Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32332d3233203d3e20323634333937.roa
File:                     3133312e3136312e39322e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          yTYFu/Yw7x/SWMHxOTGYAtHe9/MsghTCWpvkU0imxDk=
Subject key identifier:   06:11:F2:2E:D4:27:79:B2:C6:3D:4C:B3:45:51:1A:6E:F3:0B:6B:67
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       76E7C9E5F5D2EAD1A59CC5DA4AA91E9B94621DD1
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32332d3233203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:56 +0000
ROA not before:           Wed 07 May 2025 20:54:56 +0000
ROA not after:            Wed 06 May 2026 20:59:56 +0000
asID:                     264397
IP address blocks:        131.161.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e7:c9:e5:f5:d2:ea:d1:a5:9c:c5:da:4a:a9:1e:9b:94:62:1d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:56 2025 GMT
            Not After : May  6 20:59:56 2026 GMT
        Subject: CN=0611F22ED42779B2C63D4CB345511A6EF30B6B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:81:c1:50:86:fc:6a:bc:b7:f3:09:37:7b:0d:
                    df:f0:5b:89:63:7b:67:08:12:df:02:fd:76:72:a2:
                    cd:4a:0e:2e:4e:08:66:e3:98:f2:8e:be:d6:3a:fe:
                    b6:f2:fb:cb:0d:57:72:7a:5c:60:25:30:1d:88:fa:
                    be:5f:39:6b:23:a7:ca:5f:40:76:be:cb:34:57:4f:
                    17:b7:b7:96:78:34:fe:d6:f2:8f:d9:e1:e8:4e:2f:
                    1b:ac:01:72:12:c9:28:be:6b:c5:61:fc:8b:20:67:
                    0f:e1:48:69:43:d8:71:c0:9c:d9:c2:9a:42:77:71:
                    49:56:3b:c4:f1:5b:dc:5d:91:ac:c9:70:84:74:15:
                    67:bd:60:3d:9f:4c:fa:59:a1:55:b5:88:ca:c5:84:
                    10:9f:90:47:1c:da:e3:2e:df:01:35:dc:f8:f9:63:
                    e1:3a:b9:b3:e0:b6:c8:e1:68:0c:d6:3b:c8:4d:10:
                    d3:1e:df:e0:3f:1a:eb:40:e5:bd:80:e1:03:62:12:
                    d3:b1:40:bf:de:d2:35:82:0c:4c:49:82:8d:6e:ae:
                    60:b1:86:8c:e5:65:92:31:e2:43:3c:dd:ac:86:58:
                    a8:cb:4a:63:ec:ab:e7:9d:36:c9:2e:94:9d:f5:27:
                    30:42:70:d7:e7:4b:ec:ef:d8:22:71:9d:d7:32:c7:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:F2:2E:D4:27:79:B2:C6:3D:4C:B3:45:51:1A:6E:F3:0B:6B:67
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39322e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:f3:2c:8d:de:fa:e2:a1:27:d4:7d:cd:0e:b0:7c:5b:1a:
         51:fc:d3:fc:96:d5:5a:9a:e0:ed:d3:e1:6b:27:19:16:36:c5:
         c0:cc:52:38:dc:7d:9d:6b:20:5d:e3:ae:e0:4a:8c:96:a7:ce:
         09:6e:4f:4e:ce:06:39:2f:11:6c:cb:3b:04:74:5a:46:0f:86:
         30:6e:65:81:61:a3:a3:22:33:75:c8:a8:c7:1e:08:dc:47:76:
         58:b0:4e:3a:14:15:41:b9:69:e9:73:26:50:03:8c:fc:43:f0:
         4f:52:79:b1:d0:e9:b8:78:6d:ba:fc:35:98:08:8d:3a:fc:ea:
         84:b1:30:7e:ee:7e:c8:41:f5:a6:d0:db:7a:b2:f6:6f:cc:47:
         72:61:8c:08:be:e3:85:5f:12:7b:ee:92:0e:c2:25:01:fa:27:
         74:eb:d5:d9:ae:1d:1e:4f:0b:24:91:d8:00:7a:07:b5:fa:ca:
         a7:69:dc:b5:80:0f:0d:a3:92:f6:70:2a:65:29:a6:71:93:96:
         03:37:a2:b1:e8:05:b7:65:24:c0:5a:23:57:9e:19:59:29:b3:
         e5:d4:b1:a9:e5:65:ab:05:30:8f:ac:51:39:1e:d2:f4:7c:c8:
         61:0f:41:d8:d7:99:28:f7:cf:23:e4:c1:d7:7a:0b:7e:05:9f:
         a9:b1:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:24 2025 by rpki-client