Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa
File:                     32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          AapSuBZZjRDGpHCkczf0+pP2CVjZVs4lAb8xwfvyfMg=
Subject key identifier:   B6:D1:6E:C7:98:EC:C7:C9:95:A3:6F:F3:ED:34:6F:DD:81:12:23:06
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       600415F1833D53BB9B40CA22F6414034D51190C2
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa
Signing time:             Thu 30 Apr 2026 21:13:39 +0000
ROA not before:           Thu 30 Apr 2026 21:08:39 +0000
ROA not after:            Thu 29 Apr 2027 21:13:39 +0000
asID:                     265369
IP address blocks:        24.152.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:15:f1:83:3d:53:bb:9b:40:ca:22:f6:41:40:34:d5:11:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Apr 30 21:08:39 2026 GMT
            Not After : Apr 29 21:13:39 2027 GMT
        Subject: CN=B6D16EC798ECC7C995A36FF3ED346FDD81122306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:4a:38:68:16:2f:e1:a5:46:02:e0:7f:96:
                    f6:13:1c:14:13:2d:00:4b:a5:75:3f:46:cb:8b:be:
                    95:b5:05:42:2f:d1:1c:8e:00:9e:83:2f:a8:28:a1:
                    02:a1:08:03:32:f4:5e:ea:64:16:7d:b0:0c:2d:b0:
                    22:e1:af:b8:a7:2f:ce:0b:bc:5c:ca:18:d6:d2:0e:
                    95:c2:83:f9:a6:62:a0:17:b4:59:dc:47:08:4d:94:
                    32:26:ca:78:44:14:ed:ad:57:9e:b0:e0:91:7c:8f:
                    d2:37:5e:c8:f1:2b:24:99:ef:74:d0:7a:18:c5:56:
                    31:0e:aa:ef:b3:b2:d2:14:67:a5:e0:07:d1:c1:bc:
                    d8:a3:3a:c7:02:ca:66:46:7c:60:c5:fe:58:de:85:
                    cb:63:2a:c5:c8:e8:94:05:af:63:5b:71:81:7f:e1:
                    62:0e:ee:d1:e8:e9:67:9d:c9:d5:24:df:25:e8:9c:
                    2a:79:a8:df:ad:54:c6:94:26:02:a3:d6:21:eb:bb:
                    5b:14:a6:75:96:18:92:8b:9c:9f:31:a3:f9:dd:cf:
                    af:2e:ee:4d:3f:73:62:2b:7f:1b:33:8d:84:5e:ed:
                    78:c8:44:b3:8a:10:93:de:4a:91:a2:70:f4:45:cc:
                    d7:1d:c1:8d:bc:1d:dd:08:9f:90:51:ab:c1:32:bf:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:6E:C7:98:EC:C7:C9:95:A3:6F:F3:ED:34:6F:DD:81:12:23:06
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:a5:f6:0f:a2:3d:55:21:a3:50:22:90:a0:51:07:e4:1f:
         a4:57:ea:3a:21:10:ea:e9:96:30:16:c7:fa:f5:7e:51:fb:de:
         ff:70:9b:c7:53:5e:bd:1e:3b:1c:b8:df:74:05:cb:e9:64:41:
         d9:84:10:99:f7:f9:ea:09:36:3a:f6:0a:da:75:75:1e:0d:63:
         9b:cd:20:4f:d8:d1:74:18:8d:71:58:23:7b:c9:16:96:00:82:
         b6:11:49:c6:18:00:9b:15:de:de:40:8c:9d:cd:99:f5:96:7d:
         82:d5:e9:1f:3a:36:58:30:17:f9:cc:c7:6b:e2:51:80:4b:2b:
         45:ad:e8:da:42:6e:eb:76:a7:b0:d3:53:80:56:b5:b7:7d:ff:
         30:d8:df:e0:d1:fa:a0:af:b6:36:49:fa:0d:99:4f:38:cb:08:
         88:bc:48:10:35:4f:65:b1:a4:db:95:de:7b:7c:0d:96:a2:6e:
         16:d5:65:da:da:f0:68:ab:92:b6:05:5c:2d:e1:e6:25:0e:89:
         03:f5:d6:53:fc:9c:f7:eb:16:38:0b:08:35:bb:0d:1f:45:9f:
         3a:a6:fe:f2:2d:af:2f:ff:8b:de:eb:d9:59:1e:6f:9b:9c:c5:
         57:58:20:3a:2c:a2:f5:67:7a:40:9f:49:59:ac:bb:aa:9e:67:
         83:81:f0:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYAQV8YM9U7ubQMoi9kFANNURkMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg4QjQ1NEJDNTk0QzVBMTgwMDEzNEUzNzVCNDY1RDkx
QzA3MERGRDAeFw0yNjA0MzAyMTA4MzlaFw0yNzA0MjkyMTEzMzlaMDMxMTAvBgNV
BAMTKEI2RDE2RUM3OThFQ0M3Qzk5NUEzNkZGM0VEMzQ2RkREODExMjIzMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dUo4aBYv4aVGAuB/lvYTHBQT
LQBLpXU/RsuLvpW1BUIv0RyOAJ6DL6gooQKhCAMy9F7qZBZ9sAwtsCLhr7inL84L
vFzKGNbSDpXCg/mmYqAXtFncRwhNlDImynhEFO2tV56w4JF8j9I3XsjxKySZ73TQ
ehjFVjEOqu+zstIUZ6XgB9HBvNijOscCymZGfGDF/ljehctjKsXI6JQFr2NbcYF/
4WIO7tHo6WedydUk3yXonCp5qN+tVMaUJgKj1iHru1sUpnWWGJKLnJ8xo/ndz68u
7k0/c2IrfxszjYRe7XjIRLOKEJPeSpGicPRFzNcdwY28Hd0In5BRq8Eyv3wFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUttFux5jsx8mVo2/z7TRv3YESIwYwHwYDVR0j
BBgwFoAU2ItFS8WUxaGAATTjdbRl2RwHDf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlN1MkRMaXU2dnlKUkpwTDViWWlqajJlcXFTdmU5dVdzY3ZpWFFhc3lU
Mm4vMC9EODhCNDU0QkM1OTRDNUExODAwMTM0RTM3NUI0NjVEOTFDMDcwREZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4OEI0NTRCQzU5NEM1QTE4
MDAxMzRFMzc1QjQ2NUQ5MUMwNzBERkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTdTJETGl1NnZ5SlJKcEw1YllpamoyZXFxU3ZlOXVXc2N2aVhRYXN5VDJuLzAv
MzIzNDJlMzEzNTMyMmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIYmGwwDQYJKoZIhvcNAQELBQADggEBAC7hpfYP
oj1VIaNQIpCgUQfkH6RX6johEOrpljAWx/r1flH73v9wm8dTXr0eOxy433QFy+lk
QdmEEJn3+eoJNjr2Ctp1dR4NY5vNIE/Y0XQYjXFYI3vJFpYAgrYRScYYAJsV3t5A
jJ3NmfWWfYLV6R86NlgwF/nMx2viUYBLK0Wt6NpCbut2p7DTU4BWtbd9/zDY3+DR
+qCvtjZJ+g2ZTzjLCIi8SBA1T2WxpNuV3nt8DZaibhbVZdra8GirkrYFXC3h5iUO
iQP11lP8nPfrFjgLCDW7DR9Fnzqm/vItry//i97r2Vkeb5ucxVdYIDosovVnekCf
SVmsu6qeZ4OB8Gk=
-----END CERTIFICATE-----
Generated at Wed May 13 20:34:39 2026 by rpki-client