Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e352e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          M65EvsPej1PM36UGs8jXbiwOUDmeIZws3qQI+DAaZKI=
Subject key identifier:   4F:2D:FE:8D:DF:A6:A1:41:D0:09:9A:7E:8D:26:9D:08:EE:A8:A9:AE
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6A8B07A93FD2B4285B47BE2D7E5085895A1A4149
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:58 +0000
ROA not before:           Thu 06 Mar 2025 03:11:58 +0000
ROA not after:            Thu 05 Mar 2026 03:16:58 +0000
asID:                     262663
IP address blocks:        186.216.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8b:07:a9:3f:d2:b4:28:5b:47:be:2d:7e:50:85:89:5a:1a:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:58 2025 GMT
            Not After : Mar  5 03:16:58 2026 GMT
        Subject: CN=4F2DFE8DDFA6A141D0099A7E8D269D08EEA8A9AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:23:2f:69:65:ee:bf:92:dc:b6:31:ba:6f:
                    6d:74:fc:26:6a:78:25:86:c2:52:c9:c3:fd:54:4a:
                    e6:94:d0:f1:43:f0:53:fd:0f:49:e4:50:c6:72:c7:
                    b7:9f:cd:ce:52:dc:ec:c2:b2:24:ea:ed:d9:09:1b:
                    33:ea:fd:dd:a4:4c:87:10:31:3e:f3:04:e4:3e:2d:
                    5f:67:84:00:37:e3:cb:bf:3c:45:df:8a:41:e1:f2:
                    21:0c:db:21:77:61:d3:71:73:47:e2:1f:b2:6b:d8:
                    88:78:20:c3:2d:c7:c8:d7:8c:87:00:87:ec:1b:2e:
                    15:cc:df:c1:c2:31:0e:93:ee:0c:e3:9a:e1:d8:a2:
                    a5:1f:54:7d:94:7a:a8:76:df:26:5a:51:8b:7f:44:
                    ae:48:a2:17:8a:5f:e8:08:01:da:29:8e:4e:70:7a:
                    6d:95:6b:61:da:15:ae:f5:c8:ea:0c:c1:59:94:3b:
                    14:ed:18:54:8f:7d:c3:e5:49:c0:3c:74:50:50:0b:
                    7d:65:f8:eb:cb:4d:38:26:9e:1d:0b:b3:33:4f:40:
                    fb:ce:2c:a9:de:f3:5f:ad:b2:bd:fb:2a:52:64:7b:
                    73:3f:53:8c:7f:51:e2:0c:f6:35:44:a5:4d:64:7c:
                    c4:ba:4e:d5:e5:90:a2:e1:c4:e0:ec:76:4f:4c:cf:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2D:FE:8D:DF:A6:A1:41:D0:09:9A:7E:8D:26:9D:08:EE:A8:A9:AE
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:3b:94:1a:3b:f1:d6:6c:ca:c0:6a:50:fb:52:12:81:72:
         8f:02:1d:c7:80:6e:87:93:89:6f:a3:c0:51:d6:db:07:ce:88:
         ac:c6:4b:34:d6:fc:64:dd:3b:f5:5a:2c:20:18:78:40:36:4e:
         dd:80:0f:69:7a:83:db:14:e2:b9:63:75:55:3e:e3:a2:a6:07:
         e2:a2:42:f2:02:93:2d:52:03:e1:89:95:f8:df:53:d6:5d:19:
         c8:a2:67:e1:47:b3:a1:7d:b6:e1:9c:42:69:b5:ee:c4:8a:0a:
         e3:09:ff:21:2e:03:78:7f:2a:b6:3f:80:ed:11:ca:80:1f:65:
         23:5a:ab:e5:a0:82:f4:17:be:85:e8:27:3e:74:a2:81:28:05:
         d6:a4:0a:f9:8b:5b:36:19:e3:fb:7f:51:e6:8b:9e:92:43:7d:
         72:b7:c3:37:d3:ca:7f:9d:62:0f:95:49:84:cd:ed:bc:a1:ec:
         78:17:d6:4f:5a:9e:67:06:35:e2:79:e9:e2:4d:e5:2b:3d:68:
         12:34:66:ab:23:48:ad:f8:29:16:15:42:93:d6:c2:31:40:e7:
         c1:58:cf:4b:21:14:bb:7a:85:97:b3:45:aa:25:24:25:72:44:
         6f:9e:5e:4b:42:5b:e3:3c:3b:27:e7:ed:ec:8a:bc:a5:53:93:
         3b:08:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:37:35 2025 by rpki-client