Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          W0pQkQk6UpGUSeXmsIEWodfFUri5k5OutyoJipllSJo=
Subject key identifier:   0E:C2:5E:63:EA:4A:60:BB:0B:2C:8A:A4:15:2A:5E:28:C9:82:F1:6E
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       59B43A8BA89268F1166CC028F2D13B6BE6E37279
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:00 +0000
ROA not before:           Thu 06 Mar 2025 03:12:00 +0000
ROA not after:            Thu 05 Mar 2026 03:17:00 +0000
asID:                     262663
IP address blocks:        186.216.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b4:3a:8b:a8:92:68:f1:16:6c:c0:28:f2:d1:3b:6b:e6:e3:72:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:00 2025 GMT
            Not After : Mar  5 03:17:00 2026 GMT
        Subject: CN=0EC25E63EA4A60BB0B2C8AA4152A5E28C982F16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:a5:fc:c7:bb:c1:2a:a1:c0:92:68:eb:a2:
                    31:a0:74:d9:bc:ed:74:6c:f4:5c:af:e6:ed:66:8f:
                    db:03:29:74:4d:70:c4:8c:5b:b0:ca:30:01:f3:a8:
                    11:92:41:0a:8c:89:e3:26:5b:ad:79:e7:8b:ce:4d:
                    04:11:76:36:e7:a3:96:ad:96:b8:dd:c8:82:9c:c6:
                    4a:c3:5c:6a:5c:f7:72:34:66:04:24:ab:72:ed:d8:
                    57:32:fe:cb:39:8b:d1:9e:f1:29:64:36:6f:f0:29:
                    f3:a3:ff:6e:cf:b9:d7:d5:c9:a8:0e:bc:6c:90:86:
                    a8:0d:bf:89:11:93:c4:55:14:f9:6c:c5:3f:8e:05:
                    f8:36:29:bb:a2:3d:3e:82:78:9c:13:2d:24:c4:d8:
                    bf:09:a1:76:e2:2d:b7:bb:e6:47:4e:67:6e:fa:71:
                    6e:b7:c6:70:e0:b2:12:08:f2:72:34:da:65:d0:6c:
                    dd:0a:b2:cd:9d:c9:3f:e8:81:13:39:46:13:41:b3:
                    11:bf:93:49:1e:99:61:5d:3f:d6:0d:e6:21:b3:0d:
                    42:a4:e8:d5:27:05:8e:4d:b0:25:5a:b3:60:65:b8:
                    94:ba:55:b1:1f:0f:cd:56:0c:0e:7b:24:9e:69:52:
                    81:11:c0:be:61:cb:70:40:5f:73:25:0c:1d:5a:92:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C2:5E:63:EA:4A:60:BB:0B:2C:8A:A4:15:2A:5E:28:C9:82:F1:6E
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:12:59:6f:06:a9:f3:ab:51:7b:d9:1e:8a:0f:f4:6e:6e:
         39:17:b5:51:37:d4:f9:d4:49:ba:ab:d0:78:ea:76:7b:2c:c3:
         4e:49:8b:00:ad:a7:b1:e7:fa:b2:21:70:90:f9:ad:69:8b:3f:
         46:01:5f:3c:d8:ff:2b:24:ba:e5:81:a6:c3:5b:b6:97:13:28:
         fe:c8:5c:0e:89:f3:a4:28:a6:ee:d7:fc:02:c9:fd:ca:d1:cd:
         93:72:3a:f4:9b:c6:25:76:f0:d5:5b:92:22:ae:fd:2a:14:15:
         14:b2:2d:ac:49:e2:4e:29:4e:d3:4f:ba:f1:a1:68:dc:e9:e1:
         15:d5:1d:f5:b7:a4:7d:95:ce:e2:ee:6f:96:20:d1:4b:8f:c8:
         b9:8e:5b:d8:95:7f:86:6e:55:2c:53:68:b2:b3:3b:b2:1a:d2:
         b0:69:60:ee:be:59:f4:60:ec:bb:4f:e2:69:80:c3:c9:e7:e5:
         21:e0:b8:8d:8c:d1:4e:1f:2b:ff:45:c9:d1:c8:0c:ec:c6:64:
         2c:58:d1:06:fd:e4:07:28:4b:e9:d9:80:c9:35:83:b1:c3:da:
         67:58:67:12:ed:35:d1:04:81:80:12:22:c7:f6:f2:16:9d:36:
         fe:c9:90:da:fc:c5:62:61:12:44:07:42:b3:41:c7:21:19:e5:
         23:14:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:45:46 2025 by rpki-client