Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130352e302f32342d3234203d3e20323730353139.roa
File:                     32342e3135322e3130352e302f32342d3234203d3e20323730353139.roa (raw, json)
Hash identifier:          6QQ0eCt3bSuUHziMdFlp4/uGgNCu+HbdmorzHsX4xQg=
Subject key identifier:   A6:8F:63:50:F9:E0:B8:69:94:7A:85:73:3F:F5:45:13:82:DF:F0:05
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       012533AC9AD1C04BA6E2888793F56F50AD6F129B
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130352e302f32342d3234203d3e20323730353139.roa
Signing time:             Thu 11 Sep 2025 20:54:12 +0000
ROA not before:           Thu 11 Sep 2025 20:49:12 +0000
ROA not after:            Thu 10 Sep 2026 20:54:12 +0000
asID:                     270519
IP address blocks:        24.152.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:25:33:ac:9a:d1:c0:4b:a6:e2:88:87:93:f5:6f:50:ad:6f:12:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Sep 11 20:49:12 2025 GMT
            Not After : Sep 10 20:54:12 2026 GMT
        Subject: CN=A68F6350F9E0B869947A85733FF5451382DFF005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:c2:c4:52:31:90:7e:6d:5d:a1:0c:1f:94:
                    79:2b:14:32:32:0b:6f:36:2d:8c:dc:dd:2e:76:34:
                    25:fe:57:3a:3e:0c:33:a5:98:45:c8:0c:95:1f:11:
                    a2:e3:1c:4b:3c:3f:bc:45:c1:a0:21:83:be:c1:9e:
                    ed:52:c2:80:0e:9b:e3:d1:b7:a1:c0:a9:c7:d6:ac:
                    b1:cb:6a:91:c9:24:83:93:30:06:1a:46:d3:3c:4d:
                    bc:b1:27:07:07:de:82:ef:33:48:05:6a:eb:68:10:
                    10:4a:d7:0b:f7:58:65:3b:a0:9a:35:2e:d9:fb:19:
                    8f:aa:12:23:8b:ff:3a:61:98:a3:59:58:cc:e6:be:
                    ed:45:bc:b6:f5:bd:f7:fc:cc:d1:bc:fd:7f:26:86:
                    8e:65:a6:a4:12:ae:1e:47:58:33:88:65:44:ab:a6:
                    86:c4:c0:51:10:07:9e:63:24:91:60:ed:98:0e:15:
                    3a:54:20:98:75:fb:99:5d:2f:f4:56:85:64:ad:64:
                    75:a1:29:53:7f:cf:5d:b5:d8:c7:6b:b7:10:16:27:
                    13:5f:2f:df:23:6e:81:17:bb:e0:c2:66:5a:d0:b6:
                    12:89:43:40:52:34:d5:dd:f0:67:d6:a1:74:1e:59:
                    6e:70:c6:e3:e4:9d:77:24:35:fb:12:f2:27:62:18:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8F:63:50:F9:E0:B8:69:94:7A:85:73:3F:F5:45:13:82:DF:F0:05
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130352e302f32342d3234203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:1a:28:e3:72:6d:d3:0c:64:88:7d:ee:d2:29:1d:8f:a0:
         58:e1:84:3d:37:cf:c4:0a:11:73:b3:cf:78:49:71:52:d6:ab:
         94:9e:9b:13:3f:95:7a:4c:91:bc:b0:54:c8:7a:d9:0a:da:4d:
         a3:1b:1f:bc:c5:c3:1d:29:fd:bf:56:7f:59:dd:19:6f:51:a9:
         e1:64:b9:f8:ca:ea:12:d8:19:b6:32:64:b9:fd:95:bc:6a:90:
         87:71:3a:05:8c:92:94:7f:e9:6d:4f:ed:7f:f5:36:1c:95:13:
         13:30:e9:4f:f2:e8:a7:ab:da:71:75:5b:5b:cd:e5:66:54:55:
         30:dc:12:c2:31:f4:04:50:52:f9:0e:84:c8:ce:3f:63:e7:5d:
         a0:9f:5a:fe:d5:c3:ce:36:5b:96:36:e1:59:73:ef:9f:57:9e:
         25:29:4f:fa:7e:a1:87:63:eb:7d:8c:15:d9:d5:38:4c:2a:db:
         bd:99:3c:b6:0b:95:6e:1f:f0:4e:4e:19:93:8f:98:91:d9:d4:
         8e:9f:d1:94:ee:f6:71:ce:3f:3d:f4:d1:4e:57:b8:2a:62:42:
         a3:5a:d5:71:f2:9b:43:ed:70:f9:d9:92:4b:f3:0f:b1:14:5f:
         5e:1c:1d:9a:e6:2a:57:82:10:40:9c:ba:c1:49:19:5c:43:8d:
         e9:10:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:08:56 2025 by rpki-client