Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34342e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          1Vwtt0qSVUIy6W0uGZx1ScEZ7/jucDm8c5qB3s4bYBQ=
Subject key identifier:   31:C2:C5:FE:2B:21:CB:66:21:C6:03:AF:74:9D:BE:BD:F7:DC:1A:FD
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5B5B6A2C646A9C3915EE0FDBA6F0845259819D8A
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34342e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:00 +0000
ROA not before:           Thu 06 Mar 2025 03:12:00 +0000
ROA not after:            Thu 05 Mar 2026 03:17:00 +0000
asID:                     262663
IP address blocks:        186.216.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5b:6a:2c:64:6a:9c:39:15:ee:0f:db:a6:f0:84:52:59:81:9d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:00 2025 GMT
            Not After : Mar  5 03:17:00 2026 GMT
        Subject: CN=31C2C5FE2B21CB6621C603AF749DBEBDF7DC1AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:2f:dc:f9:78:6e:8f:e6:1d:4d:74:8f:3f:
                    e2:f4:83:c8:9b:39:ff:ff:d9:d3:5d:be:40:6a:bb:
                    7f:8d:06:6e:eb:88:ea:7a:8a:4a:a3:07:bd:3f:aa:
                    0b:49:8b:e6:0e:74:be:8d:77:aa:cb:65:ac:1c:4c:
                    6d:ff:fb:b1:96:71:a0:b3:3b:b0:f5:18:f4:f8:b2:
                    7f:a8:7a:7b:39:72:0f:80:42:7b:1d:c9:8d:ea:d6:
                    18:2d:cf:4e:70:b3:aa:0e:be:3f:42:fc:62:23:f3:
                    ed:37:21:58:dc:4b:e0:3a:28:59:ea:17:2c:e2:d3:
                    ce:a8:2f:34:9c:52:7c:81:ed:24:ce:0d:e6:24:29:
                    77:c7:f7:85:c6:58:b1:dc:66:c0:2b:ca:af:7f:79:
                    ef:c2:f3:eb:a4:dd:ea:0a:74:11:a6:69:80:7f:28:
                    08:9b:14:f8:ee:f6:0e:82:75:43:0e:ff:bb:ee:61:
                    f0:88:ff:98:97:56:3a:3f:ce:96:b1:f7:bc:94:eb:
                    a8:3b:3d:28:4d:6e:45:12:65:84:e5:52:c7:85:8d:
                    f5:f2:6c:07:7e:5f:c7:82:46:d6:a2:aa:b2:3e:f8:
                    96:fd:70:ae:05:05:aa:37:93:3e:10:c0:51:1b:44:
                    86:b1:db:1a:d5:ad:06:19:a5:55:c9:e4:02:af:de:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C2:C5:FE:2B:21:CB:66:21:C6:03:AF:74:9D:BE:BD:F7:DC:1A:FD
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:60:86:3d:ab:93:9e:42:0e:7b:84:72:90:75:f4:32:f0:
         5b:95:40:61:cc:96:ca:a8:60:a4:25:4b:5f:12:7b:7b:31:2c:
         e9:f7:cc:b6:3e:ad:aa:69:77:66:44:01:38:19:c8:77:00:55:
         95:88:ac:e2:5d:d2:fb:b4:1e:e5:df:9e:58:71:c3:9d:c8:2b:
         78:ab:1b:a8:19:9e:d1:f8:ed:2b:98:a2:4f:f1:a9:b8:50:9b:
         78:e7:84:55:0f:e4:38:aa:e0:aa:09:0e:3f:33:cf:ac:b1:ef:
         4e:7a:43:89:0e:dd:bb:d6:8d:17:81:0b:0c:80:30:ad:bd:e8:
         da:f9:94:7f:ae:f7:5d:d3:be:92:6c:bd:fd:32:05:5e:f5:36:
         d5:b5:12:43:bd:c6:ad:41:14:4f:1e:e7:b8:8e:27:25:7e:fb:
         33:f4:ed:10:26:e6:27:ec:67:4f:42:b6:58:57:39:04:72:87:
         6b:db:f5:1f:29:31:b1:17:4b:03:5c:b7:d6:d3:48:c6:58:fb:
         ae:91:e5:40:fd:cc:92:41:59:1b:a4:98:89:c2:a7:9e:c7:49:
         bb:00:84:b1:16:05:29:4f:1d:a6:c1:7b:ca:9e:67:1a:cb:62:
         49:d9:b2:5a:9c:dc:bc:f0:de:fe:87:29:2f:cc:12:97:97:11:
         ca:db:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:56 2025 by rpki-client