Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa
File:                     3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          HARFrWbLUF4floYfCCHuA+NpBJFjXbVdW800+mxtwWQ=
Subject key identifier:   BE:F8:B8:7F:B5:47:CE:2A:0C:BF:BA:E8:EE:77:66:A3:A0:6D:99:56
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       1BE321456C59873359587013E1C85313533AD6AC
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:56 +0000
ROA not before:           Wed 07 May 2025 20:54:56 +0000
ROA not after:            Wed 06 May 2026 20:59:56 +0000
asID:                     264397
IP address blocks:        131.161.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:21:45:6c:59:87:33:59:58:70:13:e1:c8:53:13:53:3a:d6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:56 2025 GMT
            Not After : May  6 20:59:56 2026 GMT
        Subject: CN=BEF8B87FB547CE2A0CBFBAE8EE7766A3A06D9956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:16:76:d4:69:65:b0:b8:a1:c9:ec:28:82:
                    84:b3:47:75:ae:c4:54:97:bb:8e:6e:7d:c0:6c:bf:
                    94:e3:f8:32:8c:8c:3f:34:5e:29:5b:48:7b:96:da:
                    45:54:10:7a:ec:d5:f5:7b:54:70:89:e7:8b:bf:f3:
                    fd:e1:c4:07:d0:57:ce:7b:f0:0a:ff:60:75:da:9b:
                    57:ea:b6:d4:ad:b4:b6:3b:ea:17:75:a0:0b:88:a6:
                    b2:b7:61:dc:4b:cd:c6:7a:50:5d:04:15:57:49:29:
                    78:9a:2d:5a:4b:20:05:7d:7f:b7:e1:9d:64:0a:04:
                    b7:02:8d:2f:0f:04:f1:9f:a2:55:2a:69:3c:b0:d4:
                    38:dd:01:6a:d2:60:43:59:79:84:09:36:cd:36:11:
                    e2:a3:75:db:d1:91:83:97:17:36:4e:ae:73:80:f6:
                    38:d6:c9:2d:c9:8c:02:ef:36:c6:93:6f:b8:67:4e:
                    1f:63:47:b2:8c:6f:74:75:c8:71:9b:80:58:6d:23:
                    87:67:fb:c7:e1:a5:3b:de:9a:39:c4:9a:fa:7f:5f:
                    29:58:e3:e9:43:69:73:43:ec:a8:58:1d:e2:2f:fe:
                    83:4c:34:0e:c0:11:a1:66:d7:f2:37:65:f0:75:2b:
                    b4:98:94:1d:2b:59:96:7c:83:01:09:db:6f:d1:9d:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:B8:7F:B5:47:CE:2A:0C:BF:BA:E8:EE:77:66:A3:A0:6D:99:56
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3133312e3136312e39342e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:d8:c8:b0:c7:5b:f2:0d:be:23:3c:f9:ba:ec:6f:e4:2e:
         8f:37:68:a5:eb:d2:7a:09:ad:a0:94:f3:1b:0f:4f:24:d9:8a:
         36:24:ac:c1:68:65:96:33:54:54:fd:50:11:56:f2:66:51:b8:
         02:1e:f4:2a:11:3a:bf:a4:94:1f:89:35:b8:2d:db:19:a3:cd:
         c0:b4:3e:88:e0:ad:3f:3d:00:f1:50:d3:d5:9f:6f:ea:b2:f0:
         ad:cf:ad:29:bf:20:10:fe:22:ba:26:a4:e4:3b:3a:51:a2:a6:
         a4:9c:d6:90:6d:02:55:3d:e4:29:66:a1:14:bf:fd:df:b5:f1:
         11:74:9a:e7:e4:d3:c9:4c:00:ec:3e:c9:2b:91:f1:33:33:70:
         a7:4d:27:02:91:25:15:4e:9d:07:89:bb:d0:ec:7a:cf:b1:c8:
         0f:64:d5:35:c6:f9:d4:c7:94:0a:ff:5a:c0:d4:da:7a:39:61:
         f4:a5:01:ff:3e:b3:58:6d:b6:67:9b:85:68:8c:4e:24:fa:2c:
         83:33:74:2b:56:de:3c:22:b4:6d:bb:dd:15:a3:db:b1:99:c5:
         28:53:fa:0e:0e:91:e8:17:22:bb:8c:48:99:30:10:a7:1c:59:
         a0:e6:8c:72:b9:fd:83:50:19:29:5e:8d:58:a5:87:89:7e:3e:
         8a:02:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:55:30 2025 by rpki-client