Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3332203d3e20323634333937.roa
File:                     323830343a316464343a3a2f33322d3332203d3e20323634333937.roa (raw, json)
Hash identifier:          3yfZbAaEY1j1FYRMdnqep1Z7yuA1S70IZhcHYRHDm34=
Subject key identifier:   4D:DB:BA:84:D6:BB:64:CE:D5:C7:35:6B:09:DF:62:80:6C:6B:30:DC
Certificate issuer:       /CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
Certificate serial:       21D2119D37254027843112C65966F1905C0FF7AE
Authority key identifier: 2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3332203d3e20323634333937.roa
Signing time:             Wed 07 May 2025 20:59:55 +0000
ROA not before:           Wed 07 May 2025 20:54:55 +0000
ROA not after:            Wed 06 May 2026 20:59:55 +0000
asID:                     264397
IP address blocks:        2804:1dd4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl
                          rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 12:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d2:11:9d:37:25:40:27:84:31:12:c6:59:66:f1:90:5c:0f:f7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C47A6E18151A828A5700D2B7E16C9A1FCABD20A
        Validity
            Not Before: May  7 20:54:55 2025 GMT
            Not After : May  6 20:59:55 2026 GMT
        Subject: CN=4DDBBA84D6BB64CED5C7356B09DF62806C6B30DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:12:cb:02:82:7b:7c:e3:9d:91:f4:a3:2a:
                    4a:8f:e7:7c:a2:a9:92:b3:94:2b:76:01:1e:7d:93:
                    d2:9d:13:8d:f2:9c:54:1d:67:9f:a0:83:a0:90:23:
                    a5:6e:81:56:10:5d:2c:17:bb:e7:b2:0c:ce:09:85:
                    91:2a:ba:2b:e6:53:63:be:78:5c:8c:78:f4:29:cc:
                    4f:00:05:6c:ec:f1:b9:fa:d9:58:34:1c:85:34:c3:
                    44:df:e6:2b:15:de:c8:80:ac:31:ca:92:5d:bd:11:
                    41:35:47:c7:92:5a:41:d7:69:5c:f7:c6:53:f4:8c:
                    45:fa:4b:c7:a2:f2:29:92:47:e5:39:05:a8:56:c5:
                    6a:be:a8:50:8f:38:5e:5a:07:02:5a:71:00:4d:a8:
                    79:cf:1a:95:c0:0d:21:67:10:56:b5:18:f5:5a:a5:
                    de:0d:4e:39:ea:03:f7:4e:86:64:1e:dd:58:98:38:
                    76:b5:db:e8:a3:69:16:56:9b:6b:fc:fa:ac:89:57:
                    4c:18:e8:ab:d3:f4:6c:eb:e6:53:fe:87:8e:a6:96:
                    5d:45:1f:78:d7:dc:2e:65:8c:4c:19:c1:92:14:a1:
                    c5:db:e3:0a:60:43:43:fd:f6:5d:69:a7:78:00:f9:
                    55:02:49:86:e8:b4:31:83:84:e8:6c:09:80:f8:71:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DB:BA:84:D6:BB:64:CE:D5:C7:35:6B:09:DF:62:80:6C:6B:30:DC
            X509v3 Authority Key Identifier:
                keyid:2C:47:A6:E1:81:51:A8:28:A5:70:0D:2B:7E:16:C9:A1:FC:AB:D2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C47A6E18151A828A5700D2B7E16C9A1FCABD20A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3332203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:b1:f4:28:c5:1e:1c:a9:97:a4:c0:bc:7b:e9:ba:fe:bb:8c:
         db:64:80:f4:0e:59:89:d9:96:0e:b9:30:c5:27:b4:2b:11:85:
         fb:e1:ff:8f:da:73:dd:c6:f1:28:3f:60:ff:97:f7:7d:73:23:
         bb:f3:31:e9:37:ab:d0:8d:79:15:40:64:f8:56:0d:0e:94:5b:
         63:64:91:b7:15:c7:4f:62:49:13:9f:a7:48:61:65:e1:d7:54:
         92:aa:a0:c4:7b:b9:99:2e:24:98:49:ba:65:71:52:1d:17:56:
         ff:06:00:a3:b6:69:6f:51:42:38:2b:a8:f7:89:15:9e:e2:b4:
         44:26:3a:e1:5b:8e:99:c0:b3:ac:23:84:bd:88:ec:c1:ad:c4:
         83:b6:d1:ab:bf:9b:6d:63:aa:88:2c:b8:80:f6:c5:df:5d:8f:
         b0:d1:05:53:a6:42:ad:87:46:38:7f:88:04:bd:82:bd:40:a6:
         1b:02:e7:1b:5e:ca:ed:2f:d9:93:1c:aa:c4:e1:89:2f:cf:8c:
         b1:7e:da:a5:bf:53:9a:a0:5e:b8:32:3a:cc:01:af:5b:df:61:
         48:04:f1:da:95:cc:f3:0f:d0:c0:8a:c2:ce:19:6b:32:a8:ad:
         67:bf:77:ae:a1:2a:bc:fb:d9:09:ff:5c:5b:c8:ec:94:a7:24:
         2a:95:e0:50
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIdIRnTclQCeEMRLGWWbxkFwP964wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM0N0E2RTE4MTUxQTgyOEE1NzAwRDJCN0UxNkM5QTFG
Q0FCRDIwQTAeFw0yNTA1MDcyMDU0NTVaFw0yNjA1MDYyMDU5NTVaMDMxMTAvBgNV
BAMTKDREREJCQTg0RDZCQjY0Q0VENUM3MzU2QjA5REY2MjgwNkM2QjMwREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLRLLAoJ7fOOdkfSjKkqP53yi
qZKzlCt2AR59k9KdE43ynFQdZ5+gg6CQI6VugVYQXSwXu+eyDM4JhZEquivmU2O+
eFyMePQpzE8ABWzs8bn62Vg0HIU0w0Tf5isV3siArDHKkl29EUE1R8eSWkHXaVz3
xlP0jEX6S8ei8imSR+U5BahWxWq+qFCPOF5aBwJacQBNqHnPGpXADSFnEFa1GPVa
pd4NTjnqA/dOhmQe3ViYOHa12+ijaRZWm2v8+qyJV0wY6KvT9Gzr5lP+h46mll1F
H3jX3C5ljEwZwZIUocXb4wpgQ0P99l1pp3gA+VUCSYbotDGDhOhsCYD4cV7TAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUTdu6hNa7ZM7VxzVrCd9igGxrMNwwHwYDVR0j
BBgwFoAULEem4YFRqCilcA0rfhbJofyr0gowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy
OGEvMC8yQzQ3QTZFMTgxNTFBODI4QTU3MDBEMkI3RTE2QzlBMUZDQUJEMjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDNDdBNkUxODE1MUE4MjhB
NTcwMEQyQjdFMTZDOUExRkNBQkQyMEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv
MzIzODMwMzQzYTMxNjQ2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzMzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQd1DANBgkqhkiG9w0BAQsFAAOCAQEAwbH0KMUe
HKmXpMC8e+m6/ruM22SA9A5ZidmWDrkwxSe0KxGF++H/j9pz3cbxKD9g/5f3fXMj
u/Mx6Ter0I15FUBk+FYNDpRbY2SRtxXHT2JJE5+nSGFl4ddUkqqgxHu5mS4kmEm6
ZXFSHRdW/wYAo7Zpb1FCOCuo94kVnuK0RCY64VuOmcCzrCOEvYjswa3Eg7bRq7+b
bWOqiCy4gPbF312PsNEFU6ZCrYdGOH+IBL2CvUCmGwLnG17K7S/ZkxyqxOGJL8+M
sX7apb9TmqBeuDI6zAGvW99hSATx2pXM8w/QwIrCzhlrMqitZ793rqEqvPvZCf9c
W8jslKckKpXgUA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 17:14:18 2025 by rpki-client