Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e33312e302f32342d3234203d3e20323730353633.roa
File:                     32342e3135322e33312e302f32342d3234203d3e20323730353633.roa (raw, json)
Hash identifier:          BFncbWxmSEKISrFZF6a/t6qvUKz7qMD7V01WNSHJgsQ=
Subject key identifier:   DA:AA:56:F0:B8:8B:51:04:DC:2D:F3:D5:37:2E:5D:BC:4E:27:8F:FD
Certificate issuer:       /CN=07C21A839CF367647F65D6BDD7BE866D56276D73
Certificate serial:       3C077D4863B677E37D3D09EF7DD5D444DAA18495
Authority key identifier: 07:C2:1A:83:9C:F3:67:64:7F:65:D6:BD:D7:BE:86:6D:56:27:6D:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e33312e302f32342d3234203d3e20323730353633.roa
Signing time:             Wed 29 Jul 2026 14:20:50 +0000
ROA not before:           Wed 29 Jul 2026 14:15:50 +0000
ROA not after:            Wed 28 Jul 2027 14:20:50 +0000
asID:                     270563
IP address blocks:        24.152.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.crl
                          rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:07:7d:48:63:b6:77:e3:7d:3d:09:ef:7d:d5:d4:44:da:a1:84:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07C21A839CF367647F65D6BDD7BE866D56276D73
        Validity
            Not Before: Jul 29 14:15:50 2026 GMT
            Not After : Jul 28 14:20:50 2027 GMT
        Subject: CN=DAAA56F0B88B5104DC2DF3D5372E5DBC4E278FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:a4:7f:1f:92:67:ea:05:81:77:0b:ee:13:
                    a7:c0:5e:f8:07:30:15:60:c7:32:9a:38:d5:89:76:
                    f7:31:5f:25:20:cc:22:3a:fe:33:73:c3:c0:ad:2c:
                    da:04:ab:0d:54:95:f7:56:99:4b:bb:ee:26:77:5e:
                    77:20:e1:32:0b:4b:45:7a:bf:03:5f:88:60:d3:b8:
                    21:d9:00:83:ee:48:e6:38:68:df:72:e6:71:5b:e8:
                    ce:4b:ea:f6:68:7b:e9:83:20:41:5d:0c:9c:71:cf:
                    76:81:d7:28:99:43:8d:05:69:0e:79:ea:a8:22:59:
                    3d:cf:46:da:29:57:90:c9:b3:52:59:1c:18:22:83:
                    71:ab:d7:42:e0:a3:cb:91:8c:24:df:d8:fc:3f:49:
                    f0:86:d2:e8:b9:77:3d:67:07:25:8b:da:e0:c6:ba:
                    6e:15:aa:ab:02:46:8e:bf:10:71:8b:88:4f:53:de:
                    66:d6:70:9a:36:1c:72:ee:1d:23:dc:a4:9f:df:e7:
                    dd:93:61:e5:24:86:3e:32:10:ec:23:49:b0:a4:66:
                    17:2f:c1:6d:cc:9e:7c:97:3f:7b:5d:da:51:31:68:
                    de:39:50:70:43:1d:bb:0a:d6:ee:98:f9:ee:80:d5:
                    23:a3:80:2c:c5:19:fb:20:a4:53:21:f9:88:31:93:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:56:F0:B8:8B:51:04:DC:2D:F3:D5:37:2E:5D:BC:4E:27:8F:FD
            X509v3 Authority Key Identifier:
                keyid:07:C2:1A:83:9C:F3:67:64:7F:65:D6:BD:D7:BE:86:6D:56:27:6D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/07C21A839CF367647F65D6BDD7BE866D56276D73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07C21A839CF367647F65D6BDD7BE866D56276D73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e33312e302f32342d3234203d3e20323730353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:9d:b4:17:0b:4e:55:27:ec:cf:34:0e:50:65:48:95:ea:a2:
         db:ea:64:fb:08:4b:86:b5:19:66:20:f8:26:00:3c:78:f2:50:
         46:16:48:96:45:2c:24:2d:1f:52:31:35:f1:fa:23:4a:26:d4:
         fb:d7:a8:82:5b:64:ba:96:5e:8a:2e:ea:5c:e8:37:4b:aa:b5:
         dd:00:38:4f:85:91:40:73:c1:39:c7:e1:34:65:85:35:d5:50:
         48:ac:2e:c4:cd:3c:9c:7f:c6:84:7c:f2:b9:bb:38:8a:14:6f:
         5e:42:40:b8:f0:a4:ef:b7:b0:fe:cb:49:25:7c:25:51:29:55:
         f5:9c:9f:a7:08:33:df:65:2d:f9:57:e8:30:ea:8e:92:df:d4:
         41:a1:cb:8c:49:05:3a:ab:d5:a2:38:a8:7a:19:14:8e:57:0f:
         a4:02:d5:a5:f1:d2:2d:27:80:7c:45:b1:d0:29:c6:4c:d4:b3:
         c6:c9:ec:d9:9a:c3:cb:5a:f0:67:4e:ae:a0:49:cc:77:c3:62:
         59:93:a0:16:ba:e1:07:b1:dc:79:42:5a:a6:2e:86:11:28:1c:
         4d:b0:8e:1d:e5:56:2e:71:b0:af:1d:69:62:d4:d7:68:29:b7:
         ce:8c:54:97:fe:57:1a:30:00:be:a0:a2:3f:c3:32:ec:b0:17:
         f0:93:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:48:03 2026 by rpki-client