Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa
File:                     3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa (raw, json)
Hash identifier:          3U3A2bnqLZWg21eH4IjsX3Oiqc2kKRW/h9AsXFF20ws=
Subject key identifier:   7E:93:82:41:CF:D1:FD:CD:5F:4D:18:D7:81:AB:27:17:EF:AD:5F:0A
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       1BAAA5E7F7A101D42F49B4EA3394CE36F40A723D
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:56 +0000
ROA not before:           Wed 07 May 2025 20:54:56 +0000
ROA not after:            Wed 06 May 2026 20:59:56 +0000
asID:                     264397
IP address blocks:        164.163.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 00:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:aa:a5:e7:f7:a1:01:d4:2f:49:b4:ea:33:94:ce:36:f4:0a:72:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:56 2025 GMT
            Not After : May  6 20:59:56 2026 GMT
        Subject: CN=7E938241CFD1FDCD5F4D18D781AB2717EFAD5F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:12:62:97:aa:7a:fa:f0:9c:55:5a:50:06:
                    4f:0e:c6:e3:93:0f:71:72:39:91:15:bc:f5:c8:34:
                    6b:2e:45:17:24:3a:da:92:db:a8:77:37:f1:1d:91:
                    91:ba:17:40:93:58:56:a6:d7:ac:60:d7:ac:c0:98:
                    13:ba:9d:ce:85:01:b4:48:6d:6a:2b:57:78:96:db:
                    9a:e2:cf:0d:43:9f:0d:aa:57:aa:c5:93:cb:41:c2:
                    c5:82:97:99:32:ff:2b:4d:49:44:21:7c:b9:a0:c8:
                    95:9e:9f:53:0b:58:04:83:8a:e2:36:ac:47:c7:c1:
                    e9:76:ea:45:ac:8e:e0:fd:6a:0b:de:1f:75:d0:b2:
                    c6:22:2e:bb:09:2b:28:a5:e3:2e:3d:80:97:3d:0a:
                    7d:3d:fc:09:b5:96:90:9e:e5:d8:02:af:5a:c6:c2:
                    02:e6:fa:f4:9e:78:d8:49:ed:bd:39:4e:cc:b9:f0:
                    db:e0:b1:84:4b:b9:25:89:4b:b5:c4:23:a9:09:1c:
                    23:09:d7:34:9f:a0:f7:a9:8f:f4:18:1f:e6:9f:84:
                    ea:7f:cc:02:bc:01:2a:2d:7c:26:d8:4b:24:53:da:
                    e0:6a:b1:56:e7:a4:41:aa:da:d3:c4:e4:2d:ea:a8:
                    19:67:90:05:a6:70:55:f3:a0:d2:57:a8:d2:a8:63:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:82:41:CF:D1:FD:CD:5F:4D:18:D7:81:AB:27:17:EF:AD:5F:0A
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3232203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:60:c9:fa:d6:1c:7d:1e:d1:d2:9b:51:e2:22:62:08:b1:66:
         8f:1c:e0:0b:6d:90:12:75:aa:26:58:f3:66:32:2e:8e:21:c8:
         65:99:4c:fe:af:f4:3a:d7:2e:c2:4e:8e:9f:c9:7f:a6:28:e0:
         19:0c:8a:53:88:ef:63:cc:d1:64:00:ef:ee:01:17:b9:60:9d:
         91:c5:5a:fe:60:28:62:cf:01:02:29:c6:53:bd:6c:28:5c:ae:
         88:22:24:88:77:b6:c0:77:e9:f9:16:b0:c6:b5:9d:02:3a:3d:
         a6:45:28:99:8c:de:64:73:c1:ee:55:43:d4:d8:1a:f2:16:5b:
         79:5a:cc:8b:7c:34:c2:02:b1:2a:81:b3:1c:25:23:6c:2b:39:
         c6:84:cb:5f:11:a8:23:94:55:4c:ac:3b:1e:8e:90:88:c3:c8:
         f8:c3:01:23:36:cd:f6:14:50:87:a5:10:d6:59:d4:d5:63:a5:
         9c:4c:6a:25:a4:81:24:34:8c:ec:57:d7:4c:84:3f:f6:83:c7:
         29:b1:9e:22:2a:e0:35:0b:41:13:e4:8e:d4:5e:bf:c1:34:a2:
         64:8a:9f:25:dd:6e:f3:4e:32:b5:b2:16:e5:fb:cc:36:75:14:
         83:b1:22:05:5e:e3:06:ed:27:9a:5f:5e:f2:a4:bd:69:22:0b:
         c7:62:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:30:35 2025 by rpki-client