Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
File:                     32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=
Subject key identifier:   E9:B8:1A:A9:E9:03:6B:C1:CE:F4:2D:10:16:7A:B2:C9:E4:FF:8C:7D
Certificate issuer:       /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
Certificate serial:       199ABCD4A0D3B7BE73B111508B62327D453ECC38
Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa
Signing time:             Mon 14 Apr 2025 14:13:15 +0000
ROA not before:           Mon 14 Apr 2025 14:08:15 +0000
ROA not after:            Mon 13 Apr 2026 14:13:15 +0000
asID:                     270564
IP address blocks:        24.152.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9a:bc:d4:a0:d3:b7:be:73:b1:11:50:8b:62:32:7d:45:3e:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48
        Validity
            Not Before: Apr 14 14:08:15 2025 GMT
            Not After : Apr 13 14:13:15 2026 GMT
        Subject: CN=E9B81AA9E9036BC1CEF42D10167AB2C9E4FF8C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:f4:a2:21:0f:39:c1:a9:b1:ff:2b:c9:3c:
                    c4:1c:40:5f:ee:3a:87:e0:d7:e3:7c:76:62:cb:cb:
                    34:3b:5c:43:c1:7f:b6:62:87:de:01:8b:84:15:a9:
                    ab:38:38:25:40:3f:88:82:0f:93:68:3d:77:0f:c3:
                    58:c4:9a:53:25:8e:1c:b6:18:5d:ba:61:42:d4:62:
                    6a:eb:5b:29:4f:ac:6b:4a:61:11:af:1b:1c:3d:9a:
                    0c:36:17:6c:b8:c1:07:f3:81:99:19:e8:b5:75:54:
                    ff:5d:30:55:bf:36:f8:fd:c8:40:7c:e9:62:0a:b6:
                    d3:bb:86:e9:e4:0d:e8:d3:82:06:8f:dd:4e:58:8a:
                    8d:44:ab:c9:1f:91:7e:c1:05:49:4d:81:80:ba:d0:
                    04:15:a2:a3:ca:d3:6a:6b:3b:4c:7d:39:d3:2c:49:
                    86:f5:44:5c:6c:80:d8:24:9b:9f:4a:75:96:e7:0e:
                    6b:e1:6a:95:e8:83:79:20:ce:2f:5a:4c:4c:50:f1:
                    df:e1:77:be:89:13:55:a3:f0:d0:8a:dc:55:49:a2:
                    97:51:9a:69:2e:98:70:0f:15:5d:ed:a4:5a:71:51:
                    e6:1d:d0:45:64:4e:03:5e:2b:52:92:f5:2a:9f:74:
                    b0:ac:1b:bf:32:0d:db:f9:5c:53:ae:e0:ac:34:83:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:1A:A9:E9:03:6B:C1:CE:F4:2D:10:16:7A:B2:C9:E4:FF:8C:7D
            X509v3 Authority Key Identifier:
                keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:54:dd:4f:b9:71:e0:15:65:53:a8:c7:24:a0:40:26:88:
         e9:2e:91:19:63:72:98:5b:26:bd:6d:5b:5f:e1:0b:7a:18:19:
         f6:bb:27:c9:0d:43:4c:90:b2:92:ca:e2:e8:47:be:52:7c:08:
         af:ef:de:e2:b8:ef:bc:d0:33:21:8c:57:0b:ac:0e:d2:19:b1:
         82:dd:1e:1d:3e:4b:aa:14:47:0f:96:5f:2b:f5:26:33:79:1a:
         aa:81:18:c6:47:4a:6a:5a:31:ec:6e:b4:43:e2:42:3b:6d:5a:
         32:f5:70:59:b3:bc:a1:27:0e:c7:33:4a:14:69:f9:12:60:32:
         9e:da:f4:f0:e7:0b:fe:23:52:5f:a6:54:83:45:5f:e0:62:56:
         bf:9b:49:63:a0:68:49:8a:e0:c6:94:16:35:c4:f8:fa:46:53:
         33:9d:2e:76:27:93:f5:d8:e5:9f:50:47:f8:c5:75:e9:55:32:
         ba:b9:ed:3a:75:a9:9d:bf:a1:ff:3d:8f:57:7e:49:e3:9b:eb:
         46:68:fc:ce:77:d1:84:8f:80:0e:83:47:71:63:1c:fa:70:56:
         5b:0c:a1:a2:e0:57:f3:e2:4e:d7:70:2b:95:7e:99:68:6b:13:
         49:cc:d0:6d:1c:27:a8:79:99:06:4a:1d:fb:05:21:ad:75:6c:
         3a:16:37:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGZq81KDTt75zsRFQi2IyfUU+zDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2QzE5NTdDQTFFQUQ5QkE5Mzg1RkE1MjhDMzZEOTAw
QzQyNUY0ODAeFw0yNTA0MTQxNDA4MTVaFw0yNjA0MTMxNDEzMTVaMDMxMTAvBgNV
BAMTKEU5QjgxQUE5RTkwMzZCQzFDRUY0MkQxMDE2N0FCMkM5RTRGRjhDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlfSiIQ85wamx/yvJPMQcQF/u
Oofg1+N8dmLLyzQ7XEPBf7Zih94Bi4QVqas4OCVAP4iCD5NoPXcPw1jEmlMljhy2
GF26YULUYmrrWylPrGtKYRGvGxw9mgw2F2y4wQfzgZkZ6LV1VP9dMFW/Nvj9yEB8
6WIKttO7hunkDejTggaP3U5Yio1Eq8kfkX7BBUlNgYC60AQVoqPK02prO0x9OdMs
SYb1RFxsgNgkm59KdZbnDmvhapXog3kgzi9aTExQ8d/hd76JE1Wj8NCK3FVJopdR
mmkumHAPFV3tpFpxUeYd0EVkTgNeK1KS9SqfdLCsG78yDdv5XFOu4Kw0g8w/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6bgaqekDa8HO9C0QFnqyyeT/jH0wHwYDVR0j
BBgwFoAUKWwZV8oerZupOF+lKMNtkAxCX0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtx
VTEvMC8yOTZDMTk1N0NBMUVBRDlCQTkzODVGQTUyOEMzNkQ5MDBDNDI1RjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NkMxOTU3Q0ExRUFEOUJB
OTM4NUZBNTI4QzM2RDkwMEM0MjVGNDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNxaUs3NE5oaVgzbzNhWjhXOG03U0YzQVJLbWRTZFNuMXl2RDJpTTZrcVUxLzAv
MzIzNDJlMzEzNTMyMmUzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAGJgkMA0GCSqGSIb3DQEBCwUAA4IBAQBMNlTdT7lx
4BVlU6jHJKBAJojpLpEZY3KYWya9bVtf4Qt6GBn2uyfJDUNMkLKSyuLoR75SfAiv
797iuO+80DMhjFcLrA7SGbGC3R4dPkuqFEcPll8r9SYzeRqqgRjGR0pqWjHsbrRD
4kI7bVoy9XBZs7yhJw7HM0oUafkSYDKe2vTw5wv+I1JfplSDRV/gYla/m0ljoGhJ
iuDGlBY1xPj6RlMznS52J5P12OWfUEf4xXXpVTK6ue06damdv6H/PY9Xfknjm+tG
aPzOd9GEj4AOg0dxYxz6cFZbDKGi4Ffz4k7XcCuVfploaxNJzNBtHCeoeZkGSh37
BSGtdWw6FjfS
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:25 2025 by rpki-client on console.sobornost.net