Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e35302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          rvzLKjyQhM3slS5Jab+pM5LmoD32qwV7DdU6frRJbsI=
Subject key identifier:   FE:F5:5C:FA:21:D9:31:5C:E4:01:D4:54:26:0B:A9:61:CB:D7:A3:91
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7E0EE3F7E06AC312A0E45DE9B8CD0EDE4CF44BD3
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:56 +0000
ROA not before:           Thu 04 Apr 2024 02:13:56 +0000
ROA not after:            Thu 03 Apr 2025 02:18:56 +0000
asID:                     262663
IP address blocks:        186.216.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0e:e3:f7:e0:6a:c3:12:a0:e4:5d:e9:b8:cd:0e:de:4c:f4:4b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:56 2024 GMT
            Not After : Apr  3 02:18:56 2025 GMT
        Subject: CN=FEF55CFA21D9315CE401D454260BA961CBD7A391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:b0:ea:44:74:8d:82:7c:1b:ec:2a:bf:32:
                    a4:d6:92:e2:0d:69:e8:c9:fc:23:08:19:0d:63:04:
                    67:6c:0b:66:e6:5c:db:47:67:65:b1:6d:ef:72:33:
                    15:ea:6e:df:2a:95:b4:58:85:9f:05:3c:24:15:ac:
                    3a:ac:cb:6f:0a:8a:1d:e6:e8:14:b3:ac:f4:96:63:
                    e5:c8:b2:83:73:d5:db:b2:f7:7d:b8:70:11:77:27:
                    87:3b:19:ac:c6:01:74:ac:e5:30:1f:12:dd:37:61:
                    76:22:1f:88:91:0b:8b:74:a4:8a:be:91:59:87:d1:
                    6b:bd:53:95:d3:76:64:ff:83:fb:e2:9c:fd:ef:3a:
                    37:78:72:76:98:12:b1:1a:e8:7f:ad:8f:48:84:0d:
                    19:c9:51:a3:0a:b2:8c:d0:ea:29:66:67:ca:b8:2c:
                    86:ab:30:9d:c3:e3:1a:cf:83:59:72:03:42:82:85:
                    18:a2:92:6c:39:43:d0:2e:85:1a:ea:07:fe:83:66:
                    fe:39:ec:fc:98:58:07:7d:7f:34:ba:18:65:06:c1:
                    50:27:3d:b6:26:e6:e1:8a:d7:f8:eb:7e:44:4d:2b:
                    3f:ed:ca:05:fb:7e:f2:be:3a:28:b8:33:30:1b:77:
                    05:2c:6b:1c:36:bc:67:45:8d:5f:c8:99:2b:68:34:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:5C:FA:21:D9:31:5C:E4:01:D4:54:26:0B:A9:61:CB:D7:A3:91
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:91:88:a1:ff:3d:b1:10:7e:ae:d3:e0:83:b4:72:b9:6f:
         ad:34:32:a9:e4:3f:4c:5f:3c:2c:dd:71:a2:59:81:43:0d:a8:
         25:c1:4a:ce:2a:26:22:d7:c1:ab:f3:a3:22:00:ae:a6:65:74:
         40:36:b1:71:5a:0d:80:3d:18:24:f0:53:ae:b3:f5:5b:20:bd:
         3e:40:55:52:38:11:e9:44:c2:26:55:13:dc:09:65:3c:5e:b9:
         d8:c0:16:2f:42:66:84:8b:d5:29:39:f3:38:06:cc:e3:96:7f:
         a3:49:90:b9:33:75:41:3d:65:f9:91:4d:b7:8f:5f:35:d2:62:
         1c:69:69:af:f0:3e:dc:e5:32:4f:66:5c:fb:5f:38:fc:c0:15:
         be:02:60:5b:ba:82:24:85:9c:f6:af:04:09:96:c9:17:8a:2f:
         29:ca:26:13:1e:4e:08:08:14:2a:b8:39:c6:e9:f3:66:fb:a4:
         d2:97:b1:42:44:d2:fe:56:0c:82:3b:22:3a:55:59:81:c3:44:
         9a:9d:34:e0:66:8e:4c:dc:52:33:91:6f:49:02:a0:18:30:80:
         86:6e:45:5f:45:bf:40:ca:27:6a:fe:18:f4:89:6c:51:dc:e9:
         6b:4f:bf:c0:8f:f2:a6:8e:3b:d2:db:86:ca:eb:f5:5e:7e:48:
         47:13:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org