Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31382e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          cHiQXh0JWz3KSho9bTuNCx40RLN/FV1+EwxKa6zkHpQ=
Subject key identifier:   AE:FF:A3:07:9A:C3:61:29:B3:1E:87:F0:E8:F3:1E:F8:F9:51:7B:73
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       3B525FDBD4ACA2B3986CC0AF0BCAEE270058469A
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:54 +0000
ROA not before:           Thu 04 Apr 2024 02:13:54 +0000
ROA not after:            Thu 03 Apr 2025 02:18:54 +0000
asID:                     262663
IP address blocks:        186.216.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:52:5f:db:d4:ac:a2:b3:98:6c:c0:af:0b:ca:ee:27:00:58:46:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:54 2024 GMT
            Not After : Apr  3 02:18:54 2025 GMT
        Subject: CN=AEFFA3079AC36129B31E87F0E8F31EF8F9517B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:1f:e5:9d:25:49:f3:46:bf:eb:93:86:ae:
                    c7:a5:02:55:87:61:f6:46:a7:91:9e:1e:f5:61:26:
                    74:c7:09:e7:b6:bd:61:eb:41:f3:62:06:45:d2:07:
                    a2:42:98:a3:1a:6b:8b:30:cc:a0:99:93:16:fd:ab:
                    60:c7:02:b5:65:9b:9b:64:7d:5d:a1:f0:46:e1:96:
                    9b:d8:9a:87:7a:9f:6a:41:ae:50:26:e7:fc:32:a3:
                    7b:44:05:fe:f6:9b:e2:2e:63:9a:ff:5c:cf:7d:be:
                    a2:af:71:95:b2:eb:fc:d0:92:54:06:1d:85:b2:f4:
                    25:17:da:37:86:e5:64:8e:ce:14:ca:4d:0a:b7:c8:
                    de:91:3d:b6:e7:05:e7:97:ce:76:d2:65:c1:db:33:
                    a8:77:f7:6f:1b:fb:ff:90:ca:fc:a9:0b:6b:46:01:
                    ac:9a:a0:33:7c:cb:f6:94:78:72:4b:d6:4a:bd:e8:
                    8e:a5:25:7a:b3:ad:9c:44:de:c1:5e:e5:6d:a3:c1:
                    30:94:b4:7f:e0:23:c6:bc:d8:7e:3a:dd:35:bf:b2:
                    fc:8e:a8:8a:36:7c:61:eb:56:51:a5:41:7d:99:4d:
                    e4:eb:f4:57:c0:7d:0b:05:d7:7e:92:9c:1e:dd:0b:
                    0f:9a:da:e4:3a:40:2c:e9:d6:51:10:db:24:29:58:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:A3:07:9A:C3:61:29:B3:1E:87:F0:E8:F3:1E:F8:F9:51:7B:73
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f5:a6:09:c8:9e:72:2a:1c:c3:93:6a:13:82:b9:fc:ab:7f:
         17:e1:85:f0:f6:ad:81:8e:80:a7:18:46:85:8d:5a:76:d4:bf:
         d3:82:1e:67:b8:13:3e:fb:ef:75:65:ec:e9:bb:71:19:b8:f9:
         12:fb:1a:f1:92:74:b9:58:b9:a8:61:8b:f5:64:99:6f:23:e1:
         e6:f8:2c:9c:de:fd:dc:13:37:34:6c:8f:5a:e9:39:52:13:20:
         17:24:0d:0e:ef:f1:d9:af:7d:34:83:ac:c7:f0:4b:e3:35:0a:
         49:a0:a7:42:24:19:ac:85:08:8d:9a:fc:84:c9:3c:49:34:9b:
         f6:64:3e:45:4d:47:b8:a4:5d:c1:d8:23:d1:4c:7e:d0:cb:32:
         59:50:cc:9a:1f:a7:d1:90:54:e8:8d:22:08:eb:b8:5e:37:e8:
         8c:84:77:06:d8:45:4a:05:0c:94:7b:5f:f8:57:a9:bd:c8:f7:
         4a:7d:bb:e2:fb:89:83:2d:ef:7c:9f:2f:2a:cc:c8:44:db:79:
         a0:23:a6:e9:77:8a:d0:8e:16:31:b2:ea:3b:4e:d8:d6:a7:30:
         27:3e:25:43:c1:f7:81:0d:a4:93:df:33:ed:eb:6f:5f:c2:c6:
         04:10:62:11:8f:a8:3f:44:83:83:97:6c:80:fa:4c:85:b6:87:
         29:d1:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:35 2024 by rpki-client on console-ams.rpki-client.org