Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa
File:                     32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa (raw, json)
Hash identifier:          oID1PXhmHx+8Ax9Qbcf/mukt9qMiSnHaQZd+Hw7YHIA=
Subject key identifier:   57:52:5A:74:B3:AA:DB:78:49:EB:D8:60:50:DC:48:81:7B:C9:8F:60
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       1661E66E2BC05FA7274AEFAEF3D3DDCFC75AE9A0
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa
Signing time:             Thu 11 Sep 2025 20:54:13 +0000
ROA not before:           Thu 11 Sep 2025 20:49:13 +0000
ROA not after:            Thu 10 Sep 2026 20:54:13 +0000
asID:                     270519
IP address blocks:        24.152.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:e6:6e:2b:c0:5f:a7:27:4a:ef:ae:f3:d3:dd:cf:c7:5a:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Sep 11 20:49:13 2025 GMT
            Not After : Sep 10 20:54:13 2026 GMT
        Subject: CN=57525A74B3AADB7849EBD86050DC48817BC98F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:5f:c8:ca:cd:49:13:75:cb:99:13:58:9a:
                    33:58:f4:30:de:1f:b4:6f:ad:85:19:ba:0a:6d:2d:
                    1d:99:4a:f0:32:af:5a:72:a6:21:64:aa:b6:a6:3d:
                    82:87:65:66:55:b1:b9:ac:3e:e5:05:e4:94:8e:ea:
                    6d:d4:40:59:62:97:9a:e6:41:44:d4:ae:b9:15:f8:
                    27:9a:68:56:09:e5:6a:cc:46:5a:7f:d5:21:c8:fe:
                    a8:7b:39:ca:59:bc:87:2e:4c:fb:66:0a:c7:6a:5a:
                    37:24:a5:18:58:ce:dc:97:c2:68:1f:ae:92:0d:70:
                    35:cf:ec:da:03:50:27:98:0c:8c:d2:73:43:4f:a2:
                    0e:b4:ce:ad:f4:bb:0d:da:fa:b1:64:4c:76:07:27:
                    f8:95:b9:6f:ef:75:73:53:a1:13:38:57:80:eb:ee:
                    36:30:03:73:b6:71:84:1b:69:be:93:6a:bf:4c:0c:
                    88:03:63:5f:43:9f:46:7e:5e:5b:b6:e3:8a:61:a6:
                    0d:26:9f:5a:79:86:21:f1:d8:9c:c9:9a:97:81:24:
                    ca:0f:7c:ba:be:9e:d1:56:e7:c4:f6:0e:08:d1:31:
                    72:7a:04:61:e5:28:ac:53:3c:d4:04:49:2a:b4:6e:
                    a0:b5:76:82:02:3a:e1:f4:3d:ac:81:f8:82:8d:0a:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:5A:74:B3:AA:DB:78:49:EB:D8:60:50:DC:48:81:7B:C9:8F:60
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130362e302f32342d3234203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:29:7f:08:8d:78:70:35:a1:ee:9c:13:f4:5b:0d:26:08:94:
         13:ef:91:0f:fa:b3:c8:6c:46:66:2d:95:9b:69:4f:f4:b4:e3:
         b9:9d:8e:57:a1:cc:dd:70:f9:4f:bb:3e:6f:31:f8:82:97:32:
         57:8c:90:9c:de:7d:e0:5b:6d:bc:8b:dd:94:3b:29:81:59:5a:
         0c:1e:c7:31:05:e4:9b:d3:00:2a:58:58:1f:52:af:25:60:92:
         f3:23:3d:58:e6:3d:10:cc:98:b1:32:68:20:26:b6:52:ab:39:
         9b:8e:e5:97:f3:8a:bb:94:fa:b8:80:d6:3a:36:a2:2a:27:a1:
         44:b2:fe:56:17:cb:d3:77:c5:64:4a:d4:f2:c4:d2:f4:25:d8:
         09:f0:be:9e:d2:12:12:51:db:85:12:f6:17:f9:a0:18:7b:94:
         5f:07:65:ef:0e:89:60:c6:a4:c5:18:31:b9:66:b5:75:a4:6b:
         3f:ad:58:09:f2:7c:28:25:1b:6b:29:68:2a:4c:c4:d8:2b:d4:
         06:1e:e9:9e:58:5a:5d:11:0f:58:97:fd:5b:c2:45:6a:1a:7b:
         cf:34:ae:50:47:e7:65:43:31:ae:10:bb:d3:eb:0d:7e:d6:ed:
         8b:68:b2:99:c6:fd:49:75:04:61:5b:8a:c8:3f:d8:6e:e0:9f:
         0c:b9:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:08:57 2025 by rpki-client