Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          omusQPBi9LOiVK6JxtQ+RKUmU38q8xa474BaSFFPO/0=
Subject key identifier:   09:67:84:DB:EB:76:26:E4:DC:69:28:76:A3:6C:C6:7F:F9:AA:C8:A6
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1D6D803D7F21685B93E7F7D68D6F4450908CF0AF
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:06 +0000
ROA not before:           Thu 04 Apr 2024 02:14:06 +0000
ROA not after:            Thu 03 Apr 2025 02:19:06 +0000
asID:                     262663
IP address blocks:        186.216.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6d:80:3d:7f:21:68:5b:93:e7:f7:d6:8d:6f:44:50:90:8c:f0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:06 2024 GMT
            Not After : Apr  3 02:19:06 2025 GMT
        Subject: CN=096784DBEB7626E4DC692876A36CC67FF9AAC8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:36:78:95:88:c4:ac:53:b8:3d:5c:8c:3d:
                    54:5f:ce:98:f7:20:c0:f0:79:27:81:d9:9a:1d:7c:
                    7d:1c:ea:5e:18:4b:cc:61:96:ae:ed:67:70:c9:92:
                    06:49:d8:05:8b:72:c1:06:7d:67:98:b9:19:8d:9d:
                    a6:6d:c1:2b:64:44:2a:59:da:e0:82:1b:5a:be:02:
                    d4:ca:21:e9:0e:9a:4a:a5:d9:16:96:2e:75:2a:dd:
                    10:84:88:19:42:80:d1:cc:a5:d3:cd:fd:a8:0e:c3:
                    9d:03:58:66:a6:3d:55:7e:b6:55:a0:1f:d1:67:20:
                    6a:4c:20:98:54:5d:ce:d6:22:b4:53:91:d2:e0:6c:
                    92:a7:14:2d:83:a7:55:68:d9:75:f7:9b:59:a0:89:
                    7c:df:29:7d:b1:c3:21:e0:d3:fe:e0:75:9c:2e:b3:
                    6c:ba:0d:be:e1:7e:59:91:31:8f:1c:8e:c0:cd:e4:
                    7c:99:e3:2a:fd:24:cf:83:91:da:f5:c3:fc:68:47:
                    24:d7:9b:4d:38:e0:4b:78:af:d9:ee:86:97:da:fd:
                    b9:a3:76:d1:32:d5:82:51:39:46:c3:25:7d:5e:ba:
                    1d:9d:34:e9:63:b8:d4:11:d4:88:1a:ec:a0:ce:4b:
                    65:66:f0:7e:4a:79:96:21:e3:c8:4b:d2:fc:33:eb:
                    f3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:84:DB:EB:76:26:E4:DC:69:28:76:A3:6C:C6:7F:F9:AA:C8:A6
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:14:a2:f9:56:f3:c6:e0:67:fc:e7:5d:c5:5f:30:4a:ea:c4:
         a1:90:fb:9c:6f:09:b0:89:74:17:d8:0f:d9:fe:38:b5:fb:20:
         8d:3e:f6:5c:e4:b4:27:70:61:78:c6:9e:86:de:22:47:80:51:
         80:16:3f:07:3f:b3:a3:2c:06:8f:7e:12:98:44:27:5a:e2:82:
         2d:11:59:1f:9b:a4:9c:65:17:04:73:d7:34:b8:c7:9d:e8:08:
         3f:7c:cd:d2:93:8e:ea:31:2b:50:f0:cb:67:fe:0b:d4:7a:f0:
         ec:5c:41:00:64:03:d0:d1:0b:50:27:32:ee:0e:ce:bf:54:ef:
         1d:02:0a:87:2e:56:fb:1f:30:e5:3b:a5:53:26:15:05:86:1c:
         b2:fe:ba:d5:00:ca:60:17:9f:9f:50:d5:c3:92:6d:f5:06:d1:
         2b:2a:58:73:d6:e3:35:d7:0f:27:b8:49:8f:5a:2b:50:29:43:
         db:c8:f9:f7:cb:f4:4a:3b:e4:5e:79:67:20:ea:99:4c:ca:6b:
         b1:d4:10:0d:a0:fa:bf:74:27:ac:b4:49:ec:0b:6d:fe:25:6a:
         5e:8c:42:44:ef:bd:c9:0b:c0:e4:ff:a6:3b:c5:eb:78:4a:51:
         5f:4b:9d:67:9a:8e:d1:67:50:48:f6:9c:41:d8:95:3c:fd:18:
         9b:0c:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:28 2024 by rpki-client on console-fra.rpki-client.org