Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BXmiSFgzAmEgmf5WFkdeuDCUrsyN9FDQeJXxPgXtzCwM/0/32342e3135322e38372e302f32342d3234203d3e20323633353538.roa
File:                     32342e3135322e38372e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          nlCa2BHI5vQiHUVs+rDUt4wMGymtgYA3bQCgjzwIExY=
Subject key identifier:   40:F6:54:4B:1A:7B:F1:2A:E7:AF:90:CE:B3:07:9D:22:B9:F4:0C:5F
Certificate issuer:       /CN=7541D9C625A759DBEC9B10A24AF4D52B70C94B2D
Certificate serial:       16FDBDF1DE6DF3FA1D5A293010F17D7303BEFCED
Authority key identifier: 75:41:D9:C6:25:A7:59:DB:EC:9B:10:A2:4A:F4:D5:2B:70:C9:4B:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7541D9C625A759DBEC9B10A24AF4D52B70C94B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXmiSFgzAmEgmf5WFkdeuDCUrsyN9FDQeJXxPgXtzCwM/0/32342e3135322e38372e302f32342d3234203d3e20323633353538.roa
Signing time:             Wed 13 May 2026 02:00:19 +0000
ROA not before:           Wed 13 May 2026 01:55:19 +0000
ROA not after:            Wed 12 May 2027 02:00:19 +0000
asID:                     263558
IP address blocks:        24.152.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXmiSFgzAmEgmf5WFkdeuDCUrsyN9FDQeJXxPgXtzCwM/0/7541D9C625A759DBEC9B10A24AF4D52B70C94B2D.crl
                          rsync://rpki-repo.registro.br/repo/BXmiSFgzAmEgmf5WFkdeuDCUrsyN9FDQeJXxPgXtzCwM/0/7541D9C625A759DBEC9B10A24AF4D52B70C94B2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7541D9C625A759DBEC9B10A24AF4D52B70C94B2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fd:bd:f1:de:6d:f3:fa:1d:5a:29:30:10:f1:7d:73:03:be:fc:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541D9C625A759DBEC9B10A24AF4D52B70C94B2D
        Validity
            Not Before: May 13 01:55:19 2026 GMT
            Not After : May 12 02:00:19 2027 GMT
        Subject: CN=40F6544B1A7BF12AE7AF90CEB3079D22B9F40C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:43:5b:86:f2:ff:d1:43:03:97:47:26:c6:
                    47:c1:1b:e2:cb:0a:99:6b:80:44:ea:a7:d6:e5:03:
                    16:87:eb:0c:47:24:8b:f3:00:79:3a:51:7d:56:2e:
                    a2:85:ab:79:55:4c:70:07:57:a6:1f:84:3f:f5:bd:
                    63:9b:ff:e9:5a:62:cb:34:ce:52:54:6a:29:41:9f:
                    5d:33:16:f1:73:f5:1f:ab:b1:58:57:0c:39:95:b7:
                    19:76:57:7c:42:94:ea:c8:1e:ff:8c:3a:00:32:7f:
                    c7:81:7d:65:aa:f2:dc:59:9f:ff:fe:3b:29:ca:1b:
                    7e:32:9e:5a:a6:8d:bd:78:ad:6d:8e:89:70:47:a7:
                    6f:ef:fa:17:cb:83:95:e1:bb:be:1f:2d:2d:33:8f:
                    e8:59:00:75:a4:ad:87:88:d4:9f:53:37:6a:89:82:
                    85:a9:90:48:95:ec:de:56:2c:77:62:23:6f:ca:fa:
                    0f:ba:39:dc:06:b7:8b:07:78:69:65:0f:ee:b2:22:
                    9a:80:0b:b8:b4:9b:d4:e6:1e:08:70:65:d5:42:f2:
                    2c:89:7b:f3:a9:52:59:90:c6:51:0a:58:69:7b:5a:
                    7d:37:36:61:75:c2:19:59:b4:61:ef:0d:79:ee:3c:
                    53:92:f4:6f:7a:92:bc:3c:a4:d7:93:be:5f:15:b2:
                    58:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F6:54:4B:1A:7B:F1:2A:E7:AF:90:CE:B3:07:9D:22:B9:F4:0C:5F
            X509v3 Authority Key Identifier:
                keyid:75:41:D9:C6:25:A7:59:DB:EC:9B:10:A2:4A:F4:D5:2B:70:C9:4B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXmiSFgzAmEgmf5WFkdeuDCUrsyN9FDQeJXxPgXtzCwM/0/7541D9C625A759DBEC9B10A24AF4D52B70C94B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7541D9C625A759DBEC9B10A24AF4D52B70C94B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXmiSFgzAmEgmf5WFkdeuDCUrsyN9FDQeJXxPgXtzCwM/0/32342e3135322e38372e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c3:76:2e:d2:78:2d:f4:d7:e1:34:88:bb:57:38:e0:14:ac:
         97:32:f8:dc:a0:aa:6a:0a:2e:6a:41:c2:ea:af:eb:66:de:70:
         11:b5:75:9d:ac:41:80:7e:4d:20:fa:3f:1a:b3:b0:26:47:d7:
         8e:d7:2d:ba:6e:cf:b5:6b:6f:6c:4e:9f:5b:4f:16:bc:19:7a:
         a7:2a:c3:aa:b0:b7:e5:ed:ae:50:a3:d4:75:fd:a0:71:1f:b3:
         04:45:e6:93:f1:14:57:07:61:ea:0c:6c:56:d5:41:db:c2:02:
         b5:59:02:a4:3e:0c:c2:5a:f8:49:80:3f:76:ad:a3:18:4e:f5:
         8c:dd:17:0a:2b:4b:7c:e6:73:28:8b:dd:43:f7:1e:e1:8c:ac:
         ea:15:3b:44:ec:66:22:00:42:97:a3:ba:07:de:4b:89:ef:18:
         a3:9c:9c:40:3b:f3:55:98:cd:29:7f:bf:9e:07:fc:9c:1e:06:
         ac:9d:ad:98:dc:7b:74:79:e1:e9:e3:e3:d4:c5:27:4b:58:73:
         74:97:a8:de:8c:ac:a2:49:b6:cd:e8:7b:b2:4c:11:60:a7:ee:
         74:bd:91:ef:6f:3f:1e:df:89:90:21:8c:28:21:db:bf:c3:12:
         36:ca:18:e8:b2:55:ef:71:72:65:10:72:66:e0:6d:89:ed:fb:
         d9:5b:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:59:57 2026 by rpki-client