Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          UoGLeKUj27AroWpYfkvMyo1VGiB08GTV+ftJtr73nDQ=
Subject key identifier:   E0:37:FA:3D:3B:32:9C:E5:C3:42:56:07:F8:CC:E6:10:96:5F:6C:3B
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7B7936F87CD88BD6764D73DDC0F4EDA6BA7CEBFA
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:59 +0000
ROA not before:           Thu 06 Mar 2025 03:11:59 +0000
ROA not after:            Thu 05 Mar 2026 03:16:59 +0000
asID:                     262663
IP address blocks:        186.216.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:79:36:f8:7c:d8:8b:d6:76:4d:73:dd:c0:f4:ed:a6:ba:7c:eb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:59 2025 GMT
            Not After : Mar  5 03:16:59 2026 GMT
        Subject: CN=E037FA3D3B329CE5C3425607F8CCE610965F6C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:f5:78:cd:f6:2b:e9:79:f1:fe:f3:83:4c:
                    c8:ed:97:a3:b4:3c:33:fb:0d:e4:62:f1:8f:bb:38:
                    9d:3a:61:9d:82:34:ea:52:0d:9d:66:0c:d1:ae:20:
                    bc:3e:56:c1:fb:8d:ff:9e:54:49:7e:17:23:95:97:
                    98:dc:71:55:cc:b8:4d:94:28:4c:aa:c3:cc:aa:c5:
                    6c:24:e2:61:58:a0:0d:52:b8:a4:3d:c3:30:e9:03:
                    27:90:cd:46:3e:ac:dd:00:05:4a:97:61:18:ca:74:
                    cb:b4:de:72:7b:17:72:6d:7e:d6:9c:8d:1e:9e:62:
                    25:75:8b:76:65:61:2b:60:01:11:3b:93:41:9d:07:
                    5a:41:f4:a5:2a:f4:fd:8a:97:9a:6c:ca:40:51:4f:
                    0f:4b:d8:82:c1:2e:52:64:a4:ec:d2:8e:8c:9c:c1:
                    29:c8:a7:66:83:68:98:90:53:e3:d4:0a:ee:7e:91:
                    d5:72:0e:bd:70:92:ed:54:86:51:3f:74:54:78:9f:
                    46:f7:36:f3:11:4e:04:4f:2f:8c:e3:e2:3e:0a:ee:
                    f3:03:82:d6:22:6d:36:f8:cd:0a:64:87:1a:a2:64:
                    85:1c:ba:5f:48:68:e7:18:08:bd:85:75:d0:cd:9c:
                    dd:b4:7b:de:5b:39:36:91:b8:60:14:43:7f:78:b7:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:37:FA:3D:3B:32:9C:E5:C3:42:56:07:F8:CC:E6:10:96:5F:6C:3B
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:87:31:b2:fa:1e:a0:f7:4f:84:d6:92:b0:94:eb:4b:fe:6e:
         86:2c:aa:65:39:52:3e:2c:59:1b:68:3f:73:5a:c5:77:50:79:
         27:b8:f9:46:f2:35:cd:08:2a:d9:39:6b:0c:61:1c:93:cd:5c:
         98:9f:06:28:29:92:91:b7:6a:5d:e9:11:39:67:87:c8:33:d6:
         13:29:8e:d4:e7:33:8d:a8:10:8c:51:36:84:f6:7e:02:c0:bc:
         54:db:6b:20:86:25:0e:2e:2d:93:68:98:f1:29:5f:e9:ea:7e:
         26:43:00:b0:08:76:c5:87:98:d8:f6:49:74:c8:5d:d2:52:fb:
         b2:9b:5e:84:2c:8c:8a:75:3b:62:08:10:2d:50:62:4c:4d:34:
         b5:81:4b:17:be:17:61:85:f7:7b:d7:22:cb:5e:78:96:a3:3d:
         eb:f3:7d:55:fc:7b:1b:96:3d:60:7c:e3:0c:e5:5e:ae:46:96:
         8c:a9:82:d4:3e:aa:d0:e5:0f:77:98:7a:ce:02:6e:7f:cd:1d:
         34:92:94:31:f6:73:c2:1d:63:69:9b:bc:c0:f1:73:9a:ec:52:
         9a:23:61:29:79:13:43:0f:c3:3b:f2:d4:57:a0:a8:e2:a0:9c:
         85:4d:b4:42:c2:19:9b:33:a9:81:dc:ef:37:e5:0e:a4:e4:46:
         4f:f1:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:46:13 2025 by rpki-client