Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa
File:                     3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa (raw, json)
Hash identifier:          UNB/N3L9Li6TtTrbw9Wc1ZdD8rAEUCLZDlRxiBmP7r4=
Subject key identifier:   85:E3:C2:DB:C0:93:F2:E8:87:18:E6:A0:9D:55:FA:06:8F:53:39:49
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       40719B6CC3929089387D740B947993B82EAAC5A0
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:55 +0000
ROA not before:           Wed 07 May 2025 20:54:55 +0000
ROA not after:            Wed 06 May 2026 20:59:55 +0000
asID:                     264397
IP address blocks:        170.239.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:71:9b:6c:c3:92:90:89:38:7d:74:0b:94:79:93:b8:2e:aa:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:55 2025 GMT
            Not After : May  6 20:59:55 2026 GMT
        Subject: CN=85E3C2DBC093F2E88718E6A09D55FA068F533949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:2a:1b:73:1d:88:41:d3:ef:e2:40:8c:85:
                    17:86:da:d0:eb:a8:e7:f6:9f:ee:ca:7e:97:f6:60:
                    a6:f3:8b:59:60:b9:56:e9:0f:c6:14:9e:ed:ad:24:
                    e9:91:2b:a7:e9:0c:a8:8b:fe:be:7f:b2:86:46:d6:
                    a8:2e:0b:f3:c6:03:c7:6d:83:cc:e1:03:f8:bd:d9:
                    8e:90:77:3f:60:62:e9:9f:88:30:c0:65:51:d8:74:
                    4e:0d:c4:ad:17:6b:15:4f:50:54:57:2e:79:0d:6b:
                    44:37:ab:41:af:c7:29:29:7c:eb:f5:8d:66:16:9b:
                    47:c6:c0:ee:dd:14:df:70:1e:2c:0a:69:41:f6:de:
                    ac:76:4a:af:92:8c:f8:1e:8e:a4:cd:92:f5:cb:95:
                    5f:48:a0:42:58:c7:0a:06:32:e2:50:df:c3:cc:df:
                    ab:1a:9a:35:c6:dd:eb:fb:68:7f:35:ac:2e:ab:68:
                    28:15:54:94:01:e1:51:2e:1a:f5:64:3a:a3:f8:78:
                    c4:5d:b0:b7:da:80:52:94:0b:e9:01:1e:ff:0d:c8:
                    f6:c5:e0:9c:1a:77:cc:30:dd:62:dd:c5:f5:e6:2d:
                    8f:99:7e:81:72:56:28:c7:10:42:0b:41:e4:fa:38:
                    04:c8:55:74:bb:de:7a:68:31:1d:03:19:ed:bf:9e:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E3:C2:DB:C0:93:F2:E8:87:18:E6:A0:9D:55:FA:06:8F:53:39:49
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3137302e3233392e39362e302f32332d3233203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:27:f7:c1:49:6b:53:2b:ed:f5:39:46:4f:6a:88:94:76:e2:
         5c:da:86:fc:8e:ab:c0:0b:d5:00:92:3a:f4:61:0e:7a:05:d6:
         34:0c:7c:89:5e:71:0a:5d:47:fd:56:6d:9d:0d:92:7f:3c:0b:
         b1:92:7c:f5:db:15:77:14:8e:e5:65:2b:15:70:ab:58:3f:96:
         16:e5:a6:64:e2:b8:80:75:1a:d3:33:bd:f7:b1:18:14:cf:9b:
         8f:69:da:27:48:47:33:db:31:ec:7a:95:f7:f5:7f:ea:d1:d0:
         81:46:eb:3c:43:8d:90:63:79:ca:2a:e7:82:27:c1:76:c6:cf:
         1b:08:d7:61:25:5c:a5:b6:f5:99:8c:39:a2:bb:51:94:59:fb:
         fa:d8:5d:fc:32:ff:22:38:26:b7:d4:fd:3a:d5:36:1d:7b:ec:
         56:ad:d0:54:3d:4b:0e:4f:24:f2:c7:97:eb:fd:87:b2:ed:9b:
         51:c8:94:5d:2a:db:02:be:a9:5a:65:fe:77:7a:4e:38:06:fc:
         41:1e:25:a9:2a:9d:ed:73:92:fa:f4:15:9c:fa:b0:45:26:11:
         1d:24:1b:83:4a:b6:fd:ff:5f:30:ec:24:0c:91:79:e7:95:14:
         22:70:48:99:ad:70:b5:16:fa:e2:e6:11:39:57:f4:6c:6a:dd:
         ab:81:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:07 2025 by rpki-client