Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130372e302f32342d3332203d3e20323730353139.roa
File:                     32342e3135322e3130372e302f32342d3332203d3e20323730353139.roa (raw, json)
Hash identifier:          9iJ/BopfkqOyx2cGSuTEKNkT4KrqphHr8z7lSZ9fbso=
Subject key identifier:   22:67:97:95:8A:A2:32:52:D6:5D:CD:43:5F:C2:BB:BC:35:2B:57:79
Certificate issuer:       /CN=1A5050EEA434138710D1F922949F1181F26D44A5
Certificate serial:       177FE0A6FC192E6B11A1152F6A645E3F09BB3AD2
Authority key identifier: 1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130372e302f32342d3332203d3e20323730353139.roa
Signing time:             Wed 30 Sep 2026 14:41:47 +0000
ROA not before:           Wed 30 Sep 2026 14:36:47 +0000
ROA not after:            Wed 29 Sep 2027 14:41:47 +0000
asID:                     270519
IP address blocks:        24.152.107.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl
                          rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7f:e0:a6:fc:19:2e:6b:11:a1:15:2f:6a:64:5e:3f:09:bb:3a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5050EEA434138710D1F922949F1181F26D44A5
        Validity
            Not Before: Sep 30 14:36:47 2026 GMT
            Not After : Sep 29 14:41:47 2027 GMT
        Subject: CN=226797958AA23252D65DCD435FC2BBBC352B5779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:4c:22:a1:4d:c2:ab:1b:f9:29:67:d9:40:
                    17:2a:c1:1c:cd:b6:ba:d2:d4:fc:69:b6:b7:f1:8f:
                    32:e1:ac:ce:9c:e7:4b:a3:b3:ec:28:3f:df:91:a9:
                    88:d0:39:45:0e:c0:f1:06:70:a6:43:f0:62:2b:c2:
                    52:d6:b5:1f:6c:9a:66:73:8d:dc:09:56:04:04:de:
                    02:47:c4:c1:99:03:6d:c4:3a:52:5b:74:8c:1a:ea:
                    64:eb:a3:cb:19:af:8c:57:d3:bb:a5:d0:18:fc:a2:
                    9c:70:5d:b8:36:74:6d:a8:6e:83:6f:bf:d6:1a:a2:
                    90:87:16:8b:9d:40:45:4d:f0:d7:88:d8:dd:ff:50:
                    0a:56:71:38:cc:d3:dc:9f:37:85:f7:11:2a:0a:87:
                    48:a8:3b:9e:16:06:70:23:39:d9:25:d2:db:60:30:
                    ac:d8:28:1a:21:80:77:cc:f4:ab:3e:28:87:fd:89:
                    2b:05:79:c6:fe:d5:01:34:a8:65:13:f0:70:78:5d:
                    99:6a:ea:ad:61:15:e7:0a:e5:47:c1:16:41:bf:53:
                    2c:39:87:4b:fb:7e:6b:f1:8b:5f:40:ac:51:44:d0:
                    91:b7:e6:17:b3:8b:46:57:d5:00:2d:b7:37:95:3c:
                    d1:73:57:11:21:4c:bc:23:28:a4:b8:f1:16:6e:6b:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:97:95:8A:A2:32:52:D6:5D:CD:43:5F:C2:BB:BC:35:2B:57:79
            X509v3 Authority Key Identifier:
                keyid:1A:50:50:EE:A4:34:13:87:10:D1:F9:22:94:9F:11:81:F2:6D:44:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/1A5050EEA434138710D1F922949F1181F26D44A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A5050EEA434138710D1F922949F1181F26D44A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130372e302f32342d3332203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:55:59:f7:26:53:a6:65:c1:1e:bc:e5:9b:63:4f:95:7f:51:
         fa:6e:bc:de:ea:99:dc:d7:a7:42:4f:e2:b8:80:e0:08:b7:c0:
         c8:e3:6b:28:f7:ea:d2:ca:d4:4b:8d:96:df:4a:39:3e:0b:54:
         e6:94:38:f2:db:8a:31:47:e6:aa:e3:67:42:51:ae:9f:58:37:
         04:4a:11:7f:eb:75:6f:39:87:9c:b5:e0:a0:23:d0:c0:07:46:
         b4:0d:9a:d5:d8:44:a4:df:cd:58:c5:4c:31:49:70:bc:48:4d:
         6a:0e:b2:18:d9:ef:a6:4f:e2:4e:b1:52:0a:47:e0:4d:3c:f3:
         65:bb:e2:98:9e:e1:29:b5:f0:7a:1f:0e:e6:cb:66:49:93:03:
         b6:51:e3:5e:1b:3e:2a:94:b7:2e:06:2e:27:88:51:f2:9e:11:
         73:74:fc:a2:3c:fc:ec:42:03:46:db:df:a4:ff:83:a1:3c:48:
         7f:08:a7:8f:7e:04:19:9b:68:f7:37:c8:f1:bc:9e:a1:75:76:
         f1:c2:a9:a8:4e:ef:2a:b5:62:5d:b9:24:ab:92:31:c5:4b:a0:
         9d:af:bc:00:35:21:fd:3f:75:22:65:46:02:2b:d4:57:2d:28:
         45:1c:ff:81:e4:48:ea:e2:e6:d5:26:09:3e:04:83:3f:c2:59:
         78:1f:b8:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF3/gpvwZLmsRoRUvamRePwm7OtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE1MDUwRUVBNDM0MTM4NzEwRDFGOTIyOTQ5RjExODFG
MjZENDRBNTAeFw0yNjA5MzAxNDM2NDdaFw0yNzA5MjkxNDQxNDdaMDMxMTAvBgNV
BAMTKDIyNjc5Nzk1OEFBMjMyNTJENjVEQ0Q0MzVGQzJCQkJDMzUyQjU3NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkiEwioU3Cqxv5KWfZQBcqwRzN
trrS1PxptrfxjzLhrM6c50ujs+woP9+RqYjQOUUOwPEGcKZD8GIrwlLWtR9smmZz
jdwJVgQE3gJHxMGZA23EOlJbdIwa6mTro8sZr4xX07ul0Bj8opxwXbg2dG2oboNv
v9YaopCHFoudQEVN8NeI2N3/UApWcTjM09yfN4X3ESoKh0ioO54WBnAjOdkl0ttg
MKzYKBohgHfM9Ks+KIf9iSsFecb+1QE0qGUT8HB4XZlq6q1hFecK5UfBFkG/Uyw5
h0v7fmvxi19ArFFE0JG35hezi0ZX1QAttzeVPNFzVxEhTLwjKKS48RZua2RnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUImeXlYqiMlLWXc1DX8K7vDUrV3kwHwYDVR0j
BBgwFoAUGlBQ7qQ0E4cQ0fkilJ8RgfJtRKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhBdkc2YUxOU1VZSE1BYzNiSzFHWk40ZUFtektDeVBZdVJMUHZOZnh6
aGovMC8xQTUwNTBFRUE0MzQxMzg3MTBEMUY5MjI5NDlGMTE4MUYyNkQ0NEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTA1MEVFQTQzNDEzODcx
MEQxRjkyMjk0OUYxMTgxRjI2RDQ0QTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4QXZHNmFMTlNVWUhNQWMzYksxR1pONGVBbXpLQ3lQWXVSTFB2TmZ4emhqLzAv
MzIzNDJlMzEzNTMyMmUzMTMwMzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzAzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAYmGswDQYJKoZIhvcNAQELBQADggEBACNVWfcm
U6ZlwR685ZtjT5V/UfpuvN7qmdzXp0JP4riA4Ai3wMjjayj36tLK1EuNlt9KOT4L
VOaUOPLbijFH5qrjZ0JRrp9YNwRKEX/rdW85h5y14KAj0MAHRrQNmtXYRKTfzVjF
TDFJcLxITWoOshjZ76ZP4k6xUgpH4E0882W74pie4Sm18HofDubLZkmTA7ZR414b
PiqUty4GLieIUfKeEXN0/KI8/OxCA0bb36T/g6E8SH8Ip49+BBmbaPc3yPG8nqF1
dvHCqahO7yq1Yl25JKuSMcVLoJ2vvAA1If0/dSJlRgIr1FctKEUc/4HkSOri5tUm
CT4Egz/CWXgfuG0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:30:42 2026 by rpki-client