Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32362e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          e4kser9pNsN4dTXIglInCI5Mvzb7WwzHiAvWtHLorOw=
Subject key identifier:   D0:89:BD:EC:9F:BD:2B:CA:6F:CD:B6:85:D9:6C:A0:2A:73:E0:DB:9B
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       3948A0573D761F9604A8F80FDD55B19DDA79D0DD
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:08 +0000
ROA not before:           Thu 06 Mar 2025 03:12:08 +0000
ROA not after:            Thu 05 Mar 2026 03:17:08 +0000
asID:                     262663
IP address blocks:        186.216.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:48:a0:57:3d:76:1f:96:04:a8:f8:0f:dd:55:b1:9d:da:79:d0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:08 2025 GMT
            Not After : Mar  5 03:17:08 2026 GMT
        Subject: CN=D089BDEC9FBD2BCA6FCDB685D96CA02A73E0DB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:40:81:64:d7:19:fa:73:e6:84:a7:d1:01:
                    78:41:39:ef:21:11:aa:dd:22:b7:2c:43:30:7f:a5:
                    5f:76:9a:0b:7e:38:68:1e:22:9d:32:e4:bd:ad:04:
                    4c:0b:31:35:6d:13:b6:da:f6:d0:32:ff:ec:f2:21:
                    21:31:3d:ff:83:ba:5c:99:ba:7e:58:61:66:12:28:
                    a9:6d:fe:1f:f3:47:18:e1:79:18:00:2a:7c:e2:95:
                    e8:72:6f:96:1e:36:6d:cd:94:e1:f6:a5:26:a2:c9:
                    40:58:66:6c:a4:a1:a6:a9:51:34:98:02:ad:6d:63:
                    e3:9d:31:1e:89:25:23:c9:de:87:9f:71:4b:52:ed:
                    bc:9a:20:4a:82:88:ed:c3:2a:03:20:c0:e6:68:9c:
                    45:2b:a5:94:52:ac:c8:aa:6e:78:e0:ad:ee:b0:89:
                    ad:f9:d2:ec:62:00:b0:db:ec:c7:46:5e:ba:86:ce:
                    34:6b:57:6b:1a:87:d8:9d:30:95:24:e4:f3:29:80:
                    36:f3:23:c0:50:bb:22:b2:f9:c8:69:2f:63:ba:e3:
                    51:f9:85:f7:92:d0:53:1b:16:0a:d7:9d:7c:ec:6a:
                    79:6d:86:a7:4b:24:be:b7:a3:e5:4a:fa:1f:ef:50:
                    b1:7e:55:54:f2:31:64:39:44:8e:4d:8c:a7:6a:98:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:BD:EC:9F:BD:2B:CA:6F:CD:B6:85:D9:6C:A0:2A:73:E0:DB:9B
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:f7:33:5b:cd:f4:60:55:bf:56:5d:db:d4:34:5a:26:4b:63:
         28:b9:2f:58:56:db:3e:5e:9d:ab:16:b7:9c:7c:57:8e:96:bd:
         69:2f:a6:c5:58:87:90:61:9b:7f:de:11:42:d1:02:a7:69:b5:
         4e:f9:b8:ac:ce:99:80:e1:03:7e:b2:0b:3d:48:88:47:aa:e5:
         c9:6d:2d:e8:61:1d:a9:22:ae:3f:38:bc:5c:f1:c9:91:8f:91:
         bb:72:4c:92:04:12:fb:19:bc:5a:03:df:52:8f:db:0e:d0:fa:
         ee:d1:ba:ba:47:ab:32:39:2f:a7:01:72:0e:76:e9:01:66:07:
         a7:ba:89:79:3e:d7:58:fd:a6:12:7b:e8:a6:86:60:4f:3a:25:
         b2:59:31:bd:38:22:27:e7:b0:cf:52:f1:fc:2b:3f:de:c3:7d:
         e5:44:47:77:23:ec:94:0b:d4:a9:7d:01:f8:f7:84:57:45:a5:
         13:63:94:d3:54:d2:05:3d:08:b2:c7:da:bc:94:2c:07:9a:29:
         6e:45:f9:31:f8:25:95:1c:9b:da:a5:c0:db:7a:14:6a:03:d7:
         2d:47:d2:54:fe:3b:4d:3e:59:20:e3:11:04:3e:ea:91:44:14:
         96:8c:08:ef:15:da:78:49:c5:b9:a9:2b:9b:3b:d9:fb:10:dd:
         bb:ad:3d:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOUigVz12H5YEqPgP3VWxndp50N0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzEyMDhaFw0yNjAzMDUwMzE3MDhaMDMxMTAvBgNV
BAMTKEQwODlCREVDOUZCRDJCQ0E2RkNEQjY4NUQ5NkNBMDJBNzNFMERCOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZsUCBZNcZ+nPmhKfRAXhBOe8h
EardIrcsQzB/pV92mgt+OGgeIp0y5L2tBEwLMTVtE7ba9tAy/+zyISExPf+DulyZ
un5YYWYSKKlt/h/zRxjheRgAKnzilehyb5YeNm3NlOH2pSaiyUBYZmykoaapUTSY
Aq1tY+OdMR6JJSPJ3oefcUtS7byaIEqCiO3DKgMgwOZonEUrpZRSrMiqbnjgre6w
ia350uxiALDb7MdGXrqGzjRrV2sah9idMJUk5PMpgDbzI8BQuyKy+chpL2O641H5
hfeS0FMbFgrXnXzsanlthqdLJL63o+VK+h/vULF+VVTyMWQ5RI5NjKdqmKybAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0Im97J+9K8pvzbaF2WygKnPg25swHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62BowDQYJKoZIhvcNAQELBQADggEBALT3M1vN
9GBVv1Zd29Q0WiZLYyi5L1hW2z5enasWt5x8V46WvWkvpsVYh5Bhm3/eEULRAqdp
tU75uKzOmYDhA36yCz1IiEeq5cltLehhHakirj84vFzxyZGPkbtyTJIEEvsZvFoD
31KP2w7Q+u7RurpHqzI5L6cBcg526QFmB6e6iXk+11j9phJ76KaGYE86JbJZMb04
IifnsM9S8fwrP97DfeVER3cj7JQL1Kl9Afj3hFdFpRNjlNNU0gU9CLLH2ryULAea
KW5F+TH4JZUcm9qlwNt6FGoD1y1H0lT+O00+WSDjEQQ+6pFEFJaMCO8V2nhJxbmp
K5s72fsQ3butPSk=
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:10:09 2025 by rpki-client