Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          lAw6p0W+emdVS7NRBZyIxnMM/FYR2Mkzat3/Xwsj46M=
Subject key identifier:   63:81:FB:C0:BF:2D:AC:B1:EB:E5:60:A8:E0:6A:6F:EC:7C:DD:25:B0
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2F02F63318D83ED0183366E4CAF0B9A2120ECAC0
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:03 +0000
ROA not before:           Thu 04 Apr 2024 02:14:03 +0000
ROA not after:            Thu 03 Apr 2025 02:19:03 +0000
asID:                     262663
IP address blocks:        186.216.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:02:f6:33:18:d8:3e:d0:18:33:66:e4:ca:f0:b9:a2:12:0e:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:03 2024 GMT
            Not After : Apr  3 02:19:03 2025 GMT
        Subject: CN=6381FBC0BF2DACB1EBE560A8E06A6FEC7CDD25B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:1a:d4:28:66:ef:f2:65:01:6c:ef:6d:9a:
                    64:bb:bc:0d:20:20:a0:88:f9:e4:19:31:c8:82:d9:
                    21:f2:f7:56:a8:f2:51:8c:75:7b:14:bc:c6:da:bc:
                    f9:10:cb:ee:25:18:29:b4:a7:9e:2b:9d:9b:73:3b:
                    f5:ca:cb:09:76:b8:8e:73:85:9f:05:c5:44:31:68:
                    f0:bc:a2:c5:82:a9:6c:37:dd:9e:2a:bc:6e:dd:24:
                    3d:6e:fb:1e:7a:fa:ec:e4:ca:c6:c9:bb:d2:48:57:
                    7b:17:a9:ca:4e:4c:27:46:d5:74:d3:de:07:b1:bd:
                    a0:a9:2e:33:51:eb:c6:aa:7e:c1:06:37:ec:53:f9:
                    e8:7b:45:e2:fe:c8:f6:27:3a:aa:66:61:e9:da:7a:
                    41:bd:6e:92:49:c5:bb:50:88:5e:b8:34:5d:87:3b:
                    74:e5:b9:e7:10:69:0c:9c:bc:bb:4b:36:bd:66:92:
                    4c:7e:7c:3a:f8:90:53:7b:6a:2d:36:56:a9:a4:e4:
                    db:a8:7b:c8:af:fc:fa:ec:f9:7e:b8:ea:8b:58:ed:
                    f9:04:fc:51:82:ca:89:b2:d4:57:c7:1e:5d:95:ee:
                    23:31:62:5f:16:52:38:bc:e3:47:a3:f6:eb:52:5b:
                    30:97:a5:a1:ff:82:e2:f8:9b:ac:32:2c:de:d7:fa:
                    b4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:81:FB:C0:BF:2D:AC:B1:EB:E5:60:A8:E0:6A:6F:EC:7C:DD:25:B0
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:81:75:b1:6d:a2:ba:8f:ab:22:0a:7c:69:4a:9b:73:c5:e3:
         8f:05:f0:ce:e6:1a:3a:1a:f8:d1:53:30:4c:2f:80:24:f6:b1:
         bd:2b:90:c1:d6:fb:26:a1:1e:57:35:11:59:1f:2e:04:a9:4f:
         ed:27:49:30:b8:85:73:8d:91:2f:4d:19:42:19:5d:7e:98:ad:
         6d:9c:32:81:c1:36:5b:8a:bf:f0:37:57:05:c9:60:a0:6f:d5:
         78:c2:69:de:1d:69:dc:2b:f4:18:3d:a9:04:47:63:0e:b5:39:
         dd:16:32:70:5d:84:62:ff:55:7b:95:9d:24:50:f1:f4:44:6f:
         e4:73:aa:f8:bd:3d:cb:10:07:5f:48:65:70:7b:05:5a:3c:b1:
         fd:f0:d7:3f:71:09:71:17:3a:64:ff:4f:3d:aa:d2:2f:cf:94:
         23:0a:87:6e:c5:49:59:5d:1e:d4:c6:9c:47:b5:ea:ea:39:ee:
         1b:7a:eb:f5:96:1c:d7:8e:cb:1a:c0:9a:13:96:a6:35:ca:af:
         9a:ec:a7:18:e3:cd:ef:d6:4a:45:8e:cc:3b:5f:33:73:c7:b8:
         3b:b1:3f:e0:45:b0:eb:a6:b4:72:70:d7:db:ab:01:c0:a4:75:
         eb:c5:4e:2c:16:7f:ad:1c:6a:59:74:a4:ef:51:93:cb:29:62:
         1d:de:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:02 2024 by rpki-client on console-ams.rpki-client.org