Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa
File:                     3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          dxZuzVbTboVlOfx3KapIRRytESKfxztAYYUmYmGC6WE=
Subject key identifier:   D2:97:0E:19:7F:7A:35:EB:AB:8D:FD:68:47:DA:1E:F7:93:98:F9:D4
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       333859C6F0C55412BDCD85BEF0D55F46A8F84F39
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:57 +0000
ROA not before:           Wed 07 May 2025 20:54:57 +0000
ROA not after:            Wed 06 May 2026 20:59:57 +0000
asID:                     264397
IP address blocks:        164.163.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 00:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:38:59:c6:f0:c5:54:12:bd:cd:85:be:f0:d5:5f:46:a8:f8:4f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:57 2025 GMT
            Not After : May  6 20:59:57 2026 GMT
        Subject: CN=D2970E197F7A35EBAB8DFD6847DA1EF79398F9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:a9:fc:a3:48:56:71:e3:c5:11:68:77:9f:
                    37:95:d6:fc:d3:9e:3a:8e:95:99:ea:21:39:c1:85:
                    c4:a3:e3:94:23:92:f1:fa:6a:9e:e5:7e:ac:3d:41:
                    be:2f:6c:cc:7c:68:17:89:c4:48:8d:a2:80:26:ba:
                    1f:6d:52:89:b1:47:ab:37:61:5d:72:8c:56:d2:46:
                    c9:e8:c3:4a:4b:39:63:06:f5:da:f9:ac:7d:74:08:
                    53:ad:2f:4d:e0:99:4c:40:59:17:b0:b2:41:04:ea:
                    64:9c:86:4b:22:2f:64:77:65:91:5a:9b:56:da:92:
                    27:94:33:a8:9c:79:01:86:72:2a:94:45:24:cf:5c:
                    5b:32:df:b8:43:cc:8f:8e:c7:5f:de:fc:dd:69:94:
                    a2:c1:10:16:37:2f:cd:67:9b:b0:d2:c5:80:f2:68:
                    4d:46:b2:cd:c6:8a:a9:1b:fa:c3:af:80:df:df:b1:
                    a6:02:ec:88:ab:9f:91:be:48:8b:4c:5e:e2:e5:c2:
                    da:a6:2f:dd:1f:3b:e5:f6:a2:64:3e:fc:e8:4d:62:
                    23:e8:3d:56:22:de:8a:02:bd:95:0f:df:28:f1:5f:
                    55:ca:39:4b:ac:0d:3c:5c:22:24:de:9e:55:73:1b:
                    8a:ed:ec:8d:4c:da:17:f1:1f:2b:e1:a8:5e:34:ba:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:97:0E:19:7F:7A:35:EB:AB:8D:FD:68:47:DA:1E:F7:93:98:F9:D4
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:a9:24:0c:bc:48:a4:b9:be:26:37:37:b7:7f:dd:28:a6:
         56:e5:09:7d:c3:1e:b0:54:5e:fc:55:77:b0:e7:f5:df:38:1d:
         90:b8:05:d6:61:44:8f:23:a1:b4:8b:4f:33:4f:d1:09:7f:17:
         17:e5:09:d7:8a:f6:53:bf:04:18:41:79:2b:d8:86:cc:b2:f2:
         33:99:8c:8d:2b:37:23:3e:df:70:b6:19:04:82:21:66:ae:61:
         61:b5:b9:b8:1a:0d:92:2d:98:b5:28:5d:ac:14:46:a8:7c:11:
         7d:2f:25:52:84:34:12:a8:bc:dd:8a:8d:38:34:d1:8b:31:ae:
         a1:37:33:aa:0f:6b:f2:cb:ac:58:57:db:b3:0c:4e:1b:ce:c6:
         11:55:5e:f5:76:9d:fb:0b:8b:38:ff:21:54:29:b4:7f:55:f6:
         71:a7:e3:30:b0:16:ba:76:6a:dd:2b:85:3f:02:fb:5e:bd:b1:
         73:e3:03:58:c8:e4:21:9f:9d:c1:d6:21:c0:34:52:09:b6:3f:
         73:f7:dd:1b:7c:6f:51:70:65:2a:4a:8e:fa:8a:c1:61:4c:f8:
         c3:58:0c:f4:4d:f1:08:b7:6f:1f:76:aa:e4:e8:a1:08:c2:2b:
         da:f1:08:66:41:ad:3b:4a:ea:ea:70:af:47:14:23:2c:0f:ec:
         b4:e5:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:31:07 2025 by rpki-client