Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          VZBfx86CN4hNXqa08DirW7ckvNjsBD3ARaMVP3vKSYo=
Subject key identifier:   04:DA:CA:23:12:F3:4B:E1:F2:77:04:FB:C4:1B:83:0B:FB:E7:CD:1F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       141EE530126CE50E53CDED2E9C60781D69063445
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:55 +0000
ROA not before:           Thu 04 Apr 2024 02:13:55 +0000
ROA not after:            Thu 03 Apr 2025 02:18:55 +0000
asID:                     262663
IP address blocks:        186.216.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1e:e5:30:12:6c:e5:0e:53:cd:ed:2e:9c:60:78:1d:69:06:34:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:55 2024 GMT
            Not After : Apr  3 02:18:55 2025 GMT
        Subject: CN=04DACA2312F34BE1F27704FBC41B830BFBE7CD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:e4:c3:ab:ee:bb:f3:d4:7b:fd:61:7b:05:
                    59:1b:09:50:2e:3f:9b:3c:a3:ac:c3:0f:e3:a3:94:
                    a0:98:2c:ad:fe:55:97:3c:46:f9:ae:09:f5:0a:f5:
                    5a:95:33:17:46:ae:40:1e:b0:e4:bc:8a:15:7c:31:
                    4f:2a:77:bc:87:54:7a:8f:a9:5f:f2:d3:2b:93:a2:
                    4a:15:b5:ba:5e:6d:8d:a8:4e:20:d2:d0:3b:25:0b:
                    65:8b:1c:e9:51:d7:f9:97:b0:45:8f:da:e1:19:69:
                    7b:45:a8:7a:20:b6:3d:3a:00:6a:c7:13:ef:b6:0d:
                    48:2b:69:84:0a:72:53:e8:31:14:4a:29:a6:6a:5d:
                    56:eb:36:c0:25:23:f9:be:28:45:58:9f:0a:a6:61:
                    c1:e4:78:d0:cc:ff:7a:1c:eb:a5:e0:8d:c0:26:3c:
                    41:81:3a:a5:b2:aa:e8:d5:a6:84:56:6b:4c:f5:ca:
                    7f:fb:75:1a:8a:a7:f9:95:89:b2:ee:20:23:0a:14:
                    20:e7:e8:ea:7a:64:3f:50:cc:17:84:48:03:9b:c6:
                    bd:07:2d:7f:b2:48:b6:cf:89:e3:2e:3c:ba:46:25:
                    de:4e:f0:40:a0:22:ce:30:1b:39:7d:d9:d9:2d:8b:
                    66:99:85:d8:e1:c7:5d:31:eb:1a:e5:06:fc:7c:e0:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DA:CA:23:12:F3:4B:E1:F2:77:04:FB:C4:1B:83:0B:FB:E7:CD:1F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:93:70:3e:3b:68:b7:4f:45:bf:96:f8:20:43:95:ae:a9:b0:
         0e:54:50:03:4b:65:3e:bb:66:cf:89:7c:25:d9:5e:cd:4c:61:
         e7:c2:a6:fa:42:13:c9:88:60:9b:73:6e:ca:3c:b1:d9:b7:c5:
         fc:05:49:fc:34:37:f7:c4:cd:c6:0b:10:f6:23:2d:f6:a7:be:
         a0:64:0f:24:16:85:80:38:ac:27:74:83:b9:fb:50:97:94:8d:
         37:fb:49:41:aa:66:37:73:e4:62:91:b3:0e:dd:db:e6:b1:21:
         1c:37:ac:be:f7:97:30:04:a3:0b:83:20:47:d5:2b:e6:6e:d6:
         31:57:26:e2:2c:58:97:e5:6d:54:36:60:12:a0:7c:7a:47:60:
         c5:7c:2c:47:5d:e1:0c:07:e0:4f:da:56:09:3b:a7:1a:5c:6d:
         81:bc:1c:f2:ee:f3:b9:79:86:42:5c:ef:13:c7:8c:19:58:c8:
         71:b4:4f:da:1f:d8:31:92:01:0d:1b:14:ea:9f:d1:22:6b:16:
         5c:a0:27:eb:ea:c1:21:33:05:f0:82:44:9b:90:7e:96:0c:c8:
         40:0c:24:70:41:a4:f7:13:60:81:fd:43:c9:7e:98:95:f6:48:
         3d:c0:56:41:4f:51:dd:48:24:ce:40:f3:31:8b:0e:df:d8:46:
         bb:58:8b:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFB7lMBJs5Q5Tze0unGB4HWkGNEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNDA0MDQwMjEzNTVaFw0yNTA0MDMwMjE4NTVaMDMxMTAvBgNV
BAMTKDA0REFDQTIzMTJGMzRCRTFGMjc3MDRGQkM0MUI4MzBCRkJFN0NEMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx+TDq+6789R7/WF7BVkbCVAu
P5s8o6zDD+OjlKCYLK3+VZc8RvmuCfUK9VqVMxdGrkAesOS8ihV8MU8qd7yHVHqP
qV/y0yuTokoVtbpebY2oTiDS0DslC2WLHOlR1/mXsEWP2uEZaXtFqHogtj06AGrH
E++2DUgraYQKclPoMRRKKaZqXVbrNsAlI/m+KEVYnwqmYcHkeNDM/3oc66XgjcAm
PEGBOqWyqujVpoRWa0z1yn/7dRqKp/mVibLuICMKFCDn6Op6ZD9QzBeESAObxr0H
LX+ySLbPieMuPLpGJd5O8ECgIs4wGzl92dkti2aZhdjhx10x6xrlBvx84MTfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBNrKIxLzS+HydwT7xBuDC/vnzR8wHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62BEwDQYJKoZIhvcNAQELBQADggEBADiTcD47
aLdPRb+W+CBDla6psA5UUANLZT67Zs+JfCXZXs1MYefCpvpCE8mIYJtzbso8sdm3
xfwFSfw0N/fEzcYLEPYjLfanvqBkDyQWhYA4rCd0g7n7UJeUjTf7SUGqZjdz5GKR
sw7d2+axIRw3rL73lzAEowuDIEfVK+Zu1jFXJuIsWJflbVQ2YBKgfHpHYMV8LEdd
4QwH4E/aVgk7pxpcbYG8HPLu87l5hkJc7xPHjBlYyHG0T9of2DGSAQ0bFOqf0SJr
FlygJ+vqwSEzBfCCRJuQfpYMyEAMJHBBpPcTYIH9Q8l+mJX2SD3AVkFPUd1IJM5A
8zGLDt/YRrtYiw4=
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:02 2024 by rpki-client on console-ams.rpki-client.org