Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa
File:                     3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa (raw, json)
Hash identifier:          VX1FbfK8AQTc4bGYZYXu8IgOd62CMLjzGmuEWNGS/lI=
Subject key identifier:   F9:8F:8F:CC:91:69:88:83:F2:FB:F2:02:2C:0F:D0:74:A2:FA:81:59
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7EE93387B675CE5632BA10BFD2A0DC2D1D1DDDF8
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:54 +0000
ROA not before:           Thu 06 Mar 2025 03:11:54 +0000
ROA not after:            Thu 05 Mar 2026 03:16:54 +0000
asID:                     262663
IP address blocks:        186.216.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e9:33:87:b6:75:ce:56:32:ba:10:bf:d2:a0:dc:2d:1d:1d:dd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:54 2025 GMT
            Not After : Mar  5 03:16:54 2026 GMT
        Subject: CN=F98F8FCC91698883F2FBF2022C0FD074A2FA8159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:a1:e3:5d:6b:99:f4:42:93:ba:0e:12:0e:
                    6d:bc:1e:b5:ec:25:cb:79:c9:94:51:8e:4f:d4:86:
                    85:f9:26:17:9b:1f:06:a8:ed:9a:44:a5:58:f3:32:
                    28:b2:ec:fd:77:cd:de:26:e2:6b:c1:01:05:01:de:
                    36:fc:9e:1d:b5:f7:7f:88:92:7f:ec:8a:5c:b4:42:
                    91:9e:b3:85:2b:b8:44:e2:16:0a:fb:12:64:dd:39:
                    e9:6f:78:07:27:18:0a:40:d2:db:69:13:9a:eb:43:
                    ee:cf:2c:b4:16:3b:af:a1:11:2b:a8:07:ae:b6:51:
                    1a:fb:a9:f4:a8:49:17:5a:1d:8f:c1:77:af:ac:57:
                    6d:cc:19:16:62:4f:dc:40:bb:3d:63:e7:cc:b2:3a:
                    fb:00:7c:d4:b2:a0:c0:cf:0e:14:e4:d8:eb:db:b8:
                    7b:f7:47:ec:31:12:79:9d:be:47:4d:15:2e:1e:e1:
                    6f:25:48:bb:2b:ce:a9:3e:4d:fb:5e:74:0a:8a:c4:
                    7a:d1:b3:d4:1e:21:c3:c1:0c:72:da:c8:8d:83:34:
                    07:2d:05:56:c6:fb:20:79:fb:56:87:ad:81:20:7a:
                    52:e3:bb:84:c5:fc:1c:ee:03:b8:b6:96:ae:93:c4:
                    90:d5:16:d9:25:86:67:10:15:94:c5:d8:76:14:47:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:8F:CC:91:69:88:83:F2:FB:F2:02:2C:0F:D0:74:A2:FA:81:59
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32322d3232203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ca:91:52:dd:71:f0:3e:ac:58:7d:3d:89:15:d0:0e:46:32:
         36:49:dc:e9:e0:87:01:f9:c9:c9:1e:7f:29:39:61:5e:e5:1f:
         34:55:43:34:61:7d:91:f9:bb:2a:87:44:0c:fa:45:bb:94:a6:
         42:14:7d:e0:d1:e0:f1:d0:73:72:3f:a1:56:98:1a:a3:fd:9b:
         b0:fd:a3:6e:f0:72:23:75:b2:18:c1:7a:2e:01:52:25:e7:7f:
         fc:b9:fb:4f:1a:16:7b:94:39:16:0a:3e:dd:15:d3:b8:dc:80:
         3e:0d:05:1b:1e:4f:4d:fd:23:9f:99:70:25:a3:14:65:c3:0e:
         e4:b3:c1:45:13:d6:24:9c:af:a5:a0:71:35:03:5b:b1:a9:dc:
         93:2c:64:42:4f:38:a2:2c:98:22:9d:d3:40:fe:d9:7c:44:c0:
         c2:22:0e:68:62:40:fa:44:38:72:53:da:67:94:85:ff:0d:63:
         d3:9c:c1:bc:25:55:13:73:df:33:0f:43:fa:9b:d0:73:e5:f1:
         8a:1b:33:5e:30:40:ed:5f:f6:f4:6a:57:a6:23:4c:65:3d:f1:
         64:79:8f:26:d7:6d:7c:42:08:39:9e:43:4c:b0:6d:b9:e7:cc:
         63:ba:85:f4:24:ea:12:28:86:cd:d4:27:ad:e4:10:b4:fc:ba:
         6d:42:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:35:27 2025 by rpki-client