Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          d6439BzE/OyqT7ZJ/F5GlCQQ9giVKvPEiBPuwB0/rbk=
Subject key identifier:   D4:0E:65:A4:D6:73:84:AA:7A:97:63:4C:D7:5E:E5:7C:D6:1F:59:E0
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1549689AFC50267EC3E9B047AD3FD4DA6E0B0E51
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:07 +0000
ROA not before:           Thu 04 Apr 2024 02:14:07 +0000
ROA not after:            Thu 03 Apr 2025 02:19:07 +0000
asID:                     262663
IP address blocks:        186.216.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:49:68:9a:fc:50:26:7e:c3:e9:b0:47:ad:3f:d4:da:6e:0b:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:07 2024 GMT
            Not After : Apr  3 02:19:07 2025 GMT
        Subject: CN=D40E65A4D67384AA7A97634CD75EE57CD61F59E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:bf:47:6e:c2:d0:59:92:15:3a:a3:41:5e:
                    7e:3f:7c:a8:61:1a:9b:11:f1:16:b3:9e:f1:4f:2d:
                    b6:bc:5c:94:fd:f9:77:c5:6d:08:bd:66:a7:31:4e:
                    a7:c7:4a:9f:a9:14:75:31:5d:1e:35:c6:bc:15:57:
                    26:57:7d:9b:71:9e:b6:59:54:70:cc:23:59:ad:8e:
                    7c:1c:fb:1c:81:c6:93:b2:5f:a4:6d:28:f6:01:fa:
                    ee:2e:8f:27:42:1c:db:ae:65:0f:0e:83:e9:28:3a:
                    a2:3d:f3:bb:af:be:70:9b:ae:92:8e:06:fb:70:31:
                    31:28:ad:01:aa:f5:be:bd:e4:63:f9:3a:d5:cf:bb:
                    d9:ad:19:81:bb:32:53:74:37:cb:63:2d:62:65:31:
                    ad:b2:78:eb:cc:29:33:84:49:cc:87:0d:fe:c0:69:
                    a2:bb:4d:78:9d:6a:a5:dd:56:a2:05:80:0d:81:ed:
                    7c:4a:15:d9:e0:2a:01:51:56:df:b9:4a:c2:57:eb:
                    dd:34:a3:7b:63:a2:b8:c4:dc:ec:ef:05:4d:1a:ac:
                    76:c1:24:0b:d4:31:53:f7:18:b2:4a:de:3c:45:66:
                    9a:54:72:56:90:4a:a2:e9:02:13:e1:9c:ea:89:a5:
                    b9:da:ca:2a:ad:2c:cc:66:40:b5:49:9d:d4:70:98:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:65:A4:D6:73:84:AA:7A:97:63:4C:D7:5E:E5:7C:D6:1F:59:E0
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:23:6c:c3:6c:54:2c:5a:59:b9:72:e3:04:87:68:e3:08:92:
         5d:a4:e9:cc:89:4e:6e:ca:9a:68:99:ef:96:1f:5e:fb:8f:b0:
         cf:d6:89:f5:8d:d5:f5:61:73:2d:92:8d:de:6a:52:b4:54:b3:
         6b:ed:6b:30:23:cb:ce:50:e2:d7:8d:cf:59:8a:6c:44:1d:d3:
         0c:49:5b:af:36:5c:85:df:a1:e7:43:7c:84:08:cd:ee:51:08:
         e7:9b:7e:9e:4a:ee:c0:be:1d:4c:c1:58:83:58:f9:48:cd:eb:
         07:12:3d:75:b0:61:88:3c:e3:fe:f9:c1:7c:01:32:5f:8d:87:
         e6:01:50:fc:26:03:e0:00:46:f5:c6:d0:83:8f:19:e7:87:9e:
         78:c0:49:16:88:44:bb:24:5e:a2:ae:9d:11:58:4f:75:64:3e:
         b5:db:e7:4c:43:2a:e9:75:83:21:e5:f5:34:5c:a0:ad:34:88:
         73:0c:14:16:1b:55:c6:2c:65:64:df:4a:f8:0c:59:b4:c8:d2:
         74:a9:a6:89:dd:05:57:97:f0:37:f2:a1:f0:e8:ba:38:a2:30:
         f0:ea:19:c1:00:0a:77:ca:03:4a:6f:2a:eb:dd:2c:7b:72:bc:
         91:53:db:a4:dc:78:c1:9a:30:fa:50:27:d0:1a:ab:be:71:b1:
         b8:29:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org