Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          IC5YqfwGBBcpfDg6XA3wLV/6hM9RiStaI7ZFWS/9UDw=
Subject key identifier:   3F:CA:7B:2D:88:7F:AC:8C:FB:7B:25:E1:2C:4B:01:AC:59:5D:00:BF
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       09A135FED7D07EF1772699BE04F08188B1921F97
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:02 +0000
ROA not before:           Thu 06 Mar 2025 03:12:02 +0000
ROA not after:            Thu 05 Mar 2026 03:17:02 +0000
asID:                     262663
IP address blocks:        186.216.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a1:35:fe:d7:d0:7e:f1:77:26:99:be:04:f0:81:88:b1:92:1f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:02 2025 GMT
            Not After : Mar  5 03:17:02 2026 GMT
        Subject: CN=3FCA7B2D887FAC8CFB7B25E12C4B01AC595D00BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:d5:19:56:3b:b2:84:24:41:18:ea:f8:6f:
                    d8:09:54:88:4d:7f:8e:9e:b9:a4:9f:36:d6:10:b0:
                    5c:b7:ec:a8:44:90:3b:5a:d8:23:f3:a5:a0:1c:97:
                    da:ae:97:71:9b:f4:3e:47:36:82:f0:1b:6e:28:7a:
                    2d:95:5c:da:62:b9:3a:77:09:5c:ea:1e:db:c1:12:
                    a0:cc:e3:b3:41:a0:be:35:b6:eb:ba:a5:e6:aa:02:
                    0a:20:35:9c:c1:55:49:19:e5:d1:d0:55:b8:0e:fb:
                    fe:51:15:c1:18:63:c6:e5:57:7c:1e:63:0f:ca:0a:
                    72:1e:2a:47:9a:9b:c7:a2:4e:a8:2b:6c:9e:ee:a8:
                    1e:32:a2:6f:49:37:8d:fc:c2:da:f2:ce:53:99:dc:
                    ab:0d:63:5a:37:66:2e:db:d1:37:83:84:b0:f0:09:
                    ab:57:c4:ed:2d:3c:1e:12:41:3a:54:9e:a2:09:7d:
                    6f:93:dc:62:b3:dd:e5:c3:ed:2a:c2:46:80:33:b8:
                    2b:5b:cc:b9:1d:63:12:16:82:b7:27:ca:2f:22:da:
                    3f:05:75:00:cd:82:11:88:3b:e4:c5:77:47:50:d7:
                    14:11:8e:97:bb:02:90:0b:59:9a:1f:2e:ac:a3:9b:
                    cd:89:51:c9:0f:84:08:8c:f5:a5:46:36:e1:9b:55:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:7B:2D:88:7F:AC:8C:FB:7B:25:E1:2C:4B:01:AC:59:5D:00:BF
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c4:b1:27:f2:3d:df:4c:66:70:4b:cc:c1:9b:56:d7:9e:8c:
         e0:8c:9d:6f:92:a1:e7:59:77:2f:b8:05:c8:c2:c7:90:03:03:
         25:8c:d6:65:6a:8a:17:65:99:3f:2a:df:7e:2e:92:12:c1:ab:
         32:91:3b:1b:d5:e1:9e:71:d2:6c:8f:ac:11:b8:14:86:dd:1d:
         d4:f9:40:40:a7:d2:a5:8d:4a:d7:d0:5c:28:af:9c:8f:3e:37:
         31:5c:49:a4:92:e7:a1:c4:bd:dc:f4:91:ed:25:5d:c6:e8:06:
         b1:88:cb:2f:6d:21:82:64:81:94:05:4d:3e:3f:3d:50:85:00:
         0d:2f:d1:4d:2e:c3:27:d3:59:95:95:24:ac:f9:a3:54:94:83:
         4b:fb:45:44:11:02:63:be:05:a5:9c:20:48:fd:c2:64:3b:e1:
         76:ee:17:58:1f:df:96:d3:f9:5f:f0:19:69:82:b9:10:0b:e2:
         4c:91:b8:b9:ab:02:b6:d9:13:45:f3:f2:5d:d9:e7:07:4b:0e:
         15:3f:bf:c1:30:88:78:d5:3a:c3:f8:07:94:34:d7:e6:22:4e:
         6f:9e:61:dd:dd:00:38:25:51:64:d9:25:03:6d:17:8e:26:cb:
         cf:a8:6d:f4:86:99:51:88:39:2c:c2:66:5d:d9:51:7c:da:be:
         bf:75:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:58:19 2025 by rpki-client