Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa
File:                     323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa (raw, json)
Hash identifier:          ubK9AE2qmY8rdmSxWNQ58+3M5JAmnWtrOpLBnx2AhwY=
Subject key identifier:   CF:09:45:7E:E0:28:4D:D7:09:96:07:9E:AE:63:0C:FB:20:B5:B4:62
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       4676501AC82AF13E7679B9537B38482A98454975
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:56 +0000
ROA not before:           Wed 07 May 2025 20:54:56 +0000
ROA not after:            Wed 06 May 2026 20:59:56 +0000
asID:                     264397
IP address blocks:        2804:1dd4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:76:50:1a:c8:2a:f1:3e:76:79:b9:53:7b:38:48:2a:98:45:49:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:56 2025 GMT
            Not After : May  6 20:59:56 2026 GMT
        Subject: CN=CF09457EE0284DD70996079EAE630CFB20B5B462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:7e:19:5e:0a:67:9a:1e:aa:f0:61:45:67:
                    1c:b4:cd:af:ee:8f:bc:4a:96:23:24:64:42:06:bd:
                    53:cc:a6:08:17:32:70:00:f4:a3:54:b0:2f:d7:f9:
                    83:c2:72:96:1b:c7:eb:de:50:e2:20:21:c3:58:01:
                    ce:81:bd:96:4c:63:ce:86:a5:30:fc:f3:a9:12:d1:
                    e1:ed:0e:2c:79:ab:e4:90:d2:2e:5b:c2:7e:0b:b8:
                    d9:dd:3f:09:d6:05:5e:63:09:25:b2:78:f3:a9:c9:
                    e5:c8:ca:69:7f:c6:9a:8f:12:d2:8d:4a:11:3a:51:
                    ed:53:c0:41:cb:58:d7:20:8d:06:ba:f8:27:ad:58:
                    95:60:b3:9e:16:5a:3a:68:e3:8b:0b:e8:50:83:47:
                    74:5a:d8:b8:07:00:e2:9a:e9:80:9b:93:16:d6:a6:
                    7f:bb:a1:2f:a9:df:91:85:ce:87:73:f8:5f:5c:65:
                    f4:1e:45:33:2d:40:32:e9:32:46:cf:cf:81:6b:f3:
                    6e:c7:7a:9a:71:82:9e:49:35:95:e1:15:08:50:b3:
                    c5:39:24:b0:70:68:76:ca:9f:a2:de:b1:ac:80:9d:
                    6f:a6:24:04:bd:7a:0d:96:59:f6:a4:df:3c:6e:31:
                    c2:9d:cc:65:6d:58:db:09:5a:74:44:26:0f:96:e5:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:45:7E:E0:28:4D:D7:09:96:07:9E:AE:63:0C:FB:20:B5:B4:62
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a343030303a3a2f33342d3334203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c4:72:dc:25:a5:12:53:e9:ba:a5:25:eb:8c:74:2a:5c:1d:29:
         7d:0f:0d:8e:cd:41:1e:13:49:88:1e:c4:93:5d:f6:6c:e5:5a:
         44:62:fa:9a:7e:a9:d6:d9:65:c6:f3:b4:cd:5e:cb:9c:d3:f6:
         5c:5b:91:0d:cc:b5:96:20:eb:b7:1b:fe:ff:7f:29:d3:ea:6c:
         b5:3f:e8:eb:1a:8a:4c:ec:b6:f9:58:4d:8a:85:12:53:ba:f5:
         2a:4d:02:55:2b:1f:b4:9c:b8:de:c4:2a:4c:e2:f7:15:a8:35:
         f6:2a:ea:73:3f:b3:fc:d2:29:b2:f6:41:07:2a:5d:fe:84:3e:
         e1:8e:98:6d:ea:2d:52:27:e8:3f:3d:5e:29:2e:f3:ed:6a:4b:
         b5:0f:2e:0e:85:11:d4:39:3e:0d:14:f1:f4:70:28:17:8d:5a:
         8d:2c:8e:e5:9d:d2:68:9c:86:4b:c5:99:bd:82:36:a4:1f:c7:
         f3:2c:ec:ea:ae:cd:b4:82:0e:70:8e:95:4a:25:cf:b2:2c:94:
         d0:b7:f6:c3:d4:f2:ba:08:e0:7d:e1:da:3c:85:99:03:e6:89:
         af:9f:57:6f:f3:f0:9d:b9:02:7a:32:20:4b:eb:47:cc:36:49:
         9d:cc:86:74:16:97:1d:f5:df:54:db:f5:0f:ec:d3:73:21:55:
         b1:cc:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:27:24 2025 by rpki-client