Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e32392e302f32342d3234203d3e20323730353633.roa
File:                     32342e3135322e32392e302f32342d3234203d3e20323730353633.roa (raw, json)
Hash identifier:          AEffmBBw/kXiJ26qqK/5QcuzwxneToSRF7YxHCoPWNs=
Subject key identifier:   07:4F:67:D1:E5:10:A8:21:C9:84:74:0F:47:05:17:6C:2C:26:40:C5
Certificate issuer:       /CN=07C21A839CF367647F65D6BDD7BE866D56276D73
Certificate serial:       4B4C285089D9AEE26943A61D89FC551DF4E088C4
Authority key identifier: 07:C2:1A:83:9C:F3:67:64:7F:65:D6:BD:D7:BE:86:6D:56:27:6D:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e32392e302f32342d3234203d3e20323730353633.roa
Signing time:             Wed 29 Jul 2026 14:20:45 +0000
ROA not before:           Wed 29 Jul 2026 14:15:45 +0000
ROA not after:            Wed 28 Jul 2027 14:20:45 +0000
asID:                     270563
IP address blocks:        24.152.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.crl
                          rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:28:50:89:d9:ae:e2:69:43:a6:1d:89:fc:55:1d:f4:e0:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07C21A839CF367647F65D6BDD7BE866D56276D73
        Validity
            Not Before: Jul 29 14:15:45 2026 GMT
            Not After : Jul 28 14:20:45 2027 GMT
        Subject: CN=074F67D1E510A821C984740F4705176C2C2640C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:0c:28:9b:17:04:eb:dd:9d:e6:78:9e:b7:
                    15:cd:da:cd:e8:86:98:6b:c8:ed:27:26:9a:82:7f:
                    bf:73:78:ac:48:de:40:49:0a:2c:28:00:31:67:96:
                    02:53:42:b9:f0:47:e5:fe:1d:25:03:0f:74:77:7d:
                    d0:08:a0:a1:83:71:3e:a4:33:1b:56:92:29:95:8f:
                    ca:b1:28:24:a6:1e:00:de:10:c9:35:8d:80:93:83:
                    20:e0:b4:8a:71:10:36:01:ee:55:3b:84:50:de:36:
                    67:a7:49:be:07:4f:ab:e8:6f:79:7c:96:72:c5:e6:
                    88:bc:30:b3:d3:95:f2:f6:6b:2c:f7:ab:bc:86:9f:
                    16:70:03:14:4e:05:dd:03:2b:64:9f:87:29:95:12:
                    7c:e2:cc:fd:5a:40:b0:15:37:39:90:bf:c3:76:08:
                    88:d0:48:ae:e5:90:ad:1a:b3:d9:2c:a0:76:a0:50:
                    33:ae:08:b0:7c:22:8a:88:77:28:2c:a7:f9:81:4f:
                    d1:bc:29:f9:bf:9e:ba:96:2b:f8:1f:ae:cf:24:3c:
                    2f:b5:1e:92:63:d5:5a:f5:2f:f0:02:c0:98:32:4f:
                    2b:f8:a7:9f:a0:86:d2:99:79:90:df:ed:a7:54:89:
                    cb:5b:8f:68:f3:e2:aa:53:92:d8:e4:19:10:b2:c3:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4F:67:D1:E5:10:A8:21:C9:84:74:0F:47:05:17:6C:2C:26:40:C5
            X509v3 Authority Key Identifier:
                keyid:07:C2:1A:83:9C:F3:67:64:7F:65:D6:BD:D7:BE:86:6D:56:27:6D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e32392e302f32342d3234203d3e20323730353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:c4:ca:d0:ec:71:d5:18:81:c5:a3:b4:6c:b5:80:ec:f1:
         80:c7:69:3f:fa:64:c3:60:39:7f:1b:a9:57:ce:96:d6:5b:4a:
         d3:ff:65:26:56:13:03:4c:54:0d:e4:32:61:91:e4:a8:0b:13:
         0c:96:96:4b:c0:4e:6a:64:66:c9:71:cc:42:f5:cb:69:b8:22:
         ca:24:d4:59:fc:ca:90:0e:45:ad:39:69:43:ed:97:30:df:8f:
         bb:6a:3f:92:1d:37:1c:00:32:ac:12:2f:d6:ee:a3:65:d1:0d:
         f1:3a:a8:f0:23:d0:dc:02:67:89:5d:f7:38:01:b3:2d:c4:d1:
         c3:ca:63:d5:af:7a:9e:69:45:ed:07:8e:09:26:3f:d1:6a:e5:
         02:15:cd:f3:58:af:45:f7:87:f9:b4:09:0b:dd:df:d2:cc:83:
         7b:10:ff:ee:52:93:2f:76:26:c0:4c:b7:6d:17:e9:a1:85:dd:
         7f:bd:40:02:ce:88:9a:1e:e3:95:9c:1c:e3:6b:0c:22:42:be:
         50:25:27:74:a0:90:e5:98:83:39:55:21:bd:e3:39:70:11:de:
         fd:b8:4d:b2:b1:b5:34:60:99:b7:5a:29:2d:07:91:ed:51:2b:
         45:ca:43:e5:be:f7:bb:da:d5:1a:c4:42:60:14:e5:26:fe:d0:
         d8:19:b3:19
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS0woUInZruJpQ6YdifxVHfTgiMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdDMjFBODM5Q0YzNjc2NDdGNjVENkJERDdCRTg2NkQ1
NjI3NkQ3MzAeFw0yNjA3MjkxNDE1NDVaFw0yNzA3MjgxNDIwNDVaMDMxMTAvBgNV
BAMTKDA3NEY2N0QxRTUxMEE4MjFDOTg0NzQwRjQ3MDUxNzZDMkMyNjQwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8gwomxcE692d5nietxXN2s3o
hphryO0nJpqCf79zeKxI3kBJCiwoADFnlgJTQrnwR+X+HSUDD3R3fdAIoKGDcT6k
MxtWkimVj8qxKCSmHgDeEMk1jYCTgyDgtIpxEDYB7lU7hFDeNmenSb4HT6vob3l8
lnLF5oi8MLPTlfL2ayz3q7yGnxZwAxROBd0DK2SfhymVEnzizP1aQLAVNzmQv8N2
CIjQSK7lkK0as9ksoHagUDOuCLB8IoqIdygsp/mBT9G8Kfm/nrqWK/gfrs8kPC+1
HpJj1Vr1L/ACwJgyTyv4p5+ghtKZeZDf7adUictbj2jz4qpTktjkGRCywyUTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUB09n0eUQqCHJhHQPRwUXbCwmQMUwHwYDVR0j
BBgwFoAUB8Iag5zzZ2R/Zda9176GbVYnbXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNBZWNKVHlEWGJxMkd0VjNXYkJ1aVJVeDhaTG1QWmszU1RqYmhvYW12
SzgvMC8wN0MyMUE4MzlDRjM2NzY0N0Y2NUQ2QkREN0JFODY2RDU2Mjc2RDczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3QzIxQTgzOUNGMzY3NjQ3
RjY1RDZCREQ3QkU4NjZENTYyNzZENzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTQWVjSlR5RFhicTJHdFYzV2JCdWlSVXg4WkxtUFprM1NUamJob2Ftdks4LzAv
MzIzNDJlMzEzNTMyMmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAGJgdMA0GCSqGSIb3DQEBCwUAA4IBAQB4D8TK0Oxx
1RiBxaO0bLWA7PGAx2k/+mTDYDl/G6lXzpbWW0rT/2UmVhMDTFQN5DJhkeSoCxMM
lpZLwE5qZGbJccxC9ctpuCLKJNRZ/MqQDkWtOWlD7Zcw34+7aj+SHTccADKsEi/W
7qNl0Q3xOqjwI9DcAmeJXfc4AbMtxNHDymPVr3qeaUXtB44JJj/RauUCFc3zWK9F
94f5tAkL3d/SzIN7EP/uUpMvdibATLdtF+mhhd1/vUACzoiaHuOVnBzjawwiQr5Q
JSd0oJDlmIM5VSG94zlwEd79uE2ysbU0YJm3WiktB5HtUStFykPlvve72tUaxEJg
FOUm/tDYGbMZ
-----END CERTIFICATE-----
Generated at Sun Aug 23 14:57:26 2026 by rpki-client