Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa
File:                     3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa (raw, json)
Hash identifier:          +RrMhSOXatebnNq6QCJZDPIA1tZsKSBqn4wpBcWQ5vE=
Subject key identifier:   37:82:9D:A8:34:AA:58:A3:C7:93:CC:00:3F:A0:B6:C7:4A:DD:35:5E
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2F950F4D80D6EF27EA2849BEFBE8DB29E0C68847
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:09 +0000
ROA not before:           Thu 04 Apr 2024 02:14:09 +0000
ROA not after:            Thu 03 Apr 2025 02:19:09 +0000
asID:                     262663
IP address blocks:        186.216.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:95:0f:4d:80:d6:ef:27:ea:28:49:be:fb:e8:db:29:e0:c6:88:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:09 2024 GMT
            Not After : Apr  3 02:19:09 2025 GMT
        Subject: CN=37829DA834AA58A3C793CC003FA0B6C74ADD355E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2c:88:91:e8:90:6b:f1:d0:d3:32:c0:3a:44:
                    cf:d3:5e:ca:de:6d:a3:84:30:19:ca:f9:df:ca:e2:
                    33:ac:38:48:1a:9d:32:d7:35:65:05:c5:bb:67:6a:
                    2e:b5:ae:ec:d6:55:52:e3:b4:9a:4a:e7:19:39:23:
                    d7:d3:8a:55:c9:30:49:f0:0f:85:ec:ee:fe:f1:24:
                    fb:79:b2:a2:9e:98:eb:07:c6:5e:0d:f9:6a:44:34:
                    3d:db:4c:b6:34:f1:f5:69:d7:5f:bb:44:ea:86:13:
                    fd:38:f8:a9:d2:c2:d4:8b:ca:61:cd:ee:90:1e:06:
                    56:9a:56:02:99:62:6b:59:56:38:06:68:65:b6:cb:
                    63:17:d7:57:96:2e:b0:90:8c:7e:13:03:83:98:ef:
                    31:0a:c5:6c:5b:9c:6d:51:f4:48:57:4c:d1:5c:6f:
                    31:ff:79:ac:c1:85:72:5f:35:92:37:21:c5:e3:70:
                    a8:c8:9f:13:c3:aa:37:cf:72:16:d4:a6:5c:12:fb:
                    dc:f9:93:44:76:28:c3:f3:0a:a5:15:1b:28:36:4f:
                    c7:86:43:4d:8f:64:0c:17:34:dd:28:aa:f5:76:8f:
                    9d:01:88:b7:dc:27:fe:ac:ed:82:79:a5:1b:48:0b:
                    88:fd:3c:2f:03:b7:c2:58:3f:e4:01:cd:0c:07:a4:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:82:9D:A8:34:AA:58:A3:C7:93:CC:00:3F:A0:B6:C7:4A:DD:35:5E
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ea:9e:ce:58:8f:fd:7e:ad:ea:a8:dc:5e:cd:41:86:5a:ee:8d:
         a6:00:ea:74:3b:26:5e:c0:6b:a7:2e:b1:b7:98:7a:17:ea:4d:
         62:4d:72:1f:0f:fa:3b:83:d0:e8:8a:6e:28:e9:34:a6:55:ed:
         fd:d0:94:ea:c9:64:c3:05:dd:84:ab:1b:ac:01:25:18:aa:2a:
         d8:d2:3f:2e:51:34:3e:c9:1e:e8:fd:24:4e:cb:7d:7e:79:fe:
         e3:fe:6a:58:a4:17:3a:83:b3:f6:6f:f7:d3:57:a4:8f:ad:6f:
         d8:93:53:b8:d0:f0:3d:67:6c:26:d9:1f:77:a9:12:40:ef:9b:
         35:fd:81:47:3c:5e:b9:3c:26:93:af:3e:24:04:e3:d2:0a:36:
         a0:ac:5c:01:51:85:92:88:40:30:34:84:11:70:3f:72:ae:ad:
         d5:26:ee:28:52:3b:69:81:57:fb:75:cf:41:3d:e4:a3:27:2c:
         cc:c9:f9:7e:b7:26:b6:e1:3a:74:c7:10:e7:81:c4:f9:60:87:
         a2:28:6f:d6:18:95:0f:2c:8e:87:4b:a2:e5:5c:92:54:8e:4f:
         c8:88:e3:4c:61:de:5c:15:26:d0:17:4e:c7:b3:fe:fd:eb:e0:
         cf:3d:77:bf:fc:8c:5b:5b:8d:2d:cb:47:2a:2c:e1:72:09:9e:
         55:78:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:44 2024 by rpki-client on console-ams.rpki-client.org