Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          oN3HwRaYUGEetFS3WTyczDdDnCqHZ2/lTB2LPxnyMh0=
Subject key identifier:   B9:96:48:AB:89:64:DE:11:FA:96:EA:8B:FF:E6:64:54:F0:32:C7:D4
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       64DE0DC19803A20375EAAAB681D4F5BA3E6F2E04
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:58 +0000
ROA not before:           Thu 04 Apr 2024 02:13:58 +0000
ROA not after:            Thu 03 Apr 2025 02:18:58 +0000
asID:                     262663
IP address blocks:        186.216.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:de:0d:c1:98:03:a2:03:75:ea:aa:b6:81:d4:f5:ba:3e:6f:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:58 2024 GMT
            Not After : Apr  3 02:18:58 2025 GMT
        Subject: CN=B99648AB8964DE11FA96EA8BFFE66454F032C7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:e2:4e:7c:f2:87:9c:26:9e:a5:97:33:11:
                    48:74:93:24:54:1c:36:4d:98:fa:5f:5d:97:ed:59:
                    68:3f:10:6b:00:41:f1:c1:20:58:8b:83:e0:8c:37:
                    71:70:f0:97:44:d1:66:01:cc:64:10:10:d5:35:c5:
                    92:aa:7d:f2:0d:fa:ba:37:8e:00:1f:f1:0f:47:83:
                    07:17:19:81:26:52:dd:31:f2:6b:0c:65:bf:e2:27:
                    aa:56:98:40:29:73:69:07:b2:c2:b0:c6:2b:b1:c0:
                    9c:5a:e7:66:01:79:98:fc:12:3d:98:67:01:02:87:
                    fd:12:aa:eb:ca:87:e2:5e:a0:c8:6e:40:ff:9e:8b:
                    28:ea:c0:eb:9e:ab:d1:bb:99:04:76:d5:f8:8d:46:
                    78:63:ea:b8:27:2f:9c:30:86:3f:98:ab:f5:b6:3c:
                    e0:e1:b5:7f:cd:02:8d:70:12:56:06:50:96:58:c7:
                    34:9f:0b:0f:5c:ea:24:d9:b9:f8:a3:26:3e:12:10:
                    0b:98:30:19:50:51:7d:e2:27:2a:b6:2e:47:ba:34:
                    e0:00:cf:9b:16:c0:25:02:8a:d3:29:c4:60:eb:14:
                    8e:01:ef:0a:b7:f6:6b:b5:18:7d:7d:c1:bb:50:b9:
                    33:ad:50:10:63:28:1f:aa:c3:02:a2:44:bc:51:09:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:48:AB:89:64:DE:11:FA:96:EA:8B:FF:E6:64:54:F0:32:C7:D4
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:34:0e:33:95:49:19:fe:a0:77:13:b6:5b:a3:a5:75:be:e7:
         3c:ec:a9:53:41:42:c5:57:67:9b:09:8d:7a:b0:ea:88:26:1c:
         e9:40:97:df:33:94:9f:35:86:ca:0b:68:39:2c:d5:d5:30:c2:
         75:45:dc:1a:e7:f7:bd:14:09:ea:d2:3d:01:00:32:93:af:45:
         17:de:ac:75:da:77:9a:0f:c7:48:ff:c3:ae:4a:e7:ed:bf:a8:
         b2:fb:d2:b5:99:e1:88:aa:a5:c5:2b:5f:fb:bb:27:fe:0a:96:
         0a:38:0f:52:c1:eb:01:10:59:3d:89:85:f0:61:92:3f:26:9f:
         c4:bb:af:f6:cd:c1:92:35:ec:81:e0:a6:fe:fc:32:b6:5e:92:
         8f:6a:2b:c0:46:62:0c:71:d5:59:95:bd:2b:f0:cd:c0:7c:04:
         10:bb:d7:25:31:93:d1:a9:94:9b:43:f6:5b:05:b3:63:70:ac:
         1d:02:c3:11:91:75:ad:6f:e2:c7:50:01:07:3e:d9:88:74:d0:
         b8:17:d5:c3:f5:e2:87:db:74:90:69:50:8d:6c:d7:36:0b:d4:
         a3:70:97:4f:c5:18:a8:c8:b1:21:9f:bf:66:2b:42:17:ed:b5:
         12:7b:0b:f5:60:b9:3f:2f:f8:c9:20:bc:9f:30:e5:e5:e2:ca:
         11:a4:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:43 2024 by rpki-client on console-ams.rpki-client.org