Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33362e302f32342d3234203d3e20323634333434.roa
File:                     3133382e39342e33362e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          x9TVHr2ieNnCwCDR9/ca+XZPjcUWbayBlrJZAZ2YroM=
Subject key identifier:   CE:6A:E0:9C:D9:68:0A:56:39:09:FA:8A:BE:A8:B0:FE:6C:A4:8C:E1
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       4F10259ECD8A2E436B3B286E9D09A356937B2F8B
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33362e302f32342d3234203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        138.94.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 21:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:10:25:9e:cd:8a:2e:43:6b:3b:28:6e:9d:09:a3:56:93:7b:2f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=CE6AE09CD9680A563909FA8ABEA8B0FE6CA48CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:55:8b:42:a2:15:56:45:0b:5a:f1:4e:c3:17:
                    c2:0f:47:f3:55:72:24:9e:c9:1e:17:8c:8c:93:c4:
                    14:88:c2:1d:2d:3a:fc:10:a5:cf:82:99:f0:6d:38:
                    c2:1a:3c:5e:06:be:ef:68:f6:5c:f1:a5:3e:e0:ca:
                    ee:46:90:2f:d7:80:1b:f0:f3:0c:e7:b3:ae:d6:36:
                    48:2b:ab:cb:82:f1:b7:a0:17:b9:aa:19:49:6a:7a:
                    2e:96:df:55:e5:d3:78:ec:43:72:a3:a3:2b:7a:4f:
                    8a:12:67:6c:fe:7b:d4:b0:87:fe:a7:eb:0d:fa:e0:
                    bb:b3:d6:ce:6d:d9:93:0a:4f:c0:af:af:8b:19:94:
                    a7:96:7e:d4:e4:7c:7d:b0:aa:88:1f:1b:22:a9:69:
                    0e:bb:40:d4:e8:4a:b5:f7:1b:4e:cb:82:56:8f:aa:
                    ce:63:07:4e:d3:5f:61:ae:e2:ed:a9:2e:e0:54:3c:
                    7d:09:53:0a:fd:98:bf:86:51:df:26:e6:94:f3:d4:
                    da:d3:3e:19:30:b3:e1:78:c2:aa:76:77:ca:b0:17:
                    63:19:41:7d:c0:f3:21:22:4b:2c:d7:d7:aa:aa:7c:
                    49:b0:bf:79:d1:f0:b8:68:45:53:b8:7e:7b:f5:88:
                    aa:93:00:fd:ca:f2:37:ff:b4:83:9b:58:46:21:83:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6A:E0:9C:D9:68:0A:56:39:09:FA:8A:BE:A8:B0:FE:6C:A4:8C:E1
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33362e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:57:09:24:38:fe:1d:9a:df:15:28:b0:c3:6b:78:c4:e7:
         e0:93:f3:bc:2d:94:ba:a6:db:fa:14:71:d9:cd:28:6e:59:30:
         f9:1e:fd:ae:74:f1:dc:53:bd:98:f5:e2:3c:47:15:e7:17:42:
         0b:70:a0:85:24:bd:cb:fe:8e:a2:b0:dd:9c:af:70:dc:4f:b4:
         d0:02:80:63:d1:48:9f:8d:39:3c:57:c6:53:5f:ff:74:8c:76:
         1c:cc:4e:02:41:85:9c:77:e3:f9:5a:d7:e7:87:77:a8:6f:0d:
         10:63:04:fe:95:5f:20:60:0d:57:2c:52:d2:dc:41:04:d6:2e:
         78:f5:81:95:98:d7:f2:fc:96:56:5c:a7:86:68:ee:db:84:d1:
         3e:80:f2:ed:b0:52:55:10:50:f6:54:0f:f1:7c:b3:46:9b:34:
         45:ed:14:39:e9:01:78:59:9a:0e:1d:b6:bd:43:00:b2:19:2a:
         68:35:ce:9c:17:c9:05:2f:46:12:50:a0:82:88:68:ea:50:70:
         12:64:4d:79:6a:e2:c3:dc:f2:c0:9c:6b:2d:f3:0c:8d:f5:cc:
         cd:36:36:94:fc:d2:fd:c5:32:ce:2d:58:6c:6d:6e:9e:e3:23:
         59:eb:f1:7f:e7:ee:c3:74:61:27:3b:f3:a7:31:57:b2:0f:55:
         b9:74:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:32:32 2025 by rpki-client