Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa
File:                     3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          /p1u6y5T2TJZH4cnlAUtUg8vcugZGhIp8dED0hk5dKU=
Subject key identifier:   64:3F:11:72:E7:A6:E6:F0:26:73:11:78:83:68:27:A3:62:BD:44:F1
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       1EF924FFEE84D217C3EFD3FA9A3B46A88A70B9C3
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:33 +0000
ROA not before:           Tue 03 Jun 2025 16:50:33 +0000
ROA not after:            Tue 02 Jun 2026 16:55:33 +0000
asID:                     264344
IP address blocks:        138.185.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 22:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f9:24:ff:ee:84:d2:17:c3:ef:d3:fa:9a:3b:46:a8:8a:70:b9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:33 2025 GMT
            Not After : Jun  2 16:55:33 2026 GMT
        Subject: CN=643F1172E7A6E6F026731178836827A362BD44F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:68:c4:a2:82:e8:65:8f:10:57:c9:af:9c:
                    7f:69:7e:ea:a1:c7:f0:7d:7c:b8:d0:e2:e0:c2:de:
                    ee:cb:a2:bc:05:45:c4:c3:b2:3c:54:e2:74:31:2f:
                    4e:be:44:94:bb:d3:db:55:92:dd:4d:41:17:4b:5a:
                    72:6b:fc:93:e0:0d:06:a2:f4:c0:a3:46:d7:0b:b8:
                    1e:84:65:42:90:01:e0:4b:34:2d:e4:26:af:a6:97:
                    11:f0:f3:2d:64:c4:b9:f3:05:48:86:84:7a:16:8c:
                    2d:45:57:55:70:d3:ef:65:fa:e8:97:4b:1c:54:4f:
                    00:c5:78:9f:fb:14:88:e0:1a:6c:46:f3:21:ea:3d:
                    d7:13:7f:44:0d:91:0d:37:ac:b9:c4:b4:71:5b:9c:
                    82:74:f7:05:3e:2f:d3:99:ad:9e:ef:c9:5e:63:12:
                    f6:83:3e:39:0f:ca:5e:4d:08:4a:22:8c:ee:d5:06:
                    08:33:3b:39:da:68:94:07:d4:6a:d0:4d:f3:18:96:
                    2e:08:04:82:53:bd:76:21:40:cc:2e:7f:d5:42:5e:
                    0b:6e:47:7b:a6:dd:fb:ce:2a:b1:22:0e:ac:c2:15:
                    be:84:83:58:72:d4:f9:b2:f0:63:3d:21:86:4b:56:
                    27:7d:5e:20:2b:d8:48:96:8a:54:64:e1:37:29:6a:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3F:11:72:E7:A6:E6:F0:26:73:11:78:83:68:27:A3:62:BD:44:F1
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e3138352e38372e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:44:4a:68:23:50:34:83:f0:02:8b:91:44:19:51:ca:03:
         67:e9:58:f7:e1:01:7f:f0:2f:9f:1b:17:eb:fb:e6:3b:cd:0c:
         2e:a2:27:dd:80:dd:c4:e8:41:91:bd:b3:80:a7:bd:fa:b6:5e:
         2a:f7:de:01:9b:ab:a5:90:d4:f3:e7:dd:40:10:da:d9:60:96:
         23:ce:c6:23:48:43:49:8d:70:3b:97:b9:bf:f1:cd:1b:b5:6b:
         1f:f9:a3:c6:61:11:6c:ba:19:aa:71:8b:09:48:b4:3b:6c:1b:
         b5:93:8c:99:42:52:f3:9c:61:03:b5:f5:b0:57:97:fc:90:da:
         f8:d4:96:24:74:f1:8c:ab:bc:12:2e:45:ef:c9:29:96:bd:62:
         0c:0b:d0:47:de:3b:4a:6c:77:f9:f6:45:b0:77:40:6d:7b:33:
         6f:ec:09:25:37:4e:b5:c5:d5:1f:3a:c9:8d:f6:a9:9e:dc:1b:
         a4:4f:b2:ec:90:27:90:3c:20:20:31:04:84:be:0f:a9:de:e6:
         08:05:b0:f2:ee:a9:91:3f:7d:e2:55:01:c3:6d:25:8a:bf:22:
         f7:24:5d:a2:fb:e8:ae:c8:c1:d3:d9:a4:07:ae:f4:f7:2c:28:
         48:3f:13:a3:dd:f9:12:bc:86:4c:c3:68:4d:b8:2e:fc:0d:e2:
         95:ea:31:e1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHvkk/+6E0hfD79P6mjtGqIpwucMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyRjIzMjkzNzhBMTU4MzBDMTUwQzAzMTk0M0RBQTA0
NzNGRUE0MjAeFw0yNTA2MDMxNjUwMzNaFw0yNjA2MDIxNjU1MzNaMDMxMTAvBgNV
BAMTKDY0M0YxMTcyRTdBNkU2RjAyNjczMTE3ODgzNjgyN0EzNjJCRDQ0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFD2jEooLoZY8QV8mvnH9pfuqh
x/B9fLjQ4uDC3u7LorwFRcTDsjxU4nQxL06+RJS709tVkt1NQRdLWnJr/JPgDQai
9MCjRtcLuB6EZUKQAeBLNC3kJq+mlxHw8y1kxLnzBUiGhHoWjC1FV1Vw0+9l+uiX
SxxUTwDFeJ/7FIjgGmxG8yHqPdcTf0QNkQ03rLnEtHFbnIJ09wU+L9OZrZ7vyV5j
EvaDPjkPyl5NCEoijO7VBggzOznaaJQH1GrQTfMYli4IBIJTvXYhQMwuf9VCXgtu
R3um3fvOKrEiDqzCFb6Eg1hy1Pmy8GM9IYZLVid9XiAr2EiWilRk4TcparWnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZD8Rcuem5vAmcxF4g2gno2K9RPEwHwYDVR0j
BBgwFoAUDC8jKTeKFYMMFQwDGUPaoEc/6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC8wQzJGMjMyOTM3OEExNTgzMEMxNTBDMDMxOTQzREFBMDQ3M0ZFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMkYyMzI5Mzc4QTE1ODMw
QzE1MEMwMzE5NDNEQUEwNDczRkVBNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzEzMzM4MmUzMTM4MzUyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuVcwDQYJKoZIhvcNAQELBQADggEBADelREpo
I1A0g/ACi5FEGVHKA2fpWPfhAX/wL58bF+v75jvNDC6iJ92A3cToQZG9s4Cnvfq2
Xir33gGbq6WQ1PPn3UAQ2tlgliPOxiNIQ0mNcDuXub/xzRu1ax/5o8ZhEWy6Gapx
iwlItDtsG7WTjJlCUvOcYQO19bBXl/yQ2vjUliR08YyrvBIuRe/JKZa9YgwL0Efe
O0psd/n2RbB3QG17M2/sCSU3TrXF1R86yY32qZ7cG6RPsuyQJ5A8ICAxBIS+D6ne
5ggFsPLuqZE/feJVAcNtJYq/IvckXaL76K7IwdPZpAeu9PcsKEg/E6Pd+RK8hkzD
aE24LvwN4pXqMeE=
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:06:27 2025 by rpki-client