Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          ofvYO+xWbNhLzMqLklGaZIKRgDhSe2oz39v/EHVDBFE=
Subject key identifier:   91:E3:AD:B9:CE:F5:30:58:9E:D8:86:0E:26:75:95:FF:91:F1:1B:3D
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1C56A2DF66A4D6142A8A5EB8B181D034B8744AED
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:58 +0000
ROA not before:           Thu 04 Apr 2024 02:13:58 +0000
ROA not after:            Thu 03 Apr 2025 02:18:58 +0000
asID:                     262663
IP address blocks:        186.216.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:56:a2:df:66:a4:d6:14:2a:8a:5e:b8:b1:81:d0:34:b8:74:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:58 2024 GMT
            Not After : Apr  3 02:18:58 2025 GMT
        Subject: CN=91E3ADB9CEF530589ED8860E267595FF91F11B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:e7:89:06:72:5d:3f:f0:0d:56:ce:1b:2c:
                    56:c2:19:12:1a:ed:cd:b3:4a:2f:ae:ce:dc:45:bc:
                    06:71:67:bb:c6:05:af:3a:19:56:22:7f:43:e0:96:
                    56:0a:34:06:26:64:e1:e5:ed:2d:10:97:f9:31:0e:
                    d2:63:6a:a4:2d:cd:7b:2a:2f:10:31:97:cd:c0:fa:
                    e4:b9:d4:db:57:c1:77:b8:61:c3:64:86:2b:c2:ab:
                    9b:2a:7e:5d:54:dc:e9:5c:34:66:1a:fe:c5:c6:d9:
                    64:29:7b:db:34:d7:bc:49:8b:77:4d:3a:91:95:f7:
                    2a:9a:ad:bc:e4:e2:ac:99:27:cc:89:1e:6e:67:73:
                    d1:3b:60:09:10:68:a6:d0:59:a2:eb:a7:a4:09:c9:
                    71:f2:b9:4d:ab:c9:26:2b:d5:01:b3:e1:15:7c:a1:
                    9d:cd:5a:7e:ad:37:d9:76:43:d1:6f:1b:6e:0d:d2:
                    bd:cd:f5:19:f3:43:6c:23:d6:8a:7e:50:6c:45:66:
                    92:59:35:29:f6:0b:5d:53:72:6b:ad:d4:f3:4a:6f:
                    93:f1:cd:de:96:b5:bf:fb:05:53:84:97:29:ee:c3:
                    2d:52:74:b7:59:53:70:df:81:21:90:4f:b0:e0:48:
                    c6:95:58:45:2c:e6:4f:ed:4a:4b:76:c7:aa:eb:11:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:AD:B9:CE:F5:30:58:9E:D8:86:0E:26:75:95:FF:91:F1:1B:3D
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6b:8c:d8:a5:c5:99:d4:28:1e:cc:9e:35:5e:82:2a:46:db:
         b2:00:07:22:53:c3:56:f5:e0:a1:75:3f:ff:6c:68:59:85:da:
         e6:30:e4:bc:c2:a2:b6:e0:c6:bb:f8:e3:bd:67:a8:f2:8d:0a:
         c6:00:5d:7a:b7:0c:09:bc:62:2b:5d:6f:fb:cc:42:b4:d8:63:
         9e:2a:27:79:9f:0a:95:78:b1:c5:c7:ac:3a:6b:d2:7a:68:b5:
         27:b9:a4:91:06:3a:35:0a:0d:6b:9a:8f:f3:bb:8f:5f:7c:1e:
         d5:b0:4f:e1:5b:8b:d9:b9:07:37:d5:2c:4c:66:77:0c:d8:6d:
         c9:1b:96:81:c2:06:58:0c:6e:5b:71:37:32:53:99:1c:76:c5:
         6c:ae:2f:f4:02:40:d3:63:ec:7b:94:06:b9:94:8d:f9:3f:f9:
         df:91:d9:c6:dc:df:c1:72:07:89:3e:fd:6e:77:99:d3:3e:5e:
         12:f2:df:c4:10:3b:b2:6a:8d:fd:c8:e3:72:39:f9:1b:8b:7e:
         e8:5e:72:e9:43:b6:d4:1f:10:5b:08:d3:3e:79:84:65:a7:c2:
         b7:31:f9:fe:04:09:fc:65:1c:0c:6e:93:a8:e4:ed:1f:02:c0:
         90:d3:64:d7:60:61:34:6a:66:24:08:fe:68:7c:5f:3d:8b:22:
         6d:cf:6a:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHFai32ak1hQqil64sYHQNLh0Su0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNDA0MDQwMjEzNThaFw0yNTA0MDMwMjE4NThaMDMxMTAvBgNV
BAMTKDkxRTNBREI5Q0VGNTMwNTg5RUQ4ODYwRTI2NzU5NUZGOTFGMTFCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7eeJBnJdP/ANVs4bLFbCGRIa
7c2zSi+uztxFvAZxZ7vGBa86GVYif0PgllYKNAYmZOHl7S0Ql/kxDtJjaqQtzXsq
LxAxl83A+uS51NtXwXe4YcNkhivCq5sqfl1U3OlcNGYa/sXG2WQpe9s017xJi3dN
OpGV9yqarbzk4qyZJ8yJHm5nc9E7YAkQaKbQWaLrp6QJyXHyuU2rySYr1QGz4RV8
oZ3NWn6tN9l2Q9FvG24N0r3N9RnzQ2wj1op+UGxFZpJZNSn2C11Tcmut1PNKb5Px
zd6Wtb/7BVOElynuwy1SdLdZU3DfgSGQT7DgSMaVWEUs5k/tSkt2x6rrEXzNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkeOtuc71MFie2IYOJnWV/5HxGz0wHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62BQwDQYJKoZIhvcNAQELBQADggEBAHZrjNil
xZnUKB7MnjVegipG27IAByJTw1b14KF1P/9saFmF2uYw5LzCorbgxrv4471nqPKN
CsYAXXq3DAm8Yitdb/vMQrTYY54qJ3mfCpV4scXHrDpr0npotSe5pJEGOjUKDWua
j/O7j198HtWwT+Fbi9m5BzfVLExmdwzYbckbloHCBlgMbltxNzJTmRx2xWyuL/QC
QNNj7HuUBrmUjfk/+d+R2cbc38FyB4k+/W53mdM+XhLy38QQO7Jqjf3I43I5+RuL
fuheculDttQfEFsI0z55hGWnwrcx+f4ECfxlHAxuk6jk7R8CwJDTZNdgYTRqZiQI
/mh8Xz2LIm3Pau4=
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org