Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          nnqa+mwTolQoNyCr2fVIp4weLDm+o/amO1ghE85iIR0=
Subject key identifier:   D5:68:D3:DF:23:CE:AA:73:7C:55:B6:F3:AB:EA:EC:44:BA:A9:30:AD
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       30C0BA8A38697E65E053399248DC71705BABE0E0
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:56 +0000
ROA not before:           Thu 04 Apr 2024 02:13:56 +0000
ROA not after:            Thu 03 Apr 2025 02:18:56 +0000
asID:                     262663
IP address blocks:        186.216.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c0:ba:8a:38:69:7e:65:e0:53:39:92:48:dc:71:70:5b:ab:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:56 2024 GMT
            Not After : Apr  3 02:18:56 2025 GMT
        Subject: CN=D568D3DF23CEAA737C55B6F3ABEAEC44BAA930AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:87:09:19:0e:17:12:96:1c:03:1f:5f:1a:
                    a3:c4:2b:ce:b0:8f:4e:bc:69:5e:93:a5:43:90:75:
                    1f:05:db:3e:71:47:77:b0:d0:8d:29:61:f0:1c:1b:
                    45:ad:1a:70:50:88:4f:64:62:79:a8:1a:48:b1:22:
                    78:26:27:6b:74:4f:9d:ec:12:ef:7b:5a:2f:46:d6:
                    b7:15:3f:11:3c:f1:4b:14:dc:2b:85:50:6a:01:2b:
                    f7:6a:3d:a2:02:ce:b7:2f:0c:67:10:ed:fa:d0:6c:
                    93:30:93:1e:2c:4d:e3:73:14:d9:10:f0:52:17:3c:
                    8d:6c:c4:bb:9b:94:14:b9:e4:07:5f:c1:ad:00:9e:
                    a8:27:d1:73:c3:13:5a:d7:59:7e:67:a7:0a:2e:dc:
                    1d:a0:c3:cf:31:a0:ef:08:f1:91:c8:a1:ed:98:13:
                    df:b6:90:2e:25:2e:91:a8:ec:9d:77:14:0f:f5:45:
                    81:93:bc:28:63:fc:e7:29:f4:bf:0f:32:5f:19:33:
                    ca:8b:36:4b:71:12:53:e7:d8:3f:52:0f:29:b8:89:
                    ae:a0:90:60:71:36:cc:d7:95:49:3b:41:db:f1:8d:
                    03:fb:76:6d:0b:bc:d9:d6:0a:08:72:5f:56:65:3b:
                    e9:01:d1:31:24:fe:48:e2:5d:2f:df:9b:a6:ed:76:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:D3:DF:23:CE:AA:73:7C:55:B6:F3:AB:EA:EC:44:BA:A9:30:AD
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:bc:0b:24:92:f9:2b:11:ba:9c:12:55:01:9b:d4:f9:5e:6f:
         10:5f:06:5e:a6:55:eb:3e:a6:be:51:51:64:1f:48:a1:1e:19:
         ab:d8:dd:4c:5f:a3:9f:cc:85:28:4d:c2:a6:62:8c:5f:3b:87:
         6d:79:ab:08:2d:eb:91:a5:2e:03:0f:8b:b8:55:4e:e5:1b:2d:
         49:f7:fd:b3:d6:3f:79:11:26:68:81:85:01:32:5f:b8:a6:8b:
         f6:a7:79:da:cc:8f:53:27:84:0f:09:79:8a:03:a1:b0:af:65:
         77:11:7e:b5:50:42:8d:2e:c6:24:01:43:8c:ee:f6:a5:b9:27:
         7d:12:49:e3:77:26:48:1e:e0:a7:27:20:f7:79:3b:db:c7:4a:
         a2:2f:f8:4f:f8:6b:76:8b:4d:34:c1:41:b9:24:45:27:57:60:
         b6:b4:1f:eb:39:3e:2e:9f:1c:f1:50:b2:26:d7:10:b7:29:68:
         8f:d9:5d:29:3d:7b:bf:f3:45:86:e9:fe:b7:3e:00:7e:e6:23:
         b2:3e:6c:47:f0:bf:3f:a0:1e:c6:43:3a:0d:8b:0a:44:1d:ef:
         15:33:45:cd:a5:a4:67:a0:45:a7:d6:cf:b7:8f:7f:4a:f0:2f:
         f7:0b:9e:af:c3:a0:47:e1:8a:ca:b7:3a:ce:5e:5e:b6:56:71:
         11:02:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:35 2024 by rpki-client on console-ams.rpki-client.org