Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          bM16vndHYhPoEmTaL9q83IL+Wa2fC5ix6yzmaPPjIb4=
Subject key identifier:   64:04:51:28:7E:2B:31:B0:0A:17:E7:74:6D:2B:14:59:06:30:81:8E
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5D3D3FB05F4F5D533FE24E65F46BD1E9B6D52328
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:03 +0000
ROA not before:           Thu 06 Mar 2025 03:12:03 +0000
ROA not after:            Thu 05 Mar 2026 03:17:03 +0000
asID:                     262663
IP address blocks:        186.216.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:3f:b0:5f:4f:5d:53:3f:e2:4e:65:f4:6b:d1:e9:b6:d5:23:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:03 2025 GMT
            Not After : Mar  5 03:17:03 2026 GMT
        Subject: CN=640451287E2B31B00A17E7746D2B14590630818E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:28:e0:6a:e6:6d:7f:db:4c:ca:c9:7f:14:
                    0c:fa:01:d9:e8:6b:74:fa:bb:bb:69:e8:10:6e:13:
                    fa:fc:7e:86:63:a3:de:f2:d6:d4:66:d3:14:dc:dc:
                    0e:a9:24:9d:97:5c:7c:ba:56:81:ca:4d:ab:d3:b5:
                    bc:8e:e7:4c:6b:f3:43:91:e1:d0:8f:4a:4b:ce:58:
                    ba:d9:74:34:21:3a:22:a4:95:50:4e:a2:96:5d:e6:
                    5e:41:25:11:fe:39:6c:8a:fd:67:56:b0:f9:0f:09:
                    d3:d8:35:11:35:38:95:ae:bb:16:0a:59:d9:4e:90:
                    14:f0:16:6f:a8:f5:df:58:f7:4c:61:6f:66:7d:f1:
                    4f:d7:9b:14:6f:1a:aa:9b:af:c7:7e:87:dd:34:61:
                    0e:37:f0:80:64:f8:2d:c7:69:2c:11:82:23:f0:a8:
                    50:24:25:26:9e:69:0d:c2:37:43:12:c3:ab:35:ef:
                    02:e7:3a:0f:87:35:57:63:c4:29:ca:5a:f4:b9:9e:
                    67:96:6b:00:fb:ed:24:9d:69:99:ae:17:57:c5:b1:
                    ce:f2:7c:3a:2d:fb:67:b0:bd:4d:86:55:64:ac:54:
                    fd:7f:2f:c6:c2:b6:2e:a2:ac:20:79:42:e7:88:5d:
                    a6:6c:0f:d2:5e:e9:73:28:c2:31:4a:26:29:64:43:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:51:28:7E:2B:31:B0:0A:17:E7:74:6D:2B:14:59:06:30:81:8E
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:7f:4b:31:d0:38:16:d8:d6:5f:c0:5c:bb:a3:00:2f:57:
         db:3a:c9:c3:cc:cd:39:b8:a0:5e:59:9f:e3:a1:81:61:5c:27:
         d5:49:45:c5:fc:83:f3:02:ec:69:dc:3d:0d:0b:ba:a3:0c:ef:
         5f:28:36:92:41:a5:56:af:5b:6d:e2:29:cb:ea:5e:7f:23:29:
         74:fe:b0:ab:cf:db:9c:f7:0c:fa:c8:5e:4d:91:ce:23:bb:e5:
         9c:ac:55:61:07:2e:e5:6c:80:08:f3:da:94:9d:70:8b:1f:80:
         f8:e6:3c:77:b4:6d:8b:1b:e0:fc:df:43:81:aa:f3:d0:d4:e1:
         3e:1d:e0:d0:85:69:03:af:2a:15:8f:04:85:18:ff:ba:44:52:
         56:bf:74:5f:64:52:83:e8:8f:f2:79:ee:31:85:2e:e0:d7:b8:
         19:7c:0c:19:82:09:3c:38:7c:cf:cc:9b:ac:d5:92:b2:c7:1a:
         1f:59:21:02:93:29:b4:c3:5a:f6:66:d0:02:a4:1a:60:44:28:
         e6:a6:f7:1c:b9:80:62:cd:de:99:68:20:ff:d5:fb:d5:9b:77:
         6a:10:7b:3f:12:b9:3c:e2:24:67:17:e6:f5:51:3f:df:e6:73:
         54:6a:e5:66:b5:a2:6a:d2:75:d1:09:e1:e1:70:c7:7c:5a:a3:
         ad:d1:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:46:18 2025 by rpki-client