Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3332203d3e20323730343934.roa
File:                     32342e3135322e342e302f32322d3332203d3e20323730343934.roa (raw, json)
Hash identifier:          TwU1sHAKF/Hi3nWsUQnpDeXPUh1GpcaZ12rpHvNvXzg=
Subject key identifier:   91:DA:B9:32:FB:AC:B6:E7:F1:9E:5D:37:8F:9F:AD:4C:AE:24:CE:D9
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       5D31431C2F2CD3BBB0838705790388836F40473B
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3332203d3e20323730343934.roa
Signing time:             Tue 25 Feb 2025 19:36:03 +0000
ROA not before:           Tue 25 Feb 2025 19:31:03 +0000
ROA not after:            Tue 24 Feb 2026 19:36:03 +0000
asID:                     270494
IP address blocks:        24.152.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
                          rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:31:43:1c:2f:2c:d3:bb:b0:83:87:05:79:03:88:83:6f:40:47:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Feb 25 19:31:03 2025 GMT
            Not After : Feb 24 19:36:03 2026 GMT
        Subject: CN=91DAB932FBACB6E7F19E5D378F9FAD4CAE24CED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:2c:32:d2:61:ec:50:96:ed:77:29:5a:18:
                    ac:0f:05:2d:40:01:be:c7:ea:7c:56:35:21:50:eb:
                    6d:64:d0:da:b0:6a:bf:56:3a:fc:d0:c9:e3:e5:f3:
                    89:32:ad:d4:fc:ee:cc:3c:2d:52:0b:cb:f3:42:ac:
                    82:04:75:09:94:58:ca:0f:6d:f2:0d:84:55:bb:dd:
                    be:fb:df:a0:87:8d:70:a6:ce:49:35:ef:76:49:5c:
                    34:d1:de:21:c4:ce:83:50:a2:d7:41:14:5d:40:55:
                    83:78:15:bd:6f:26:f2:ed:20:f1:36:47:62:26:a8:
                    6e:4e:20:47:2b:47:9a:64:25:d0:89:25:2b:d5:77:
                    e1:4a:46:34:81:1b:ce:33:ee:7c:56:a7:bb:0d:00:
                    3b:4e:5f:d2:06:88:a8:66:84:cc:49:1f:9a:97:ef:
                    17:05:c7:06:e6:a5:8b:ef:fc:0a:62:59:5a:35:de:
                    a7:0d:1c:b1:bc:e4:1e:2c:64:1a:3e:39:45:7d:7a:
                    c4:a1:20:f3:26:7c:10:64:fe:a8:55:f3:b3:71:c2:
                    e4:ec:f0:af:a7:da:c3:88:70:33:62:3b:7f:59:78:
                    3c:32:81:a5:88:6d:bc:79:f8:63:09:25:cc:91:75:
                    7a:0c:44:61:0f:8f:1c:0b:1b:91:59:3a:86:41:df:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DA:B9:32:FB:AC:B6:E7:F1:9E:5D:37:8F:9F:AD:4C:AE:24:CE:D9
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3332203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:8d:ba:8c:b1:6d:c4:35:d3:8c:a5:4c:ea:32:dd:d1:b7:
         bd:78:a6:0f:34:7d:31:cd:d0:77:e8:c6:0b:00:8f:61:61:3d:
         d3:0b:58:ff:0e:03:3f:a4:dd:f1:c2:03:12:1d:4b:23:f4:49:
         33:56:e6:e4:42:fa:cf:69:55:f2:c7:29:eb:3a:b0:9b:e7:55:
         de:f8:33:a5:62:6a:85:16:b5:19:da:31:52:97:b5:73:15:82:
         36:a3:8a:7f:92:5e:a8:b3:ab:8b:e3:8a:45:5d:cc:e2:38:cd:
         fa:0a:ee:0c:f3:a3:38:69:3d:f1:f2:cc:0a:62:e3:41:e3:3a:
         c2:cb:3f:f9:1e:cf:37:b0:50:3a:f2:52:b3:5a:43:f1:0f:41:
         23:d5:04:e2:73:ee:58:33:1b:8f:12:fc:b1:b9:ba:ac:4f:8f:
         ef:f0:eb:bb:5a:e6:41:64:73:10:bc:7f:0a:fb:93:1c:4c:28:
         a1:d2:67:16:85:5e:3e:c1:e4:1c:ff:1c:03:90:c5:f8:57:28:
         43:2b:18:b7:0b:6a:52:ec:2e:1e:af:03:12:33:96:c9:ea:52:
         ff:61:90:e2:ce:65:00:1b:15:25:56:1e:08:6a:7d:3c:0c:c0:
         70:9a:ed:60:fe:db:20:9f:f0:bd:f9:db:88:57:32:09:62:68:
         44:9b:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:06:40 2025 by rpki-client