Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32312e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          yeR/5I8BM1qQDs+h8Dfid5JQekLA0N62SmA8tAm+GCs=
Subject key identifier:   42:AE:6B:CC:BC:70:90:F4:4F:6E:14:8B:6B:23:72:CE:C7:31:E1:C0
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       70A71FF0F7147ECDEAC37B8388BBE96CA2A9CDF1
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:09 +0000
ROA not before:           Thu 04 Apr 2024 02:14:09 +0000
ROA not after:            Thu 03 Apr 2025 02:19:09 +0000
asID:                     262663
IP address blocks:        186.216.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:1f:f0:f7:14:7e:cd:ea:c3:7b:83:88:bb:e9:6c:a2:a9:cd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:09 2024 GMT
            Not After : Apr  3 02:19:09 2025 GMT
        Subject: CN=42AE6BCCBC7090F44F6E148B6B2372CEC731E1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:45:52:9c:b6:d6:7d:ca:9a:49:37:20:d0:d1:
                    1d:24:87:63:ce:f2:33:aa:fb:11:97:45:69:67:90:
                    d1:bd:a8:6a:16:65:63:22:b5:39:40:98:f7:3f:f5:
                    b7:f3:50:c0:ae:6d:25:1d:9c:c2:e5:33:0d:53:9d:
                    40:e2:15:50:83:62:9b:b7:57:f0:c7:57:04:6d:81:
                    83:d1:71:1f:1f:47:d6:55:93:a6:96:e1:ab:a0:bd:
                    a0:22:78:b3:a1:09:6f:a4:f9:de:a9:5a:64:48:c8:
                    77:f8:94:a8:d6:ef:c5:9e:eb:af:af:f6:97:70:e0:
                    9c:11:fc:b7:22:2d:cf:ef:14:ed:cb:7e:b1:96:ac:
                    50:3d:57:cf:7e:dd:6d:db:8c:5f:6e:68:61:41:68:
                    e1:77:1d:98:9c:47:f3:3f:0d:68:93:65:f0:2b:5c:
                    ce:37:47:4f:b7:d9:f7:dc:83:ca:7f:91:d3:2e:e8:
                    f0:71:0d:ae:31:b3:60:08:c8:7d:68:f9:30:a0:1e:
                    4b:cc:66:f6:0d:0a:dd:19:30:1d:6f:1c:8c:6c:e6:
                    1d:52:c1:e5:8e:9f:69:9c:59:00:bc:8b:37:01:e5:
                    17:c1:3b:75:2f:42:1d:27:20:62:07:01:47:92:6e:
                    ee:e1:31:59:a9:37:e6:fd:84:d2:bc:cc:0c:74:ec:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AE:6B:CC:BC:70:90:F4:4F:6E:14:8B:6B:23:72:CE:C7:31:E1:C0
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:39:7c:a8:e8:18:30:dc:a6:d0:50:89:2d:cd:eb:82:13:69:
         d7:21:f0:fc:38:ef:a6:e8:99:17:4c:84:e6:68:72:06:d4:17:
         c6:b6:ce:37:84:42:bd:ea:65:4c:82:ff:ca:1e:c2:1c:f4:3b:
         51:f5:ab:80:42:ad:4d:0f:22:93:8f:b0:23:18:3e:2e:d5:ef:
         7d:d1:50:e7:67:af:cf:9c:c7:e9:4a:0a:2f:1d:12:eb:4b:da:
         c1:2b:ce:8d:9d:66:b5:5f:d4:28:4e:09:2e:58:c0:5d:52:1a:
         8a:17:a9:b4:b8:42:4a:cd:0e:72:7b:c5:6b:86:9d:21:a2:7e:
         31:9a:64:ac:a4:3e:a8:4b:26:a6:2f:b8:98:cd:c7:ce:e0:1d:
         f6:a2:c8:74:a2:32:e5:6c:6b:49:b0:6e:b8:2a:47:06:0c:45:
         b1:3a:1d:32:b4:f1:4e:1b:46:dd:5b:a2:95:e1:d0:3e:fd:95:
         08:6b:27:4b:81:72:ee:71:b6:29:9d:1c:86:d6:a5:a0:6d:bb:
         25:0a:b1:49:b3:d6:18:a6:62:b2:eb:0c:23:f9:e9:50:2c:b4:
         2c:50:e3:0c:1a:d1:0e:1c:c5:fe:4f:bf:7b:f6:d7:b3:b8:32:
         d9:33:a0:b8:63:57:67:29:a9:22:fd:21:44:af:1d:49:93:18:
         88:ba:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 15:37:01 2024 by rpki-client on console-fra.rpki-client.org