Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34352e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          6MNsBMwS8Ndu5wi+w6kfabBkA+b+zdLzkBrZTY5SpCM=
Subject key identifier:   ED:26:07:02:EA:DC:3B:23:67:7D:3E:98:D9:27:90:99:0C:FF:1B:AA
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       16774B2E1D2183273D6A4FB9241977C285062C41
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:01 +0000
ROA not before:           Thu 04 Apr 2024 02:14:01 +0000
ROA not after:            Thu 03 Apr 2025 02:19:01 +0000
asID:                     262663
IP address blocks:        186.216.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:77:4b:2e:1d:21:83:27:3d:6a:4f:b9:24:19:77:c2:85:06:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:01 2024 GMT
            Not After : Apr  3 02:19:01 2025 GMT
        Subject: CN=ED260702EADC3B23677D3E98D92790990CFF1BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:13:76:0f:30:74:70:d2:0d:b4:ff:f9:ff:0e:
                    bc:07:26:87:a7:bb:ab:4a:9d:26:0f:e7:2a:a0:66:
                    ea:4e:b4:28:db:07:1e:bd:e9:12:2c:6b:0f:f0:13:
                    83:2f:6d:b3:fe:62:34:3a:05:6e:e7:93:f8:1f:ef:
                    5e:18:cf:44:a6:08:6e:54:3a:71:aa:2d:15:3c:6c:
                    d7:3f:67:69:49:37:c2:c5:a0:b9:44:9b:97:c9:b0:
                    a6:e4:f9:dc:f0:06:b6:60:ec:03:34:dc:73:92:b3:
                    1c:e0:c3:b5:07:13:9b:a7:f5:2b:eb:11:de:38:3b:
                    5a:ef:76:0f:73:96:2e:48:14:a2:33:c1:8c:59:16:
                    dc:d6:fc:62:39:af:3e:50:81:3e:dc:63:36:6a:3c:
                    e0:7b:8c:e1:fe:dc:33:7c:08:08:22:c9:05:6c:68:
                    e9:35:15:3a:3d:cb:df:1e:c2:8e:71:c3:13:71:f9:
                    ac:dd:15:22:33:a3:d5:22:b7:ea:14:ee:57:f0:dd:
                    22:7e:f2:9b:62:c5:63:67:5e:99:7e:19:28:72:87:
                    d3:41:22:f9:14:a3:57:77:55:32:c3:03:f4:bb:32:
                    76:92:f1:4a:fd:2e:df:b7:f9:ff:82:88:e6:66:9c:
                    fc:da:bf:5f:a1:53:0b:5e:39:b7:9d:bc:d0:db:31:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:26:07:02:EA:DC:3B:23:67:7D:3E:98:D9:27:90:99:0C:FF:1B:AA
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:08:23:1c:03:2b:4a:f6:ed:6d:6d:70:0a:9e:3e:03:f6:
         07:c7:5f:b4:ab:17:b1:d7:d9:f2:dc:61:bc:2b:52:c8:f5:14:
         1b:96:c7:ff:9a:84:a0:55:f7:f3:3d:9e:9a:f3:81:21:3a:a8:
         e7:39:97:48:7b:a5:4c:5e:d8:ca:33:92:c1:d0:6e:41:e9:08:
         39:f2:cc:ee:bf:57:36:44:a0:45:d0:5a:67:b9:04:c0:be:6f:
         6c:5f:2f:68:8a:df:b0:90:ec:3b:1b:e1:5a:bc:8e:43:7f:fa:
         9a:c8:fa:dd:ef:ea:49:91:98:f0:7c:5b:49:ba:bb:0d:12:45:
         80:54:7c:f1:00:29:e6:46:aa:74:2c:77:23:24:51:82:65:61:
         9f:71:37:ea:b2:2f:ec:20:70:7c:9b:5e:5e:45:c2:64:1a:70:
         21:9e:c9:7b:d1:3a:ed:a3:f1:bf:85:74:fb:a9:f9:6d:ec:d1:
         31:1b:5c:31:76:46:86:78:84:58:09:21:0d:dd:0a:a8:35:07:
         c9:89:6e:59:d8:e7:51:9b:f5:06:5f:5c:2c:e6:f0:e2:bb:8c:
         21:0f:44:bd:7e:c0:e3:38:3b:4d:04:5d:59:9c:a7:54:cf:c2:
         d9:2a:0f:50:94:de:2b:8d:be:98:8e:c4:a2:60:c0:0e:8c:6f:
         f8:96:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org