Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35302e302f32332d3233203d3e20323632363633.roa
File:                     3138362e3231362e35302e302f32332d3233203d3e20323632363633.roa (raw, json)
Hash identifier:          kst2s0+huj8ldlTeaDl8ExXdrXl93WQV8DepaErWECI=
Subject key identifier:   34:2D:6F:20:A6:83:E1:B7:EA:BA:86:FE:EC:D0:6C:57:65:7B:63:6F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       833F87E0D8FFA18CA1F20E1F40EBB6BEBB4C89
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35302e302f32332d3233203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:53 +0000
ROA not before:           Thu 06 Mar 2025 03:11:53 +0000
ROA not after:            Thu 05 Mar 2026 03:16:53 +0000
asID:                     262663
IP address blocks:        186.216.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            83:3f:87:e0:d8:ff:a1:8c:a1:f2:0e:1f:40:eb:b6:be:bb:4c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:53 2025 GMT
            Not After : Mar  5 03:16:53 2026 GMT
        Subject: CN=342D6F20A683E1B7EABA86FEECD06C57657B636F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:a2:2f:26:ab:7c:19:c8:6d:1d:f0:1d:41:
                    92:f1:ee:07:68:a4:c5:c2:71:9d:21:0a:90:47:f2:
                    10:aa:af:b6:65:5c:53:81:02:e6:aa:08:4b:30:cf:
                    a1:ce:fe:71:2e:c8:a5:33:e0:e6:05:ba:d5:e9:15:
                    fb:04:f5:5d:5c:cf:f1:f9:49:1f:4c:5d:24:d4:75:
                    69:b0:3a:fc:d8:18:27:1a:7a:f8:4b:1f:b9:52:24:
                    32:9c:07:ff:b5:c9:aa:ed:da:23:2a:f7:7b:85:ea:
                    9d:82:09:ed:51:b2:bf:f6:0f:8d:b1:e4:5e:bc:8e:
                    96:b5:60:7b:c5:f4:66:71:83:a6:c5:42:07:98:57:
                    95:da:76:dd:68:12:bf:04:33:5f:ee:27:bf:09:4e:
                    14:e5:cf:46:38:22:75:f4:f5:f6:b2:06:e7:69:5d:
                    e1:57:c5:eb:77:dc:dd:41:35:6a:9e:7b:62:0b:3a:
                    0b:93:59:da:82:c9:cf:55:86:8e:37:13:9e:b7:17:
                    24:3e:df:bc:da:80:4f:9b:1c:21:41:c2:44:a0:1c:
                    9a:4c:31:39:26:9f:2d:e1:27:3e:0b:ef:59:73:7a:
                    18:d3:90:1c:31:4f:41:08:ca:1c:07:da:e2:44:53:
                    5d:a9:aa:f2:96:1e:9f:ab:d1:08:df:7d:64:19:62:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2D:6F:20:A6:83:E1:B7:EA:BA:86:FE:EC:D0:6C:57:65:7B:63:6F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35302e302f32332d3233203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:0c:14:00:32:9d:1d:f1:6b:ae:4f:e0:d8:fc:b6:3b:72:
         b6:09:0d:81:35:cc:e0:9e:1f:8d:fc:98:60:3c:67:14:11:74:
         06:fc:16:01:9c:6e:a9:bf:78:16:20:17:65:0d:f8:d4:f5:bf:
         54:6d:c6:75:a7:10:dd:e7:30:53:b4:3e:ce:ca:b9:75:8b:ac:
         b8:39:70:f8:12:5b:59:31:f3:fe:9f:f0:48:2e:a9:04:31:d4:
         69:ef:40:27:4c:6d:55:50:10:51:eb:63:65:d7:41:49:29:49:
         fc:02:92:af:3f:e7:9d:46:a3:01:29:1e:73:e6:d7:ca:66:d0:
         91:5b:fd:38:a6:9e:0d:ac:f8:1e:1b:79:e0:9b:c8:db:ff:f6:
         07:d1:5f:18:5a:bd:b3:43:35:19:19:b3:58:68:63:65:a8:5f:
         7b:9c:d9:29:c4:6c:57:da:da:d1:ec:2f:49:c4:2c:be:60:7d:
         e3:0a:96:46:bb:f9:42:c3:94:49:c1:14:04:5f:7c:61:59:0e:
         3e:d6:3d:80:5a:41:d2:15:3c:e4:e4:5b:cc:cc:66:31:d0:32:
         8b:bf:6e:b9:29:b8:88:ad:4e:4a:99:17:77:13:cf:19:19:fa:
         1c:61:e7:8e:7f:d1:30:e5:ba:01:d5:32:b3:84:6d:33:35:bb:
         f9:4d:ca:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAIM/h+DY/6GMofIOH0Drtr67TIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzExNTNaFw0yNjAzMDUwMzE2NTNaMDMxMTAvBgNV
BAMTKDM0MkQ2RjIwQTY4M0UxQjdFQUJBODZGRUVDRDA2QzU3NjU3QjYzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiqIvJqt8GchtHfAdQZLx7gdo
pMXCcZ0hCpBH8hCqr7ZlXFOBAuaqCEswz6HO/nEuyKUz4OYFutXpFfsE9V1cz/H5
SR9MXSTUdWmwOvzYGCcaevhLH7lSJDKcB/+1yart2iMq93uF6p2CCe1Rsr/2D42x
5F68jpa1YHvF9GZxg6bFQgeYV5Xadt1oEr8EM1/uJ78JThTlz0Y4InX09fayBudp
XeFXxet33N1BNWqee2ILOguTWdqCyc9Vho43E563FyQ+37zagE+bHCFBwkSgHJpM
MTkmny3hJz4L71lzehjTkBwxT0EIyhwH2uJEU12pqvKWHp+r0QjffWQZYgBHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNC1vIKaD4bfquob+7NBsV2V7Y28wHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG62DIwDQYJKoZIhvcNAQELBQADggEBAE0IDBQA
Mp0d8WuuT+DY/LY7crYJDYE1zOCeH438mGA8ZxQRdAb8FgGcbqm/eBYgF2UN+NT1
v1RtxnWnEN3nMFO0Ps7KuXWLrLg5cPgSW1kx8/6f8EguqQQx1GnvQCdMbVVQEFHr
Y2XXQUkpSfwCkq8/551GowEpHnPm18pm0JFb/Timng2s+B4beeCbyNv/9gfRXxha
vbNDNRkZs1hoY2WoX3uc2SnEbFfa2tHsL0nELL5gfeMKlka7+ULDlEnBFARffGFZ
Dj7WPYBaQdIVPOTkW8zMZjHQMou/brkpuIitTkqZF3cTzxkZ+hxh545/0TDlugHV
MrOEbTM1u/lNypU=
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:48:47 2025 by rpki-client