Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35352e302f32342d3234203d3e203533313037.roa
File:                     3138362e3231362e35352e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          BxEls0IGXChFrKapJ8rDH1p4Fe2rsD84m0LGsRd0Oyk=
Subject key identifier:   BC:2F:C4:50:48:D2:D0:C6:75:90:B5:42:9A:F8:8D:40:9C:60:F7:A7
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2F9E8429FF08B0D9F8DB20457F57D9D59BB52D00
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35352e302f32342d3234203d3e203533313037.roa
Signing time:             Wed 20 Aug 2025 13:30:08 +0000
ROA not before:           Wed 20 Aug 2025 13:25:08 +0000
ROA not after:            Wed 19 Aug 2026 13:30:08 +0000
asID:                     53107
IP address blocks:        186.216.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 16:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9e:84:29:ff:08:b0:d9:f8:db:20:45:7f:57:d9:d5:9b:b5:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Aug 20 13:25:08 2025 GMT
            Not After : Aug 19 13:30:08 2026 GMT
        Subject: CN=BC2FC45048D2D0C67590B5429AF88D409C60F7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:e6:92:80:49:9c:84:5e:a0:f1:14:44:a8:
                    c7:47:6a:b7:ae:4e:94:5d:fb:da:24:e4:69:59:15:
                    1e:69:d6:ae:7e:11:02:ce:4e:e8:20:ae:7b:23:fd:
                    90:0a:da:cc:c8:cd:47:61:cb:90:c8:f4:7c:46:ef:
                    9d:7b:aa:c3:09:7c:e2:7a:f5:78:12:d0:91:ec:9e:
                    48:90:b0:0b:3c:fb:69:fd:ae:2f:9e:4a:67:ff:ee:
                    d2:62:45:70:62:98:c4:94:0e:a7:41:3c:bd:88:72:
                    aa:76:75:c7:49:eb:e3:79:2b:0a:85:a6:75:42:79:
                    35:93:61:e8:e0:f6:11:0d:d8:97:89:c0:9b:00:1e:
                    23:dc:f6:e3:5a:70:af:6b:6d:be:85:ae:0c:1a:aa:
                    8b:ed:3e:9b:9c:99:e9:c1:df:00:8b:15:c3:f3:b2:
                    ec:31:d4:e3:21:e9:b0:27:6f:e6:d0:69:cf:bf:b6:
                    9f:ea:78:07:ad:7a:db:c1:2b:2d:95:2f:f7:a6:3b:
                    20:6c:2d:c3:f5:10:0a:26:13:06:0c:d7:ff:3f:1c:
                    68:a7:e7:6b:60:c4:72:33:f9:4c:ce:6a:c5:11:cd:
                    b8:b7:70:09:d7:f4:15:d2:5a:6a:2b:fe:af:f2:5f:
                    c3:06:e1:1d:db:6d:e6:22:48:23:60:63:34:26:03:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2F:C4:50:48:D2:D0:C6:75:90:B5:42:9A:F8:8D:40:9C:60:F7:A7
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35352e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f9:e0:11:b5:56:16:86:a3:3f:a3:7d:6a:c1:ce:f0:8e:46:
         1d:04:1f:93:7a:7e:94:6c:9e:86:3c:e6:72:f5:50:98:e1:7d:
         b3:3f:32:89:bf:35:85:b0:7c:e3:4d:19:a7:54:3a:31:c7:fc:
         41:0d:fc:a6:1f:62:f1:d5:2f:52:f5:74:2d:24:95:6e:f8:c7:
         1c:b4:c6:e9:65:a9:51:cd:a3:15:e1:63:44:80:1b:0b:3f:9b:
         63:bc:88:e4:4e:72:70:2f:d0:59:a9:e5:2a:6d:21:79:ef:4a:
         3b:ac:41:a3:b3:99:75:aa:b4:69:58:7b:4e:0f:80:ff:d3:2a:
         02:c7:3a:d7:82:09:d6:05:af:b2:56:43:21:c5:60:22:24:65:
         71:b8:f7:23:61:6e:b8:14:3f:14:a6:2c:7f:31:4e:f9:f0:c2:
         a6:0d:15:08:90:93:f5:ed:b9:b2:9a:a3:02:4a:fb:a8:70:f2:
         15:e1:25:0c:da:27:94:61:63:06:dd:71:5b:0e:ae:02:98:4f:
         02:e0:00:35:07:40:cf:b4:7a:4f:2e:ae:d1:ce:25:f0:dc:2e:
         41:ce:22:df:4b:d2:f0:ae:f0:f3:1a:45:d7:8f:a1:9f:3b:24:
         9c:ba:e4:2f:23:11:07:11:cd:91:bc:d6:b3:07:12:d4:17:c6:
         4a:a2:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:19:54 2025 by rpki-client