Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          cosCKxH8QOezt8LXp5m9xlxkr5oKICAtXhfk3/Rr/B8=
Subject key identifier:   25:EA:11:EB:72:2F:6E:E2:63:8F:C1:78:0F:FB:75:30:04:97:34:FC
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       3747A516ABD71AEDE4B7ED1EF40FDD2E6E7FA971
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:54 +0000
ROA not before:           Thu 06 Mar 2025 03:11:54 +0000
ROA not after:            Thu 05 Mar 2026 03:16:54 +0000
asID:                     262663
IP address blocks:        186.216.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 06:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:47:a5:16:ab:d7:1a:ed:e4:b7:ed:1e:f4:0f:dd:2e:6e:7f:a9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:54 2025 GMT
            Not After : Mar  5 03:16:54 2026 GMT
        Subject: CN=25EA11EB722F6EE2638FC1780FFB7530049734FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:5a:1a:35:af:c3:66:aa:e8:dd:ad:06:51:
                    99:a6:ca:d1:ec:da:9d:7b:97:f2:29:09:0a:3c:80:
                    f3:76:88:52:44:a4:8d:21:d5:65:0f:19:3e:13:43:
                    89:69:c0:c2:1a:5d:93:c0:15:e1:7b:e7:ec:30:e5:
                    ed:c1:07:ad:cb:6f:47:da:a0:68:88:0d:f5:f6:19:
                    1a:f4:1c:95:8d:95:a1:be:a2:17:af:af:79:e6:d3:
                    4d:19:66:39:46:4f:ca:8d:04:d2:48:c8:6e:25:54:
                    e4:a2:76:48:a8:d1:7b:c8:35:e3:dc:9f:fa:80:32:
                    05:b2:25:05:9c:84:54:36:a2:e4:e0:07:ea:af:48:
                    25:cd:37:b5:40:a2:e5:61:a6:94:ac:70:a6:fb:54:
                    3f:20:8e:ff:6c:81:28:3b:c1:0b:8a:52:3f:f3:6a:
                    c1:2a:25:fc:c8:d6:01:3f:91:ed:da:a6:b5:e5:8f:
                    61:c3:49:56:1e:80:b5:9e:64:d7:40:f5:b0:02:e0:
                    5d:01:93:9b:91:67:d1:d9:1b:0c:e3:36:3e:64:95:
                    ec:5e:a9:91:f4:1e:c7:77:81:8f:e3:67:ab:46:05:
                    ee:e6:c1:4c:ba:2e:dd:2c:75:5d:be:53:8a:a9:82:
                    e5:c9:b8:54:47:e4:79:98:79:61:d9:d0:76:63:8b:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EA:11:EB:72:2F:6E:E2:63:8F:C1:78:0F:FB:75:30:04:97:34:FC
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:93:33:ee:60:75:9b:c3:dc:74:42:e8:2b:d0:40:a4:25:
         24:f1:b2:d3:f5:73:8c:da:a5:19:07:8a:94:85:37:c5:89:9a:
         c1:b4:cf:c4:b1:d4:cb:47:cf:71:83:27:db:b6:e3:2e:f1:cb:
         8a:ec:2e:c4:a1:1b:b3:86:1a:1c:53:aa:48:60:6d:49:78:0e:
         b1:c4:82:62:5e:3f:91:01:ff:cc:c7:4c:0b:95:01:dc:a9:ae:
         fd:cd:e7:2d:a6:c7:d5:cd:5b:c1:65:78:93:ee:6f:7b:e0:f0:
         d5:0d:0c:ba:62:5b:1d:18:19:76:c6:26:6e:47:90:3c:59:aa:
         92:63:38:54:36:89:ac:b6:82:5c:d0:13:62:3e:ec:97:37:73:
         2d:11:0f:7d:f7:3f:ef:af:df:99:c6:37:2a:96:12:0d:ec:96:
         aa:e6:d4:9d:1f:9c:e9:8b:66:3f:0c:43:50:5e:51:17:43:79:
         24:d6:13:a3:e1:04:a0:22:8a:ba:c0:59:d1:7d:d4:7d:a8:d5:
         da:28:36:b4:85:4a:11:00:47:b2:f0:fd:13:34:f0:f1:01:40:
         87:e5:40:05:7a:1c:8f:6b:35:06:21:64:ea:6d:4c:04:bb:45:
         b2:0d:49:a7:1f:95:a1:a7:11:92:0f:d5:92:9b:0c:1a:67:bc:
         71:74:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:59 2025 by rpki-client