Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34382e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          ElbWZrZ4IdRAyvRx94P6xCQUavnzp2sswWqQfNTaQBs=
Subject key identifier:   B5:D4:32:41:EE:82:20:1F:22:10:D6:25:D2:FB:5B:F9:17:A0:99:90
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7DBA6C5FFC6BAA9A477932EDA42078DCE2E8BE78
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:06 +0000
ROA not before:           Thu 04 Apr 2024 02:14:06 +0000
ROA not after:            Thu 03 Apr 2025 02:19:06 +0000
asID:                     262663
IP address blocks:        186.216.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ba:6c:5f:fc:6b:aa:9a:47:79:32:ed:a4:20:78:dc:e2:e8:be:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:06 2024 GMT
            Not After : Apr  3 02:19:06 2025 GMT
        Subject: CN=B5D43241EE82201F2210D625D2FB5BF917A09990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:53:97:72:c5:ff:70:ab:2c:b4:47:f5:f5:
                    d1:48:66:d8:4f:51:ba:4e:29:64:8d:33:0b:48:9f:
                    8d:e5:08:01:cc:52:c6:1c:4d:3e:ca:a2:d3:5e:a7:
                    73:60:33:e8:41:4e:24:48:57:e1:15:0c:b3:1a:33:
                    71:db:b2:af:1e:89:19:1c:22:58:05:70:e1:15:2a:
                    4b:2d:65:30:4d:08:04:8e:34:03:9e:c2:8f:90:a7:
                    20:ce:e2:32:62:3e:88:78:1d:97:8f:a4:af:7b:61:
                    57:d0:1d:af:57:d4:26:76:57:f1:9d:11:e1:70:de:
                    fc:4e:a8:4d:98:ac:13:d1:8f:90:28:a2:2d:e5:1e:
                    ba:8c:1b:bd:16:4c:76:9d:1e:64:c7:c9:03:82:2b:
                    a5:bc:4a:ec:a8:c6:1d:ab:fc:f5:9d:d2:44:81:39:
                    e9:ab:91:9e:16:0a:5f:c1:49:7d:db:f7:6c:b0:d9:
                    09:87:a2:bd:3c:c0:d0:87:fd:3d:26:04:63:5d:55:
                    df:9d:25:a3:96:ee:82:1f:37:56:6b:8a:60:8f:40:
                    b4:33:9c:dd:72:5c:e9:0c:fb:5b:2c:47:e8:3a:7b:
                    54:66:d8:0c:aa:64:fa:d6:9e:7c:17:75:40:e0:b6:
                    e4:b2:53:64:48:60:98:cc:0e:a6:57:b0:99:69:91:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D4:32:41:EE:82:20:1F:22:10:D6:25:D2:FB:5B:F9:17:A0:99:90
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:8a:9e:e6:24:6d:35:2a:0d:1c:8a:1e:56:32:2f:13:b3:
         1b:a6:cd:b9:95:de:30:d2:78:b9:84:40:68:82:b6:f3:1c:d9:
         f8:b4:4b:5c:54:81:14:5b:e4:a9:82:5c:51:41:1e:19:08:c0:
         a2:99:f2:ee:4f:fe:61:1b:c6:88:e9:4a:f6:b9:72:f2:62:a3:
         f2:5a:04:a1:7b:15:dc:9a:a6:c1:c0:f5:6d:35:78:7b:f2:ba:
         0d:2f:34:ad:7a:cf:d9:31:fa:0a:e0:0c:5f:54:28:e3:f2:53:
         31:7d:12:a8:11:cc:9f:6c:5c:14:b3:d1:3b:38:23:c4:32:e1:
         93:c1:4a:9e:cd:fd:bd:9f:fb:df:89:14:24:41:f9:a5:6c:4d:
         61:2d:aa:56:15:52:d8:d7:07:98:7c:2c:f1:9c:fe:33:c8:80:
         52:be:f8:dc:c6:e1:7d:cf:ba:1f:94:bd:8f:5c:19:d6:50:89:
         5b:61:33:b4:86:56:ac:ed:82:f0:37:cd:78:90:a7:c9:42:2b:
         b4:f8:7b:66:76:d2:9d:e6:84:95:5e:53:47:e8:bc:40:2c:87:
         20:57:53:24:15:6b:09:92:16:46:1e:b3:66:d0:95:43:d6:48:
         25:d3:1f:9b:ef:42:2d:b0:60:3c:fb:b0:c2:e8:c3:48:aa:cc:
         7a:4a:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org