Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38362e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38362e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          4hrMSBUnYHtShT1L6bI+0DAe/nzbiaL7N0eiNQ2iisk=
Subject key identifier:   D8:48:F9:A3:BB:04:DB:FD:3D:73:59:C3:21:37:1C:2C:B3:78:6F:DD
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       76E19CC8CAAC85F59A95F7D0766BD3965828FFC2
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38362e302f32342d3234203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:23 +0000
ROA not before:           Wed 05 Mar 2025 20:51:23 +0000
ROA not after:            Wed 04 Mar 2026 20:56:23 +0000
asID:                     264344
IP address blocks:        138.185.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e1:9c:c8:ca:ac:85:f5:9a:95:f7:d0:76:6b:d3:96:58:28:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:23 2025 GMT
            Not After : Mar  4 20:56:23 2026 GMT
        Subject: CN=D848F9A3BB04DBFD3D7359C321371C2CB3786FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:77:00:7a:dc:36:3f:6f:98:f4:88:91:19:22:
                    34:e2:fb:34:f4:35:53:68:ab:ab:15:77:53:00:18:
                    e2:54:16:21:3d:32:98:07:77:3f:e1:4c:59:e2:64:
                    d0:5f:16:ed:ae:5e:6f:b7:a1:35:c4:fc:09:55:13:
                    35:82:5e:bd:c1:f8:de:39:cf:c5:2f:fe:59:43:a3:
                    8d:bb:ba:c2:31:de:f7:27:9f:1d:ca:b4:e3:8b:b0:
                    6e:23:e5:22:8d:63:76:94:25:7f:bc:9f:59:27:8c:
                    27:de:80:35:dc:9c:7a:26:2d:08:9e:52:36:21:8f:
                    2d:a9:df:a0:78:bf:46:07:4b:75:8c:d8:ec:ab:8e:
                    8f:0e:6d:47:f4:27:d7:47:8d:7c:e1:74:93:48:be:
                    78:e1:98:62:ba:11:6d:61:ed:d7:43:bc:f3:58:35:
                    2b:6d:0b:23:bc:51:31:c3:37:a4:65:60:a6:b2:31:
                    41:aa:a9:37:c7:03:d4:f5:e6:f0:c3:e4:12:60:51:
                    c3:c0:a6:23:14:76:d7:a1:c4:5d:3d:e3:bc:e1:ad:
                    0e:ec:5e:ff:c8:0b:eb:c3:0c:69:e9:cc:52:cd:a7:
                    93:65:75:00:d7:db:e0:2f:c0:7e:2b:92:80:1e:70:
                    0f:1b:cb:7a:d5:e7:09:f4:a0:e8:e6:0e:6d:99:32:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:48:F9:A3:BB:04:DB:FD:3D:73:59:C3:21:37:1C:2C:B3:78:6F:DD
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38362e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:b7:06:39:3f:e0:a0:fc:94:34:96:7d:61:1d:e9:3f:c8:
         64:41:c8:4d:70:5d:7a:32:d1:e9:b0:bc:7e:95:60:66:63:3b:
         9f:3f:2a:ea:70:fa:28:e4:63:10:76:45:2c:a0:f0:ed:02:d5:
         a9:39:b0:16:77:b5:19:92:f0:76:5e:cb:67:43:4f:0a:be:fc:
         77:80:5c:69:6e:d8:55:ed:63:94:d9:60:cb:b2:8e:a2:45:f8:
         80:41:6f:a4:6f:8b:f8:52:6c:b6:cf:60:fe:e0:df:a4:09:9a:
         ec:94:d8:f5:4a:b4:71:ef:d9:97:f5:d0:83:d3:fe:8f:ef:3c:
         04:4e:35:d0:fc:ea:8b:e1:41:8b:b7:12:be:10:f7:89:42:65:
         b3:c9:a1:aa:b0:dc:37:69:36:87:b1:5e:3a:f5:f6:41:96:68:
         0a:c1:7c:95:12:80:9c:28:b6:36:18:80:9b:4c:5d:37:17:5a:
         c8:23:4c:98:65:0e:92:c1:96:d3:46:b5:87:d4:83:a7:d5:5f:
         15:9e:2b:c4:56:66:b0:05:d9:b2:89:2e:d4:d1:19:9e:22:3d:
         24:17:c5:7a:25:58:af:47:59:16:65:bb:ef:21:14:b4:f3:49:
         83:2f:ec:28:c5:30:12:7a:50:3a:9d:00:aa:25:a1:f4:3d:23:
         49:e5:4b:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUduGcyMqshfWalffQdmvTllgo/8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0MTRGOTIxMEExMEU1NzIwRTc1MDMwNjM1NDc4MDUw
RDRDN0M5NzAeFw0yNTAzMDUyMDUxMjNaFw0yNjAzMDQyMDU2MjNaMDMxMTAvBgNV
BAMTKEQ4NDhGOUEzQkIwNERCRkQzRDczNTlDMzIxMzcxQzJDQjM3ODZGREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdwB63DY/b5j0iJEZIjTi+zT0
NVNoq6sVd1MAGOJUFiE9MpgHdz/hTFniZNBfFu2uXm+3oTXE/AlVEzWCXr3B+N45
z8Uv/llDo427usIx3vcnnx3KtOOLsG4j5SKNY3aUJX+8n1knjCfegDXcnHomLQie
UjYhjy2p36B4v0YHS3WM2Oyrjo8ObUf0J9dHjXzhdJNIvnjhmGK6EW1h7ddDvPNY
NSttCyO8UTHDN6RlYKayMUGqqTfHA9T15vDD5BJgUcPApiMUdtehxF0947zhrQ7s
Xv/IC+vDDGnpzFLNp5NldQDX2+AvwH4rkoAecA8by3rV5wn0oOjmDm2ZMr8jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2Ej5o7sE2/09c1nDITccLLN4b90wHwYDVR0j
BBgwFoAUb0FPkhChDlcg51AwY1R4BQ1MfJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC82RjQxNEY5MjEwQTEwRTU3MjBFNzUwMzA2MzU0NzgwNTBENEM3Qzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGNDE0RjkyMTBBMTBFNTcy
MEU3NTAzMDYzNTQ3ODA1MEQ0QzdDOTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzEzMzM4MmUzMTM4MzUyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuVYwDQYJKoZIhvcNAQELBQADggEBADextwY5
P+Cg/JQ0ln1hHek/yGRByE1wXXoy0emwvH6VYGZjO58/Kupw+ijkYxB2RSyg8O0C
1ak5sBZ3tRmS8HZey2dDTwq+/HeAXGlu2FXtY5TZYMuyjqJF+IBBb6Rvi/hSbLbP
YP7g36QJmuyU2PVKtHHv2Zf10IPT/o/vPARONdD86ovhQYu3Er4Q94lCZbPJoaqw
3DdpNoexXjr19kGWaArBfJUSgJwotjYYgJtMXTcXWsgjTJhlDpLBltNGtYfUg6fV
XxWeK8RWZrAF2bKJLtTRGZ4iPSQXxXolWK9HWRZlu+8hFLTzSYMv7CjFMBJ6UDqd
AKolofQ9I0nlS2Y=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:52 2025 by rpki-client