Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          1IVWsZ7nOVkKY6YkEc8GFirhQPRTSBrH/Q95AL/GSXw=
Subject key identifier:   A4:49:2F:52:EC:8C:51:56:75:7F:AA:4B:80:87:DA:8B:60:12:9E:F7
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       705F84BD9220E010BD9C8BCED4025C4E87AEB838
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:33 +0000
ROA not before:           Tue 03 Jun 2025 16:50:33 +0000
ROA not after:            Tue 02 Jun 2026 16:55:33 +0000
asID:                     264344
IP address blocks:        138.185.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5f:84:bd:92:20:e0:10:bd:9c:8b:ce:d4:02:5c:4e:87:ae:b8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:33 2025 GMT
            Not After : Jun  2 16:55:33 2026 GMT
        Subject: CN=A4492F52EC8C5156757FAA4B8087DA8B60129EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:62:71:83:e3:dd:90:50:dd:6e:76:9f:d4:
                    27:98:b1:b7:be:13:58:fa:78:a7:80:04:59:3a:fc:
                    28:99:8d:d0:67:7c:12:36:1d:7b:85:5b:f0:41:fd:
                    d4:d6:05:c9:b2:04:a6:81:a2:24:6c:eb:2f:5e:a6:
                    ed:67:59:ad:20:c3:4c:5f:a1:93:a4:46:f2:cd:1b:
                    08:1d:bb:78:94:70:e2:b5:0d:51:0e:e1:7d:02:73:
                    eb:2e:d0:86:d5:dc:ca:8c:36:4f:19:fc:b1:d9:d0:
                    b3:fe:24:5f:f5:d4:4f:79:54:41:fc:d1:8c:ee:79:
                    4c:0e:a7:7a:8c:b1:cf:21:bf:38:cf:0b:f9:e0:02:
                    27:e6:c1:66:a7:ea:40:35:07:0b:47:c6:ce:f3:ca:
                    bc:a1:ec:71:8c:81:09:12:96:43:b5:a3:96:d0:ae:
                    5b:c7:ec:64:d6:49:09:ef:74:40:ab:7b:83:e4:dd:
                    12:2c:66:99:af:21:4f:70:4d:e4:ea:03:7c:72:ef:
                    61:9e:c5:f2:5b:42:3d:3d:d5:10:39:0b:5f:31:33:
                    8e:25:60:a4:58:00:cc:89:d5:51:48:19:85:12:77:
                    9c:46:53:2c:0e:7b:6e:dc:7d:81:0d:dd:ca:39:b6:
                    41:b0:bd:8c:e0:77:d6:3c:95:68:7d:7d:5e:e3:d5:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:2F:52:EC:8C:51:56:75:7F:AA:4B:80:87:DA:8B:60:12:9E:F7
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38352e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:18:a8:40:fc:ae:61:7e:c0:7a:85:71:89:bd:40:48:9f:
         7e:ea:9d:df:f3:0e:8a:87:e2:6a:cc:d2:6c:cb:da:36:c1:7b:
         61:d0:84:ec:bf:ed:68:eb:55:d2:78:3d:5f:e9:68:dc:3b:f4:
         88:57:e1:3b:33:38:f7:e3:21:ee:f4:8d:f7:49:55:fc:6c:ae:
         0d:71:5f:55:11:3d:4b:25:1b:ca:4b:43:05:d4:ac:4a:e0:94:
         39:75:b1:95:6a:8c:fe:01:8f:d0:58:95:b9:da:69:ce:6d:2a:
         02:c5:42:db:28:46:14:69:08:78:a5:22:76:60:8c:8b:3e:d2:
         f3:af:58:ae:0e:85:65:d0:a8:d4:67:5e:cb:6d:75:2f:50:f6:
         7d:8e:2e:34:d1:f7:d9:ec:e1:13:81:83:c4:07:6f:ff:85:09:
         ac:de:3c:41:3a:88:f6:78:81:3b:4c:91:35:df:96:8c:b4:c4:
         b2:88:dc:72:a3:ad:4a:1e:e9:8c:df:dc:50:ee:63:30:b3:f8:
         bb:58:fc:89:7c:3e:94:b3:bf:b3:cf:d5:5e:24:ee:5b:74:c5:
         2c:44:56:d1:dc:2a:80:be:0d:1b:57:89:9e:26:f7:dc:08:c9:
         0f:bc:6e:69:45:ac:a2:15:ed:91:2d:7f:41:31:11:39:8a:d3:
         66:87:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:31:10 2025 by rpki-client