Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          77R2muYZhEQpbSLg/BvpqblvkmEKteDYyCHF5aQecR4=
Subject key identifier:   95:14:4E:8E:58:9B:A6:1E:A9:FF:23:99:A5:C2:5B:F4:22:37:F9:29
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       694814865D8C19198F4C1087F3666B1D2046DF3A
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:05 +0000
ROA not before:           Thu 04 Apr 2024 02:14:05 +0000
ROA not after:            Thu 03 Apr 2025 02:19:05 +0000
asID:                     262663
IP address blocks:        186.216.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:48:14:86:5d:8c:19:19:8f:4c:10:87:f3:66:6b:1d:20:46:df:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:05 2024 GMT
            Not After : Apr  3 02:19:05 2025 GMT
        Subject: CN=95144E8E589BA61EA9FF2399A5C25BF42237F929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:fd:bb:70:33:a4:1b:55:81:46:bf:9a:a4:
                    e6:52:23:26:ea:62:f0:a1:1a:e1:ea:d2:41:f6:c9:
                    0e:0d:e2:98:89:34:82:6a:37:f4:13:42:87:25:0c:
                    a4:fc:0e:41:46:8a:26:d0:b4:90:49:96:35:fa:bf:
                    71:b9:a7:40:98:1f:6d:ad:5d:ff:8d:15:1e:67:37:
                    e7:26:8e:fb:89:c9:9c:11:f0:75:75:f8:58:40:38:
                    5c:e1:28:87:8c:19:47:f7:60:9b:d7:d0:1d:bf:ea:
                    10:8a:7a:80:99:4e:7f:32:da:9f:a7:4c:82:98:c0:
                    7c:b1:b5:28:33:fd:6e:c5:cf:a5:61:f5:69:b3:51:
                    32:8c:c3:a1:59:2d:8a:01:eb:7f:a7:a4:05:05:42:
                    4b:f7:a5:9d:26:2c:1a:6b:5d:c0:4e:03:0b:84:7d:
                    79:a0:51:e3:8f:48:e5:39:d0:ec:9f:16:f0:d5:72:
                    0f:b6:58:85:0c:0d:db:0f:a1:e1:c7:4b:ba:45:5a:
                    6d:9f:a6:5d:a9:52:59:e9:f4:4f:46:bf:ad:fa:61:
                    fa:61:86:8b:33:13:10:95:81:8b:c5:65:94:3b:d4:
                    4c:13:cb:c1:38:dc:f1:e1:9b:78:74:b9:f0:7a:a3:
                    6a:94:84:00:0d:53:4c:7c:ba:b3:54:6e:92:82:fd:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:14:4E:8E:58:9B:A6:1E:A9:FF:23:99:A5:C2:5B:F4:22:37:F9:29
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:15:b8:f8:aa:f1:dd:93:b0:15:a4:1c:cd:99:49:58:c9:5c:
         df:83:06:7c:fb:d1:0c:81:55:b3:4c:0a:81:79:0e:bc:c3:1d:
         5e:e5:79:80:54:39:78:37:c5:ea:14:76:59:c7:3d:38:2e:33:
         17:e0:44:3a:dd:4d:73:9d:9f:e3:28:d3:5f:1f:f8:d0:d7:10:
         b1:21:13:bb:1b:39:c5:ec:92:40:71:7e:4c:c0:bb:3f:a9:b5:
         eb:ce:4b:59:8e:59:8f:50:98:fe:f9:31:e5:c0:48:eb:8c:b6:
         3c:2a:fc:78:ec:7b:c2:cc:3e:c9:74:33:59:5d:10:04:5a:69:
         a4:e8:94:22:e4:43:2d:eb:1b:07:b1:42:63:06:71:fd:da:93:
         db:0e:a7:55:ba:25:56:1c:a1:4a:a4:5e:de:23:a1:b6:78:7b:
         73:2b:27:ed:74:a9:a5:b2:dc:e6:9d:ab:ce:b3:cc:72:7b:bb:
         60:41:19:54:e8:6a:64:4d:44:f0:0b:38:c2:73:e2:2c:b8:7c:
         ea:65:b3:95:0d:4c:52:a8:54:fb:74:df:7b:01:e9:35:a9:4f:
         16:b5:1f:e2:98:67:3e:ac:ba:6b:42:6e:60:39:24:11:69:78:
         25:ff:12:1a:86:69:d0:d2:5a:a5:f8:7a:76:7a:46:69:4d:a8:
         95:e0:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:35 2024 by rpki-client on console-ams.rpki-client.org