Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33372e302f32342d3234203d3e20323634333434.roa
File:                     3133382e39342e33372e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          p4mPFbdO/53rnN0sR87sL4ZdX2LBj8A7v3WQjqj3oFo=
Subject key identifier:   C8:08:60:DC:2D:34:59:B3:3C:E6:C2:1A:56:15:CB:11:0C:AD:C4:58
Certificate issuer:       /CN=6F414F9210A10E5720E75030635478050D4C7C97
Certificate serial:       15097E7FD5C76CC1DDEEB5F04980ED22387A394C
Authority key identifier: 6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33372e302f32342d3234203d3e20323634333434.roa
Signing time:             Wed 05 Mar 2025 20:56:24 +0000
ROA not before:           Wed 05 Mar 2025 20:51:24 +0000
ROA not after:            Wed 04 Mar 2026 20:56:24 +0000
asID:                     264344
IP address blocks:        138.94.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:09:7e:7f:d5:c7:6c:c1:dd:ee:b5:f0:49:80:ed:22:38:7a:39:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F414F9210A10E5720E75030635478050D4C7C97
        Validity
            Not Before: Mar  5 20:51:24 2025 GMT
            Not After : Mar  4 20:56:24 2026 GMT
        Subject: CN=C80860DC2D3459B33CE6C21A5615CB110CADC458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:12:2d:2e:a9:4a:44:f5:eb:d8:3d:45:5a:
                    c7:92:32:54:37:26:d5:ea:f3:c7:f1:81:ed:de:2d:
                    24:56:ec:0c:ea:37:69:36:8c:ca:3e:c6:43:cc:e9:
                    a7:86:6a:5b:90:bf:20:fe:3a:d5:ac:f3:35:d2:c4:
                    72:30:82:c7:f5:a9:8a:51:d1:76:a0:b9:1a:f1:a6:
                    c5:09:8c:fd:fa:52:96:53:21:02:21:e4:2f:fd:38:
                    ad:11:91:d2:7d:8c:fc:3c:f1:61:73:52:29:5b:34:
                    61:be:a2:51:08:ef:1e:32:fc:58:b3:5c:a5:1a:b1:
                    ec:7e:37:13:24:0d:58:82:b0:52:29:d3:e9:9b:07:
                    1e:ab:cb:01:3a:cd:61:14:ef:f8:db:e8:11:7e:2b:
                    11:2c:5e:1e:2c:8c:a7:f7:4f:f6:c2:d8:ca:fe:e0:
                    57:69:12:8d:ba:25:99:86:71:30:2d:d6:c9:eb:ca:
                    1f:fa:df:03:3d:93:de:8d:bc:07:5b:50:c5:88:b1:
                    6f:30:2d:3f:02:f6:09:5e:e7:d4:60:9a:56:69:cc:
                    19:e5:9f:85:37:7a:44:49:85:f9:ed:cd:77:e7:7d:
                    fa:53:65:fc:11:8c:b2:9d:9d:53:e5:a7:73:97:05:
                    51:ca:b7:07:6c:20:0a:30:2d:10:8f:77:9c:5b:61:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:60:DC:2D:34:59:B3:3C:E6:C2:1A:56:15:CB:11:0C:AD:C4:58
            X509v3 Authority Key Identifier:
                keyid:6F:41:4F:92:10:A1:0E:57:20:E7:50:30:63:54:78:05:0D:4C:7C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/6F414F9210A10E5720E75030635478050D4C7C97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F414F9210A10E5720E75030635478050D4C7C97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33372e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:12:ba:e2:aa:05:a1:0e:df:db:be:26:7e:e2:24:13:3e:
         ff:b7:ec:e9:42:23:d9:e9:26:80:5e:7e:4c:32:da:0b:d7:6a:
         3d:23:1f:6f:2e:bf:23:18:49:c3:e5:23:31:61:05:bc:dc:fa:
         6f:63:f8:82:76:b7:d0:2a:a3:6b:0f:49:46:9d:0a:45:b7:fa:
         7f:a4:2d:87:11:bb:f7:92:63:64:f3:73:64:9b:c9:8a:17:86:
         33:4b:f0:c4:d1:6d:32:25:f3:cd:4c:70:e3:1d:66:e0:bc:d7:
         c4:14:ea:09:e3:3c:a7:f4:e0:67:65:23:68:79:8e:be:ec:ed:
         d2:94:8c:16:8a:63:77:da:a0:da:79:6d:20:2a:ed:f3:5a:63:
         0f:16:f4:bf:87:e8:77:a3:0d:5d:0d:bc:53:6b:9f:6d:5f:76:
         d3:17:69:98:a1:35:5d:fb:fe:54:45:0d:9a:23:4e:a8:25:f0:
         ca:00:10:d2:b1:43:03:74:c4:78:5d:50:5b:e1:55:55:50:41:
         2c:72:75:65:b4:70:34:1d:3f:71:db:65:33:7b:00:79:6b:2a:
         55:ee:52:6d:31:d0:26:96:5e:c1:18:f5:ea:5c:5d:27:57:9d:
         e3:50:38:3b:5b:de:f3:a0:ca:de:8e:ee:02:82:b4:80:22:41:
         12:64:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:03 2025 by rpki-client