Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          xQswlUQrhqm6Q5B1nLcldr3crdiyJej/egvLYQvDUKc=
Subject key identifier:   C2:07:0B:04:C5:37:84:2E:B7:E0:6B:D7:97:04:3F:D6:C3:B0:D9:26
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       25C70F2539D89BE09B72AEF0D9F2667A782E98FE
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:03 +0000
ROA not before:           Thu 04 Apr 2024 02:14:03 +0000
ROA not after:            Thu 03 Apr 2025 02:19:03 +0000
asID:                     262663
IP address blocks:        186.216.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c7:0f:25:39:d8:9b:e0:9b:72:ae:f0:d9:f2:66:7a:78:2e:98:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:03 2024 GMT
            Not After : Apr  3 02:19:03 2025 GMT
        Subject: CN=C2070B04C537842EB7E06BD797043FD6C3B0D926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:bc:40:20:b1:ea:b1:96:2d:1b:a9:68:5b:
                    c4:df:c5:15:5e:81:5f:16:86:4a:f0:5b:fe:3d:6b:
                    2e:37:49:01:f2:54:9e:f3:9b:d8:f2:91:da:4d:18:
                    a4:48:a1:27:6c:e1:c4:e7:e3:11:54:3e:b9:4f:06:
                    de:8d:d1:ff:09:25:d6:7c:3b:04:7c:f7:fd:01:75:
                    d6:39:69:df:b1:ae:ad:50:87:3b:7a:88:a5:f5:d8:
                    2d:af:87:a1:5b:96:db:45:17:c6:11:13:c4:76:14:
                    a6:c9:87:2b:a4:6a:11:ee:2a:02:9f:a1:64:8a:88:
                    3d:6e:f8:e3:cb:2b:a8:f4:d2:14:62:35:51:24:90:
                    bd:56:f8:7c:4c:6c:23:07:11:f2:d6:51:20:6d:44:
                    73:3b:7e:f4:e1:85:90:b0:11:1d:f3:1d:55:32:9e:
                    f3:8d:51:b6:ea:bf:ee:1b:f3:8c:d4:d0:94:68:97:
                    d2:91:95:21:47:a0:7d:34:18:c3:71:18:8d:01:5f:
                    1d:b8:8c:55:1b:4f:18:92:a9:75:c3:64:7a:7a:5c:
                    cf:f1:0e:4b:e7:10:83:a8:f1:c3:fe:02:2e:7f:d9:
                    3b:64:54:f3:e9:7b:a3:ab:85:92:b4:7c:4b:37:b7:
                    50:79:66:da:5b:18:e8:01:fa:e9:83:59:29:3b:ac:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:0B:04:C5:37:84:2E:B7:E0:6B:D7:97:04:3F:D6:C3:B0:D9:26
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:ea:4d:5a:ab:64:c1:8b:4d:7f:cf:52:fe:18:eb:cd:4a:1d:
         74:d9:cd:10:59:6c:a6:f8:b4:99:a7:eb:13:93:ec:d8:c6:e6:
         d0:9e:1c:12:16:2e:04:4a:d1:59:74:94:ca:5a:b6:76:14:3c:
         47:ee:4b:6b:73:ed:c3:68:3d:72:66:a7:d5:b1:60:6b:a3:16:
         d2:44:49:10:ac:3c:bd:38:ef:3f:5b:b0:7b:47:73:18:b2:4c:
         0c:96:be:ad:9a:b7:e9:03:25:e2:b4:ea:bf:b6:a5:61:44:a5:
         3e:ce:66:66:a2:85:51:8d:81:f2:f9:67:81:dd:db:7a:33:9d:
         1c:98:4e:1e:de:f7:f1:f5:4a:8d:48:0b:2a:3f:d3:7d:2f:99:
         cd:30:34:09:31:d6:84:72:28:6f:d7:81:20:55:ff:82:19:f3:
         7e:77:6b:7d:51:15:eb:f4:18:bd:bd:7a:50:3c:20:2d:d6:ca:
         24:46:2f:fd:e4:03:33:75:24:a7:46:bf:64:0c:a7:f7:f3:e7:
         b4:29:64:42:cd:0c:81:b1:37:81:8d:cd:66:32:81:c4:04:8e:
         8e:8f:91:73:aa:74:56:10:6c:8e:fe:ba:20:73:01:d4:bc:29:
         8a:68:38:e7:11:00:e9:d0:7c:93:ca:41:92:1a:c1:df:d8:09:
         ab:42:43:28
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJccPJTnYm+Cbcq7w2fJmengumP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNDA0MDQwMjE0MDNaFw0yNTA0MDMwMjE5MDNaMDMxMTAvBgNV
BAMTKEMyMDcwQjA0QzUzNzg0MkVCN0UwNkJENzk3MDQzRkQ2QzNCMEQ5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ArxAILHqsZYtG6loW8TfxRVe
gV8WhkrwW/49ay43SQHyVJ7zm9jykdpNGKRIoSds4cTn4xFUPrlPBt6N0f8JJdZ8
OwR89/0BddY5ad+xrq1Qhzt6iKX12C2vh6FblttFF8YRE8R2FKbJhyukahHuKgKf
oWSKiD1u+OPLK6j00hRiNVEkkL1W+HxMbCMHEfLWUSBtRHM7fvThhZCwER3zHVUy
nvONUbbqv+4b84zU0JRol9KRlSFHoH00GMNxGI0BXx24jFUbTxiSqXXDZHp6XM/x
DkvnEIOo8cP+Ai5/2TtkVPPpe6OrhZK0fEs3t1B5ZtpbGOgB+umDWSk7rLQNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwgcLBMU3hC634GvXlwQ/1sOw2SYwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62BYwDQYJKoZIhvcNAQELBQADggEBAM3qTVqr
ZMGLTX/PUv4Y681KHXTZzRBZbKb4tJmn6xOT7NjG5tCeHBIWLgRK0Vl0lMpatnYU
PEfuS2tz7cNoPXJmp9WxYGujFtJESRCsPL047z9bsHtHcxiyTAyWvq2at+kDJeK0
6r+2pWFEpT7OZmaihVGNgfL5Z4Hd23oznRyYTh7e9/H1So1ICyo/030vmc0wNAkx
1oRyKG/XgSBV/4IZ8353a31RFev0GL29elA8IC3WyiRGL/3kAzN1JKdGv2QMp/fz
57QpZELNDIGxN4GNzWYygcQEjo6PkXOqdFYQbI7+uiBzAdS8KYpoOOcRAOnQfJPK
QZIawd/YCatCQyg=
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:02 2024 by rpki-client on console-ams.rpki-client.org