Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33312e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          L4EAW4TDTL/cFAemrpQtGnmAPmyIVPLHUCFEjjxFJ6M=
Subject key identifier:   37:BA:96:9E:23:57:AA:EA:0A:AC:AC:5A:41:B4:93:26:9E:92:20:68
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       125C7CEF2A5C38BE546C15B84EA6A859FB1CEA72
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:04 +0000
ROA not before:           Thu 04 Apr 2024 02:14:04 +0000
ROA not after:            Thu 03 Apr 2025 02:19:04 +0000
asID:                     262663
IP address blocks:        186.216.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5c:7c:ef:2a:5c:38:be:54:6c:15:b8:4e:a6:a8:59:fb:1c:ea:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:04 2024 GMT
            Not After : Apr  3 02:19:04 2025 GMT
        Subject: CN=37BA969E2357AAEA0AACAC5A41B493269E922068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:06:88:bd:93:80:73:77:cb:f9:b4:35:d6:
                    74:95:33:69:06:13:37:39:2a:7d:b3:73:e4:9a:f6:
                    f6:7c:f3:9a:0a:bf:b5:b5:66:cd:ed:ae:45:f7:c7:
                    96:16:73:32:15:c7:6f:10:6f:91:23:4d:e3:af:07:
                    62:83:b3:82:8e:a0:c7:51:0a:ba:be:42:a6:f9:d7:
                    e6:e3:c0:f5:a7:c6:a4:63:28:8a:04:f9:e4:db:56:
                    4c:cd:1b:bf:b3:2d:7c:82:33:f7:30:06:b3:e0:91:
                    5b:9b:47:cf:b1:66:ec:ac:80:58:fb:4e:ca:31:4c:
                    82:6f:9a:ef:05:20:82:50:68:30:6e:59:79:cf:36:
                    fe:86:12:60:43:61:2c:6f:b7:c0:d7:bf:db:84:da:
                    62:2a:fa:1d:96:d9:55:85:dc:6d:8d:0f:58:ef:b0:
                    39:b8:be:b3:00:1d:ca:58:3d:f9:80:39:1b:22:9b:
                    e5:11:e3:3f:8b:dd:39:3f:06:05:ec:29:00:39:7d:
                    d9:b4:78:a6:97:c1:9e:db:fc:58:d3:9d:0e:cb:79:
                    9a:24:87:ed:55:2e:76:d2:37:6f:70:d5:a9:b0:75:
                    c6:9c:85:51:3e:e7:70:38:86:3f:a7:6a:29:ac:55:
                    63:0a:c7:7b:92:c3:40:a1:4a:d6:4b:a1:4b:3d:fd:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BA:96:9E:23:57:AA:EA:0A:AC:AC:5A:41:B4:93:26:9E:92:20:68
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:13:3b:f2:b1:8b:88:f0:ef:c6:61:c8:cb:e1:39:33:8c:
         e2:0d:81:a3:03:a3:97:62:7a:9c:7b:32:a0:8c:af:c0:d5:f2:
         32:d5:52:a0:2f:e5:7f:16:62:94:e9:40:d2:4c:89:eb:ed:2a:
         4c:5f:48:55:aa:d9:b3:2b:77:82:ee:6d:78:75:02:8f:6c:99:
         ac:a2:3b:25:d4:51:c3:67:1e:36:50:a9:46:e6:7e:35:0b:15:
         e2:c2:0b:61:17:fb:b1:c8:9c:b5:91:12:0d:b0:e8:38:c8:c0:
         e6:4a:4e:28:f4:1a:d7:c3:64:6f:b4:b4:67:2d:e3:7c:de:66:
         56:bd:8b:18:a8:79:ee:e5:21:f0:a1:47:7c:1c:f4:4e:f4:1e:
         b2:b8:0c:0b:ed:e6:a9:c1:12:4d:76:82:75:e5:63:61:52:d9:
         53:0f:b8:bc:a8:e7:e9:04:2c:87:9a:65:23:72:44:8d:48:d3:
         f8:01:c9:dd:e9:0d:8a:db:b3:fe:70:d9:4e:3b:98:7b:ab:99:
         91:2a:52:ff:4b:c3:e8:d1:30:0e:b0:97:c3:53:04:b3:49:c1:
         53:6a:83:33:e1:e8:8c:55:5e:ba:d8:1b:bf:18:d2:6f:b5:7c:
         56:b3:4f:e8:bd:9d:d1:08:e5:0f:2f:bd:37:60:50:b0:92:1a:
         1f:37:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:02 2024 by rpki-client on console-ams.rpki-client.org