Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130372e302f32342d3234203d3e20323730353139.roa
File:                     32342e3135322e3130372e302f32342d3234203d3e20323730353139.roa (raw, json)
Hash identifier:          zfWRyPWPFLQQMgqHGp4AFGr5HEhw0fy9CGSq8xIX7YE=
Subject key identifier:   8D:C1:B5:96:A6:3C:AD:E0:94:EE:33:62:EB:98:81:89:A2:DD:D6:AE
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       26E42C0DAADA9ABA391BF822FC354B4DB8E3F848
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130372e302f32342d3234203d3e20323730353139.roa
Signing time:             Thu 11 Sep 2025 20:54:12 +0000
ROA not before:           Thu 11 Sep 2025 20:49:12 +0000
ROA not after:            Thu 10 Sep 2026 20:54:12 +0000
asID:                     270519
IP address blocks:        24.152.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:2c:0d:aa:da:9a:ba:39:1b:f8:22:fc:35:4b:4d:b8:e3:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Sep 11 20:49:12 2025 GMT
            Not After : Sep 10 20:54:12 2026 GMT
        Subject: CN=8DC1B596A63CADE094EE3362EB988189A2DDD6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:01:d5:2d:cd:df:0f:84:f3:3d:ee:1b:f9:
                    5d:c9:4a:e3:aa:c7:f7:a2:e9:fd:49:42:13:64:6c:
                    af:8e:39:b5:4f:27:68:c0:f5:62:18:01:fb:56:17:
                    96:2e:4a:ff:f6:67:33:1f:08:83:35:fe:bc:8a:33:
                    f3:56:05:7a:13:8a:76:37:1f:f9:2d:a8:77:53:99:
                    35:10:46:27:0d:92:1e:0c:93:34:d4:af:81:2d:52:
                    e6:12:9d:fe:d2:b1:fc:d2:8b:57:78:ac:8b:f0:10:
                    8e:82:06:63:70:c8:f7:51:ef:cb:a4:d5:07:3b:e5:
                    4e:75:ea:5a:a3:f2:92:e2:32:17:01:f5:fe:ff:99:
                    bd:ff:49:d9:04:1a:7d:90:13:eb:87:47:d5:58:8f:
                    1a:82:df:c3:bc:8e:4e:de:81:2b:e1:6b:a0:e9:82:
                    d9:d1:f3:35:f9:cb:d9:01:27:ce:e0:c8:85:50:69:
                    3e:38:43:65:96:a6:f5:65:89:a2:83:16:0e:42:0a:
                    b6:ee:79:6e:cc:aa:73:58:41:8d:70:1a:29:5e:b3:
                    80:7e:a5:83:08:13:5c:6d:c8:45:79:71:83:57:7d:
                    d1:66:0c:a9:91:3a:52:92:68:ed:fc:48:18:92:35:
                    f8:78:80:29:75:76:de:d1:ab:c6:dd:69:8e:93:a4:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C1:B5:96:A6:3C:AD:E0:94:EE:33:62:EB:98:81:89:A2:DD:D6:AE
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130372e302f32342d3234203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:fe:e0:9e:38:1a:c8:20:ea:c3:37:cc:73:7e:72:f1:21:79:
         6e:d4:b1:30:27:b4:87:fc:02:7a:95:3c:05:b3:8e:16:00:fb:
         a3:3b:d8:03:f6:5b:48:1d:fa:b6:80:4b:b6:c0:91:90:f6:81:
         66:60:58:19:2a:3f:db:65:ee:14:13:3b:f7:32:b0:ed:e9:73:
         a8:b9:d1:75:23:28:c9:15:dc:ad:f6:ce:4d:d8:9a:84:90:42:
         74:d2:2c:4d:1c:ee:c5:fe:59:ff:81:9c:38:b6:05:17:4a:21:
         a8:04:1d:b8:4d:ca:a9:b0:5e:4c:bd:05:68:04:07:26:16:2b:
         08:67:85:2a:63:22:24:54:a3:3d:42:36:e5:20:17:cb:ec:00:
         d8:00:aa:4a:1b:43:f7:ae:9a:48:96:bd:7b:82:df:47:3c:bb:
         69:dc:c6:70:0e:f3:9b:61:db:ac:32:8e:2d:56:00:5c:c7:db:
         eb:46:25:4b:72:fd:b5:be:e1:f2:56:10:cc:4f:fa:02:34:1c:
         17:53:62:4d:a5:03:e7:30:71:eb:ee:6f:fe:23:d7:66:ec:fb:
         05:3e:b8:fe:86:7a:b3:72:ab:07:04:a6:ea:ed:a9:29:d7:3d:
         7c:82:c2:70:e4:ad:ab:8d:f4:25:48:51:5e:93:50:fc:5b:c0:
         2e:cb:56:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJuQsDaramro5G/gi/DVLTbjj+EgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE1MDUwRUVBNDM0MTM4NzEwRDFGOTIyOTQ5RjExODFG
MjZENDRBNTAeFw0yNTA5MTEyMDQ5MTJaFw0yNjA5MTAyMDU0MTJaMDMxMTAvBgNV
BAMTKDhEQzFCNTk2QTYzQ0FERTA5NEVFMzM2MkVCOTg4MTg5QTJEREQ2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHQHVLc3fD4TzPe4b+V3JSuOq
x/ei6f1JQhNkbK+OObVPJ2jA9WIYAftWF5YuSv/2ZzMfCIM1/ryKM/NWBXoTinY3
H/ktqHdTmTUQRicNkh4MkzTUr4EtUuYSnf7SsfzSi1d4rIvwEI6CBmNwyPdR78uk
1Qc75U516lqj8pLiMhcB9f7/mb3/SdkEGn2QE+uHR9VYjxqC38O8jk7egSvha6Dp
gtnR8zX5y9kBJ87gyIVQaT44Q2WWpvVliaKDFg5CCrbueW7MqnNYQY1wGiles4B+
pYMIE1xtyEV5cYNXfdFmDKmROlKSaO38SBiSNfh4gCl1dt7Rq8bdaY6TpF+ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjcG1lqY8reCU7jNi65iBiaLd1q4wHwYDVR0j
BBgwFoAUGlBQ7qQ0E4cQ0fkilJ8RgfJtRKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6
aGovMC8xQTUwNTBFRUE0MzQxMzg3MTBEMUY5MjI5NDlGMTE4MUYyNkQ0NEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTA1MEVFQTQzNDEzODcx
MEQxRjkyMjk0OUYxMTgxRjI2RDQ0QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4QXZHNmFMTlNVWUhNQWMzYksxR1pONGVBbXpLQ3lQWXVSTFB2TmZ4emhqLzAv
MzIzNDJlMzEzNTMyMmUzMTMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAYmGswDQYJKoZIhvcNAQELBQADggEBAJj+4J44
Gsgg6sM3zHN+cvEheW7UsTAntIf8AnqVPAWzjhYA+6M72AP2W0gd+raAS7bAkZD2
gWZgWBkqP9tl7hQTO/cysO3pc6i50XUjKMkV3K32zk3YmoSQQnTSLE0c7sX+Wf+B
nDi2BRdKIagEHbhNyqmwXky9BWgEByYWKwhnhSpjIiRUoz1CNuUgF8vsANgAqkob
Q/eumkiWvXuC30c8u2ncxnAO85th26wyji1WAFzH2+tGJUty/bW+4fJWEMxP+gI0
HBdTYk2lA+cwcevub/4j12bs+wU+uP6GerNyqwcEpurtqSnXPXyCwnDkrauN9CVI
UV6TUPxbwC7LVsc=
-----END CERTIFICATE-----
Generated at Fri Sep 19 06:09:03 2025 by rpki-client