Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33392e302f32342d3234203d3e20323634333434.roa
File:                     3133382e39342e33392e302f32342d3234203d3e20323634333434.roa (raw, json)
Hash identifier:          Nc7wfQbGJGzTzEqtGWwLju6FLUs4SdaQVs/CJaa2cJs=
Subject key identifier:   CE:B5:21:4D:26:7D:B9:EA:65:DF:15:95:CF:48:30:C5:DC:64:64:0E
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       7EDF6D1E5B6CB643D2DEBC0F348F8374100B9A03
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33392e302f32342d3234203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        138.94.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:df:6d:1e:5b:6c:b6:43:d2:de:bc:0f:34:8f:83:74:10:0b:9a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=CEB5214D267DB9EA65DF1595CF4830C5DC64640E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:ec:35:e8:5c:ad:74:05:44:41:fc:91:fa:
                    34:3e:11:9c:f0:92:3c:24:ee:52:7b:96:86:53:8d:
                    11:eb:b5:9e:2d:a8:c9:a9:55:17:9b:7b:3d:4a:df:
                    1a:03:70:b4:b8:29:f4:08:22:e6:25:e9:ce:dd:43:
                    6d:5b:3d:c4:c8:15:4a:00:d4:d9:2c:75:b4:a1:43:
                    93:25:7b:62:ec:57:8d:3e:fe:37:eb:06:92:1a:26:
                    d5:19:93:51:35:2f:2a:ee:5f:4d:75:a4:10:fa:10:
                    0f:5e:74:db:89:ca:ca:a6:58:d1:15:af:7f:6e:a5:
                    6a:0b:68:27:00:fc:a4:27:e1:3d:3d:f7:7f:ec:07:
                    5d:c7:e0:95:bb:41:4d:ad:e9:ae:a7:ca:a2:91:48:
                    e3:32:85:a0:9c:37:55:6d:4d:22:2f:4d:4f:f5:10:
                    06:ff:96:2b:06:47:4a:8a:ea:73:7e:f0:e3:63:d1:
                    0e:af:7c:d0:31:12:f1:f1:cb:cf:35:ee:f4:1e:8d:
                    ab:62:13:b3:ea:b2:ca:06:77:0c:cb:9f:40:53:98:
                    a4:9f:b9:35:80:9c:d2:ee:d2:b6:36:6c:4f:53:d9:
                    6c:47:07:6b:8c:87:81:13:e6:e2:58:d5:76:94:3b:
                    a6:59:e9:27:64:48:49:71:df:cb:46:35:ab:c8:03:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B5:21:4D:26:7D:B9:EA:65:DF:15:95:CF:48:30:C5:DC:64:64:0E
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/3133382e39342e33392e302f32342d3234203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:18:5d:70:55:70:53:6a:4f:7a:ea:bb:02:c3:e8:21:bd:
         17:3c:d2:07:33:05:63:f0:57:03:c3:71:f3:1f:b0:ab:ec:d2:
         16:60:1c:56:b6:10:e5:9e:76:36:77:ec:f2:9d:a3:81:f8:bb:
         68:54:eb:41:ed:a4:b0:48:01:42:0f:5c:ef:5b:6b:cb:79:a0:
         14:aa:03:e4:d0:30:8d:3c:40:9b:42:20:7e:05:a6:60:2b:8e:
         95:1b:09:e5:1c:92:2d:0c:11:ce:8f:8b:e2:66:3d:b6:a1:90:
         a2:73:97:0a:2e:6c:7a:33:2c:f7:24:9e:90:20:c7:6e:64:23:
         9c:65:c3:f7:1e:c0:b8:ec:13:21:c1:45:43:09:00:ca:90:51:
         3d:a2:1a:39:93:6b:2c:00:9e:87:d6:4e:a9:d1:54:f2:2b:68:
         85:50:5b:c4:27:ae:59:e0:04:66:49:d3:50:38:b2:fd:11:b5:
         59:8b:fb:7d:3e:d8:d4:e0:5f:08:6d:59:12:ed:51:b0:fd:bc:
         8b:94:56:d3:fb:a1:59:6e:19:56:ce:0e:c2:7f:e7:43:2a:34:
         42:dc:53:f5:b7:f5:e6:58:a5:14:fe:59:aa:19:f6:11:34:4f:
         1a:f2:9f:64:6d:bc:88:8c:e5:cc:d7:b3:b8:42:d2:6e:96:c1:
         87:78:e7:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUft9tHltstkPS3rwPNI+DdBALmgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyRjIzMjkzNzhBMTU4MzBDMTUwQzAzMTk0M0RBQTA0
NzNGRUE0MjAeFw0yNTA2MDMxNjUwMzFaFw0yNjA2MDIxNjU1MzFaMDMxMTAvBgNV
BAMTKENFQjUyMTREMjY3REI5RUE2NURGMTU5NUNGNDgzMEM1REM2NDY0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVew16FytdAVEQfyR+jQ+EZzw
kjwk7lJ7loZTjRHrtZ4tqMmpVRebez1K3xoDcLS4KfQIIuYl6c7dQ21bPcTIFUoA
1NksdbShQ5Mle2LsV40+/jfrBpIaJtUZk1E1LyruX011pBD6EA9edNuJysqmWNEV
r39upWoLaCcA/KQn4T0993/sB13H4JW7QU2t6a6nyqKRSOMyhaCcN1VtTSIvTU/1
EAb/lisGR0qK6nN+8ONj0Q6vfNAxEvHxy8817vQejatiE7PqssoGdwzLn0BTmKSf
uTWAnNLu0rY2bE9T2WxHB2uMh4ET5uJY1XaUO6ZZ6SdkSElx38tGNavIA4/tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzrUhTSZ9uepl3xWVz0gwxdxkZA4wHwYDVR0j
BBgwFoAUDC8jKTeKFYMMFQwDGUPaoEc/6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC8wQzJGMjMyOTM3OEExNTgzMEMxNTBDMDMxOTQzREFBMDQ3M0ZFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMkYyMzI5Mzc4QTE1ODMw
QzE1MEMwMzE5NDNEQUEwNDczRkVBNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzEzMzM4MmUzOTM0MmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAil4nMA0GCSqGSIb3DQEBCwUAA4IBAQAboRhdcFVw
U2pPeuq7AsPoIb0XPNIHMwVj8FcDw3HzH7Cr7NIWYBxWthDlnnY2d+zynaOB+Lto
VOtB7aSwSAFCD1zvW2vLeaAUqgPk0DCNPECbQiB+BaZgK46VGwnlHJItDBHOj4vi
Zj22oZCic5cKLmx6Myz3JJ6QIMduZCOcZcP3HsC47BMhwUVDCQDKkFE9oho5k2ss
AJ6H1k6p0VTyK2iFUFvEJ65Z4ARmSdNQOLL9EbVZi/t9PtjU4F8IbVkS7VGw/byL
lFbT+6FZbhlWzg7Cf+dDKjRC3FP1t/XmWKUU/lmqGfYRNE8a8p9kbbyIjOXM17O4
QtJulsGHeOcb
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:52 2025 by rpki-client