Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          rQBXTU5gZBYy+kF23xnpQ0LIrBYIGQlfQzpjdx8ynlk=
Subject key identifier:   1E:04:EB:CA:B9:48:6F:08:60:DA:01:CC:87:B9:79:4A:64:B1:F9:53
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       51C64DFAD56DD50D3DF808B93DC4A469B3A966A9
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:00 +0000
ROA not before:           Thu 04 Apr 2024 02:14:00 +0000
ROA not after:            Thu 03 Apr 2025 02:19:00 +0000
asID:                     262663
IP address blocks:        186.216.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c6:4d:fa:d5:6d:d5:0d:3d:f8:08:b9:3d:c4:a4:69:b3:a9:66:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:00 2024 GMT
            Not After : Apr  3 02:19:00 2025 GMT
        Subject: CN=1E04EBCAB9486F0860DA01CC87B9794A64B1F953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:d6:1f:98:b6:ed:48:21:2e:00:48:a2:dc:
                    49:3e:07:a4:8c:ee:a2:de:fc:2e:21:5e:3f:d3:71:
                    56:6a:06:03:58:e9:2a:52:2b:d1:11:54:fd:6d:68:
                    cc:7e:33:37:1e:d4:40:b5:c5:ba:c4:97:a5:38:d6:
                    b6:3d:1f:a2:bb:2a:98:42:85:f2:4f:24:30:d8:2e:
                    85:dd:c9:60:0c:cb:18:76:a2:73:c9:3d:25:7a:b2:
                    81:06:d4:1c:56:2b:4d:80:3c:c2:12:a4:0e:06:b7:
                    48:a3:06:b7:19:c5:7e:04:30:45:ee:0e:45:04:7f:
                    0e:c3:19:f0:56:b4:55:85:cf:3e:ab:c1:48:c4:69:
                    06:16:1b:f5:fc:a0:bd:20:fd:42:33:39:bf:89:66:
                    d5:cd:9b:69:2b:8e:f3:76:dc:75:2c:ba:52:f8:48:
                    e0:62:27:e3:dd:b5:69:53:d0:74:f9:0b:4a:2f:7a:
                    27:c3:0e:19:e5:16:db:40:33:e1:c4:6d:6d:e0:41:
                    3a:84:58:1b:17:e3:92:a9:48:37:41:be:fa:b9:91:
                    a6:80:e8:46:c3:cd:20:8d:10:67:0e:8a:25:90:ae:
                    13:7f:d2:72:44:fe:2a:30:51:cd:98:64:54:91:35:
                    e9:89:1f:07:00:19:d5:ec:36:e0:23:c0:b6:7b:50:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:04:EB:CA:B9:48:6F:08:60:DA:01:CC:87:B9:79:4A:64:B1:F9:53
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:4d:b9:81:20:d2:55:3e:94:a3:0e:84:4f:4e:98:5a:1a:
         5e:de:a3:7f:9e:f2:89:53:c9:dc:8a:58:e3:6b:fb:a0:cd:f9:
         e0:ab:fb:e5:94:19:4a:c2:fa:cf:e9:b1:8a:e9:0a:9e:b4:80:
         6d:ed:58:8c:d3:da:76:c5:16:7e:b0:e6:9b:60:97:a8:25:2f:
         72:bd:39:27:c5:13:cf:ba:1c:62:e1:ec:c5:c9:e9:33:fe:99:
         71:9f:c3:ff:18:84:e8:3f:ef:c7:ef:35:7a:87:80:2b:c9:bf:
         43:2f:aa:61:4e:93:81:36:32:cb:6f:be:13:85:8e:f7:97:6d:
         f7:80:31:a6:93:6c:4d:2a:1f:ce:4e:32:98:ed:d0:5a:23:5e:
         81:ca:b2:68:8b:be:23:81:9d:25:c5:35:b6:9d:e2:02:be:19:
         ee:19:e9:2e:51:47:41:ff:55:1d:fb:ce:55:48:c0:04:9d:36:
         e2:39:53:ce:e0:c6:81:4b:56:c5:61:bf:36:3f:66:a0:02:7b:
         2b:5c:d4:5c:dc:ed:3c:e3:1a:b4:ee:3e:47:f6:58:1a:53:f5:
         36:84:8a:36:ff:9d:41:23:14:3b:d6:0f:70:e2:db:97:1a:fe:
         db:d9:04:42:67:32:cc:fe:16:14:38:01:07:30:15:49:88:ce:
         df:81:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:02 2024 by rpki-client on console-ams.rpki-client.org