Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/32342e3135322e3132342e302f32322d3332203d3e20323730353235.roa
File:                     32342e3135322e3132342e302f32322d3332203d3e20323730353235.roa (raw, json)
Hash identifier:          M5gtrT3rrIShNIMeb+50Pjr/SMmEwEfalthhdn1esmY=
Subject key identifier:   FD:79:75:8B:DF:C4:B8:20:53:D3:FD:F3:B7:D7:08:B1:55:57:57:9F
Certificate issuer:       /CN=300051EF302B34E03DB98212D978869E349107D6
Certificate serial:       6F8E081ABA0C5985D53DC7C27FB75D9125D9EC78
Authority key identifier: 30:00:51:EF:30:2B:34:E0:3D:B9:82:12:D9:78:86:9E:34:91:07:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300051EF302B34E03DB98212D978869E349107D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/32342e3135322e3132342e302f32322d3332203d3e20323730353235.roa
Signing time:             Sat 18 Oct 2025 19:59:29 +0000
ROA not before:           Sat 18 Oct 2025 19:54:29 +0000
ROA not after:            Sat 17 Oct 2026 19:59:29 +0000
asID:                     270525
IP address blocks:        24.152.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/300051EF302B34E03DB98212D978869E349107D6.crl
                          rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/300051EF302B34E03DB98212D978869E349107D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300051EF302B34E03DB98212D978869E349107D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8e:08:1a:ba:0c:59:85:d5:3d:c7:c2:7f:b7:5d:91:25:d9:ec:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300051EF302B34E03DB98212D978869E349107D6
        Validity
            Not Before: Oct 18 19:54:29 2025 GMT
            Not After : Oct 17 19:59:29 2026 GMT
        Subject: CN=FD79758BDFC4B82053D3FDF3B7D708B15557579F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:28:1e:7d:5b:69:d4:8b:c2:1b:de:ea:ac:
                    4a:06:bc:9f:20:6b:20:47:d1:0b:60:b5:45:c7:91:
                    e4:c9:42:2a:d8:e5:40:5f:e7:a2:e2:64:e5:1d:19:
                    3e:39:2a:87:bf:63:cd:79:17:a5:53:4b:21:c5:e8:
                    a4:bd:2c:9b:5d:26:4f:b1:0d:f3:75:c4:bc:d2:80:
                    ac:84:6b:95:fd:23:b1:80:da:22:bf:04:b7:7c:85:
                    49:6c:42:21:cc:4c:26:a6:ee:cd:2a:1a:ef:ae:e3:
                    12:88:b2:3b:a9:04:fc:8f:00:93:17:f6:4e:9f:f1:
                    fc:ec:75:e1:58:6f:52:bb:9d:1b:4f:fe:9d:50:80:
                    c7:b1:6d:43:96:b2:6d:a5:f1:f5:80:0c:61:a2:e6:
                    dd:25:e0:37:91:70:7e:0e:3e:24:fa:97:dc:da:83:
                    16:ce:bc:47:c1:64:9f:29:24:25:50:a6:57:32:24:
                    cf:01:f9:f5:b0:c4:03:13:79:3b:0d:22:dc:db:27:
                    f2:d9:74:e0:4d:1f:28:5f:49:2e:a4:3a:b5:8a:70:
                    7f:7e:b8:bd:d1:f5:24:4b:17:0f:a7:81:93:b4:90:
                    19:f1:86:35:77:8a:6a:b2:1f:87:4f:fc:22:a1:4b:
                    aa:98:00:4c:cb:66:06:8e:f4:06:0f:46:f1:73:48:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:79:75:8B:DF:C4:B8:20:53:D3:FD:F3:B7:D7:08:B1:55:57:57:9F
            X509v3 Authority Key Identifier:
                keyid:30:00:51:EF:30:2B:34:E0:3D:B9:82:12:D9:78:86:9E:34:91:07:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/300051EF302B34E03DB98212D978869E349107D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300051EF302B34E03DB98212D978869E349107D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/32342e3135322e3132342e302f32322d3332203d3e20323730353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:2a:af:0d:ab:1d:37:b3:24:43:93:d3:e0:cc:1d:b3:50:
         aa:aa:24:c9:91:7c:63:09:01:7f:5b:01:e4:27:1f:58:74:3c:
         2f:ae:90:a3:d1:73:7f:52:14:78:94:02:ec:65:3c:1b:69:13:
         d7:de:41:c9:75:e6:1f:77:66:a4:6d:8f:97:4f:63:67:49:cf:
         62:df:17:b6:ee:01:c0:7e:82:8b:96:85:31:dd:55:10:d8:96:
         9c:7b:ce:0b:aa:d2:ee:b3:31:06:92:e4:ac:6a:d1:d2:72:68:
         ba:7b:47:f7:85:6f:c9:28:73:4d:e5:b6:e1:6b:d9:d4:32:e6:
         fb:86:93:da:c7:3c:7e:db:95:d9:25:52:08:10:de:9c:54:00:
         f1:e6:c6:35:58:85:fe:f0:ca:d6:ec:04:1b:db:be:d0:06:e1:
         0d:3b:78:56:fc:e6:f7:72:ec:9e:41:b5:10:be:d3:12:3e:81:
         1a:cc:c6:ba:a5:3f:88:98:64:d6:47:a7:a2:46:df:f7:ca:7b:
         ff:8e:de:ce:3a:91:37:73:88:e1:c6:46:20:0f:db:8c:c4:5e:
         ea:25:38:fc:48:50:98:e0:ae:80:63:8c:96:91:03:e9:d9:28:
         4b:0a:6b:ca:a4:0d:d6:53:28:40:a7:43:23:c3:62:79:8b:6c:
         6a:b4:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:30:41 2025 by rpki-client