Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e32382e302f32322d3332203d3e20323730353633.roa
File:                     32342e3135322e32382e302f32322d3332203d3e20323730353633.roa (raw, json)
Hash identifier:          wSfhVV+J6fz8z6QJbUQv7o+secqfrUrLni7C47/I0t4=
Subject key identifier:   1C:C0:59:FC:56:0B:0F:F1:76:94:67:29:06:88:3F:82:3C:DE:A4:09
Certificate issuer:       /CN=618D57F0976B5AF78C5E5BB4F8D37A49378EEA09
Certificate serial:       42E795B6EF7B5CCB5959969B4971DE4FB808EDCB
Authority key identifier: 61:8D:57:F0:97:6B:5A:F7:8C:5E:5B:B4:F8:D3:7A:49:37:8E:EA:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618D57F0976B5AF78C5E5BB4F8D37A49378EEA09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e32382e302f32322d3332203d3e20323730353633.roa
Signing time:             Thu 08 May 2025 14:25:44 +0000
ROA not before:           Thu 08 May 2025 14:20:44 +0000
ROA not after:            Thu 07 May 2026 14:25:44 +0000
asID:                     270563
IP address blocks:        24.152.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/618D57F0976B5AF78C5E5BB4F8D37A49378EEA09.crl
                          rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/618D57F0976B5AF78C5E5BB4F8D37A49378EEA09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618D57F0976B5AF78C5E5BB4F8D37A49378EEA09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e7:95:b6:ef:7b:5c:cb:59:59:96:9b:49:71:de:4f:b8:08:ed:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618D57F0976B5AF78C5E5BB4F8D37A49378EEA09
        Validity
            Not Before: May  8 14:20:44 2025 GMT
            Not After : May  7 14:25:44 2026 GMT
        Subject: CN=1CC059FC560B0FF17694672906883F823CDEA409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:b3:1b:58:1e:f1:76:48:82:52:0a:3c:12:
                    9c:eb:8d:42:ae:64:5b:b5:b9:04:6a:f8:fa:20:4d:
                    09:71:ec:c7:3c:5e:ca:55:c9:6b:7b:ca:40:84:29:
                    4a:be:5c:3e:8c:c6:3a:67:95:d9:43:6d:69:3a:90:
                    af:e6:a8:22:a5:2f:ae:9b:46:59:a7:e4:d6:51:46:
                    18:50:20:af:3a:f0:f3:04:8a:7a:16:aa:1d:27:6b:
                    f7:28:b1:a9:55:b3:83:c8:98:58:ce:ee:02:f4:2c:
                    93:0f:0f:0f:84:48:f2:b8:e4:d6:b8:64:b8:5a:50:
                    82:be:b0:09:69:44:5e:46:f8:75:8e:ec:a8:9d:f2:
                    16:d8:5a:01:9c:43:b8:5f:69:e5:13:0c:62:43:2e:
                    fb:c6:31:bd:a0:a3:35:8f:db:8f:4b:73:7d:03:d8:
                    72:ec:a0:a4:a2:10:25:99:28:55:98:cf:95:23:a6:
                    e9:b9:87:e3:64:c8:0c:ab:e6:bf:c0:12:3b:09:3b:
                    14:9d:36:05:b3:84:e6:f8:42:aa:7a:66:d6:0f:da:
                    ab:48:c5:87:79:21:3b:7e:a4:1c:d9:b8:16:23:97:
                    57:61:d2:da:b6:fa:8e:56:d3:6a:86:87:01:f6:d6:
                    56:f2:43:02:bc:40:85:1c:82:80:16:c6:9b:74:d6:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:59:FC:56:0B:0F:F1:76:94:67:29:06:88:3F:82:3C:DE:A4:09
            X509v3 Authority Key Identifier:
                keyid:61:8D:57:F0:97:6B:5A:F7:8C:5E:5B:B4:F8:D3:7A:49:37:8E:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/618D57F0976B5AF78C5E5BB4F8D37A49378EEA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/618D57F0976B5AF78C5E5BB4F8D37A49378EEA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSAecJTyDXbq2GtV3WbBuiRUx8ZLmPZk3STjbhoamvK8/0/32342e3135322e32382e302f32322d3332203d3e20323730353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:b5:89:06:6f:df:10:df:5d:7f:cb:7d:15:39:c2:a3:65:b7:
         19:41:20:13:bd:72:3a:bc:fc:65:27:ef:86:89:68:9e:7c:87:
         81:a6:08:d7:31:9a:05:db:f0:d1:20:b2:ea:69:2a:40:b4:d9:
         67:ae:93:60:a1:a2:f6:2d:50:31:4a:73:0e:49:4c:dd:f1:95:
         c6:70:c5:da:3b:43:2d:53:f4:7f:13:65:98:ff:4b:7e:e2:e1:
         93:ce:03:53:44:6d:4f:10:c5:03:27:aa:49:72:0b:37:41:bb:
         37:9a:34:11:ff:31:c5:75:b5:33:5f:01:1f:3d:cd:2e:25:4b:
         ad:b5:31:61:0a:c7:4f:19:cc:fd:da:f2:ba:99:8f:8f:bb:3c:
         c2:d8:1d:75:05:43:4b:46:95:a6:c4:ac:a1:2f:ce:79:e4:ca:
         07:c6:9d:e0:08:23:91:f4:40:df:71:a3:55:f6:1f:5e:cb:89:
         e9:91:b7:a9:85:a4:3e:47:ec:34:cb:1c:72:38:98:46:26:28:
         5d:c2:b7:b0:07:e5:9b:16:f6:0f:1e:f2:63:07:b6:1f:5f:20:
         38:67:cc:49:c0:1d:7c:f8:af:b0:87:f6:53:ea:68:fa:4e:75:
         31:b9:8a:41:ff:c3:77:61:bb:6c:7c:5c:a4:ce:22:dc:52:0b:
         96:01:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 22:20:53 2025 by rpki-client