Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35362e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e35362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          l1SUgrOaUw4/B1I8x3ha52wVCopgsEYmahM1RTM6FZ0=
Subject key identifier:   C7:C3:25:FD:4C:2A:6A:D3:AC:F7:1D:0C:29:22:74:B4:2B:5E:90:EC
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       57439D06969443F2F9273B8024659699C3922240
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:02 +0000
ROA not before:           Thu 04 Apr 2024 02:14:02 +0000
ROA not after:            Thu 03 Apr 2025 02:19:02 +0000
asID:                     262663
IP address blocks:        186.216.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:43:9d:06:96:94:43:f2:f9:27:3b:80:24:65:96:99:c3:92:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:02 2024 GMT
            Not After : Apr  3 02:19:02 2025 GMT
        Subject: CN=C7C325FD4C2A6AD3ACF71D0C292274B42B5E90EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:81:19:33:d1:ea:5a:73:cf:58:bd:55:de:
                    e8:50:24:00:06:fb:37:18:d1:1d:de:8f:23:9f:0f:
                    39:d2:98:58:ed:48:5a:83:12:f4:05:69:f7:08:e9:
                    cf:b3:0e:c0:88:cc:b6:c4:21:a9:b3:96:d9:42:05:
                    6e:6b:7e:56:a8:68:44:90:e0:9f:8f:17:a0:4c:cb:
                    32:5c:8a:9e:05:07:7a:5c:c5:ef:fb:8f:6c:3e:77:
                    96:68:7c:a1:c2:fe:f5:76:f6:a3:65:c6:c4:a8:77:
                    98:93:df:65:94:ea:16:51:d7:f6:71:76:32:08:fb:
                    ed:0b:9e:26:f2:e0:f0:4b:de:4c:6d:a2:ba:8b:7b:
                    c6:c5:83:0a:98:d7:c1:e2:8e:31:45:8a:21:c0:56:
                    7d:2c:b4:bf:3a:e6:56:c5:bf:4c:13:00:b9:b3:84:
                    47:8d:19:5a:53:c3:32:50:19:4d:16:2b:9c:1e:e3:
                    59:3f:04:c3:8c:a4:21:6a:56:95:84:97:e9:18:85:
                    6c:22:b7:86:e0:8f:da:35:40:68:d1:80:88:11:04:
                    f6:3c:5b:80:75:76:bd:df:f1:ea:ac:22:c1:57:a7:
                    f6:fb:eb:58:bf:35:cc:56:90:cd:89:3f:4a:68:bd:
                    5e:03:71:db:06:fa:47:53:25:cf:b6:1d:b6:75:d5:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:25:FD:4C:2A:6A:D3:AC:F7:1D:0C:29:22:74:B4:2B:5E:90:EC
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:ff:ef:c1:61:48:4e:44:ed:26:84:88:49:50:67:90:f8:
         a7:1c:35:e8:29:7d:48:77:7b:f7:22:36:0b:48:39:05:36:fb:
         f9:3f:70:66:66:88:12:10:37:83:3f:76:b0:b4:7a:ef:05:86:
         03:92:1b:2e:26:84:93:17:54:09:37:e7:59:28:d0:1d:99:74:
         37:46:16:fd:7f:85:6f:41:7d:90:23:71:3f:85:34:2d:48:8d:
         ea:53:79:6e:b9:9c:d5:fa:ff:40:ee:46:43:bb:40:f5:28:9b:
         ec:03:f0:a0:62:3c:91:83:5a:4a:e0:36:26:7f:0e:03:e6:05:
         2c:d1:6d:35:53:1d:e9:21:4e:59:ca:78:44:e4:51:7c:b5:38:
         47:b5:e7:e6:62:39:6b:f7:0f:22:69:e4:4a:af:d6:b0:06:89:
         18:b6:97:59:d6:b0:c8:13:e1:88:6f:f9:2c:f5:00:d5:51:cb:
         50:4c:dc:16:14:fd:8f:f7:ff:c6:7f:fc:ed:e5:d2:7c:36:9b:
         d0:66:36:06:5f:f2:f3:69:b0:b8:2c:56:ba:92:21:d1:d3:f6:
         97:d5:8f:01:c3:21:1f:99:b6:c7:c9:1e:6d:ed:a6:6d:d7:f3:
         83:1e:27:59:6b:8e:0c:3e:79:9e:9a:95:de:04:93:5b:f4:92:
         9c:18:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 15:37:01 2024 by rpki-client on console-fra.rpki-client.org