e4:0a:db:19:af:bd:d6:fb:3c:06:ae:ed:
         36:ac:79:af:24:51:b7:78:95:14:23:c7:5c:67:2d:94:76:81:
         35:ce:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:48:38 2025 by rpki-client