Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa
File:                     32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          RHh83ZMxv/bsF4plISxNJzeTSnCAD5IZymhyCkkCclo=
Subject key identifier:   88:95:B8:59:37:BC:DE:51:2E:B9:5E:79:99:AF:54:B1:71:D0:42:2E
Certificate issuer:       /CN=56B0D4522C382D2528E989DFA8E7662C852D4861
Certificate serial:       01820EBBE87FC03BB25FF0623BC8B40C5C265BCF
Authority key identifier: 56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa
Signing time:             Wed 02 Apr 2025 00:06:25 +0000
ROA not before:           Wed 02 Apr 2025 00:01:25 +0000
ROA not after:            Wed 01 Apr 2026 00:06:25 +0000
asID:                     265369
IP address blocks:        24.152.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 11:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0e:bb:e8:7f:c0:3b:b2:5f:f0:62:3b:c8:b4:0c:5c:26:5b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B0D4522C382D2528E989DFA8E7662C852D4861
        Validity
            Not Before: Apr  2 00:01:25 2025 GMT
            Not After : Apr  1 00:06:25 2026 GMT
        Subject: CN=8895B85937BCDE512EB95E7999AF54B171D0422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:94:8f:4d:1c:b3:66:55:a7:6c:bf:59:5f:
                    42:ba:97:21:5d:a9:40:1f:a2:06:d6:07:2e:b2:68:
                    db:68:0a:e7:15:7c:73:3c:58:d6:dc:d6:62:bb:af:
                    6b:7d:14:4e:29:65:cc:6d:11:fd:1d:97:76:89:36:
                    fd:d1:6e:52:0d:8c:85:69:bf:6f:82:47:c9:46:b6:
                    e1:0b:21:a2:a0:04:0c:e8:d2:ce:a7:78:b5:a6:bc:
                    16:1a:20:a8:08:20:48:b4:5e:0b:cd:1d:4d:5c:d9:
                    5d:19:a3:6f:92:fc:aa:69:ef:42:1f:54:75:54:97:
                    fd:07:06:9e:ef:1d:37:04:70:10:9a:09:84:72:13:
                    2c:f5:6a:50:7e:04:d4:a1:82:04:eb:7b:fb:02:97:
                    42:5e:52:4c:ad:9f:18:0f:c6:2b:84:64:15:11:92:
                    70:d1:97:53:ff:fa:2b:d8:af:ab:97:88:2f:29:36:
                    b0:51:b1:ee:e7:44:ef:5a:a8:54:e2:49:93:96:a3:
                    8d:b4:ab:d1:05:03:3a:c0:e5:d6:02:00:63:88:d2:
                    d0:d1:c1:8e:1b:a5:02:7b:d9:a5:17:4f:33:0c:db:
                    bf:4c:fe:75:17:9e:22:05:fa:89:f4:63:d4:29:f1:
                    e1:27:7f:6f:a1:91:9d:f2:7b:e5:e1:0c:86:35:89:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:B8:59:37:BC:DE:51:2E:B9:5E:79:99:AF:54:B1:71:D0:42:2E
            X509v3 Authority Key Identifier:
                keyid:56:B0:D4:52:2C:38:2D:25:28:E9:89:DF:A8:E7:66:2C:85:2D:48:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/56B0D4522C382D2528E989DFA8E7662C852D4861.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56B0D4522C382D2528E989DFA8E7662C852D4861.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/32342e3135322e3130382e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:cd:0d:d3:0c:01:58:2c:a2:6c:f5:90:ce:b8:8b:08:92:
         a9:ef:85:62:ed:51:60:ef:ee:1d:1c:2d:b6:6b:79:cd:56:61:
         bb:f1:89:fd:6d:12:1d:f7:52:d4:8d:2d:7f:c4:31:c0:e5:b3:
         93:fb:ab:09:49:ac:cb:18:77:2a:37:61:09:37:bd:15:4f:94:
         cf:6f:d6:3e:14:94:bd:aa:ea:17:10:5c:ac:b2:d0:01:00:b2:
         40:11:ae:e2:90:52:46:31:05:c3:f9:1d:2c:b4:1b:2d:31:8e:
         a3:da:d6:bc:9f:9b:ae:19:d8:9d:70:95:36:a9:27:46:8e:d8:
         09:9d:80:e1:e7:58:72:b0:0a:d1:d9:01:a1:cd:8a:a9:b4:f8:
         56:04:34:f8:e0:46:dc:54:44:b4:b6:95:b0:1c:ff:ce:c3:51:
         1a:0e:14:b0:90:46:8e:f3:b3:eb:a0:8b:55:89:06:21:7d:77:
         f4:12:78:fd:db:3c:4a:87:4f:59:78:9d:cf:07:85:78:34:b4:
         8a:a0:8b:bd:25:be:0c:cc:d0:f2:71:e5:ad:de:0d:f2:d2:09:
         be:58:74:41:fb:6a:38:b6:6b:70:43:c5:ce:13:4f:5e:d7:cc:
         46:88:aa:b7:ab:c6:56:a2:24:a5:a9:7f:2f:32:8f:cf:6e:02:
         cc:c1:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:48:03 2025 by rpki-client