Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          9QJNtNxfIQojV+DHWBivB/qzv+m9ebeKw3V3lfZmFzc=
Subject key identifier:   9D:2C:D4:5C:A1:8E:E8:EE:8A:D3:DA:89:FD:1A:B6:64:0B:03:1A:0F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       74093E73A1957FA2DE89FA245C795DE27C4FD62E
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:00 +0000
ROA not before:           Thu 04 Apr 2024 02:14:00 +0000
ROA not after:            Thu 03 Apr 2025 02:19:00 +0000
asID:                     262663
IP address blocks:        186.216.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:09:3e:73:a1:95:7f:a2:de:89:fa:24:5c:79:5d:e2:7c:4f:d6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:00 2024 GMT
            Not After : Apr  3 02:19:00 2025 GMT
        Subject: CN=9D2CD45CA18EE8EE8AD3DA89FD1AB6640B031A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:00:a4:31:6b:ce:06:d8:85:43:52:fe:83:
                    8a:3b:15:42:83:31:7e:cc:51:76:56:e2:5b:f1:90:
                    02:c1:ac:f1:0e:8a:26:d4:99:01:22:90:94:77:22:
                    5f:f7:88:8f:b5:99:08:25:ee:51:2e:f9:aa:65:ef:
                    e0:59:7a:53:1a:f2:43:b9:f3:0e:08:75:59:29:8c:
                    5a:48:08:4a:d7:ab:25:43:f0:28:2b:9a:e2:ad:93:
                    78:5d:dd:03:a5:52:d4:b8:6b:5c:6c:7b:b0:6a:f4:
                    d9:f5:82:b0:65:4c:fc:93:3d:16:53:73:b8:14:be:
                    e1:18:07:a3:8a:04:70:0c:1a:90:83:d7:e1:74:13:
                    08:44:15:f5:76:e1:76:3c:c8:58:ca:06:0c:00:ec:
                    db:52:7d:5e:ac:34:58:a3:1e:d1:bf:74:2f:f3:7a:
                    5f:d8:4f:f5:55:fd:a4:4b:85:d1:0b:53:67:f9:10:
                    be:ad:91:99:fb:42:12:f7:9e:9f:4a:f8:3e:f7:43:
                    c7:cf:2e:98:8c:f7:7a:d8:4b:be:8f:2a:6c:77:bd:
                    a6:44:e4:6f:08:dc:ed:7e:68:23:28:9d:45:ce:46:
                    30:93:f8:2f:f9:bb:68:80:81:1d:88:7d:9b:3b:6f:
                    e9:18:c5:a2:a3:7f:a4:7f:2e:fa:30:d4:7c:20:89:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:D4:5C:A1:8E:E8:EE:8A:D3:DA:89:FD:1A:B6:64:0B:03:1A:0F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:95:57:c8:31:76:06:2b:bf:9d:0a:0e:0c:b5:fe:8d:91:be:
         9d:b8:61:de:e9:c2:27:d6:4d:fd:07:64:bc:45:c6:3a:ba:35:
         66:d3:67:27:4b:25:e3:10:7c:8b:51:41:f8:a3:98:47:57:58:
         ca:21:7d:20:d8:59:9c:d1:dc:94:53:8a:e9:d1:b8:0a:6d:36:
         8d:87:4b:a2:30:fc:3f:e1:30:ab:18:69:e9:30:2a:01:17:c3:
         4e:01:bb:da:6e:74:79:7a:88:18:a8:6e:4d:41:13:73:cb:8d:
         e9:9b:73:b6:92:90:65:de:b0:68:4f:95:75:76:92:ae:44:24:
         1a:db:4e:cf:b0:af:4a:38:1c:c4:73:d3:a5:0b:5b:8e:f0:11:
         fb:9f:97:35:e5:4c:ec:8a:25:2e:96:27:07:35:46:da:52:4c:
         f5:82:6e:b3:12:d4:b7:70:0a:99:04:5b:26:ec:91:82:95:41:
         84:95:bb:b5:10:ce:b2:f0:b0:ba:0c:71:22:db:cd:56:2d:32:
         c2:b6:23:c7:32:5d:5b:a2:44:07:15:e3:c3:8f:44:24:0c:28:
         1e:a5:00:a7:b2:7a:d6:11:dd:24:cd:4c:26:7e:06:da:f7:d5:
         9f:31:5b:43:1f:4d:e3:63:98:3f:9a:98:9a:4a:93:04:ab:9d:
         78:d0:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:28 2024 by rpki-client on console-fra.rpki-client.org