Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36312e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e36312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          A1Wd4dTi8wtbx9auCmwdVYkWPny+yg9jc6C/7tpA/Yo=
Subject key identifier:   81:D4:70:8F:32:B7:44:75:24:4E:A9:74:28:FC:78:6F:FE:6D:35:B5
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7FA0A64162C13BE5EC9043C5171FD1BB8164F0FF
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:10 +0000
ROA not before:           Thu 06 Mar 2025 03:12:10 +0000
ROA not after:            Thu 05 Mar 2026 03:17:10 +0000
asID:                     262663
IP address blocks:        186.216.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 06:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a0:a6:41:62:c1:3b:e5:ec:90:43:c5:17:1f:d1:bb:81:64:f0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:10 2025 GMT
            Not After : Mar  5 03:17:10 2026 GMT
        Subject: CN=81D4708F32B74475244EA97428FC786FFE6D35B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:02:a7:e7:ce:b4:bb:72:23:86:dc:10:82:
                    a9:cb:96:01:b5:fe:75:a6:ee:14:4d:8d:56:1a:e0:
                    7e:d5:06:f8:b8:2d:33:79:fc:7c:b5:a0:b5:fc:a8:
                    09:95:1b:a5:6e:88:13:03:6d:36:7f:a6:15:6d:d4:
                    a4:be:de:df:c9:b9:c2:3e:77:90:d0:6f:8a:5a:4e:
                    00:b2:11:f7:c1:ad:ff:fe:e2:7a:ab:30:63:9f:7a:
                    8c:f2:d0:de:8e:69:98:89:31:14:ec:9c:0c:d0:f4:
                    51:cb:b0:a7:94:9f:b9:87:95:48:05:86:d5:25:aa:
                    1b:79:56:ee:8b:3d:02:08:aa:7b:88:cb:8b:06:3a:
                    82:3e:c7:e3:3c:d4:f0:b0:2e:da:4e:c4:f4:fe:78:
                    dc:d8:47:2c:1a:75:67:f0:4c:b4:41:dd:0c:b3:99:
                    b7:47:8c:25:07:c6:ea:d2:2b:cd:91:a8:f2:7c:0b:
                    39:26:bf:c2:5a:8b:2f:c3:3b:b5:10:53:ee:a9:58:
                    ac:03:ec:74:d0:9c:25:6a:40:8c:59:a3:a3:36:3f:
                    af:8f:73:d7:82:9f:f7:6b:e4:18:ac:6c:c1:e7:f7:
                    74:d1:a3:83:3c:bc:54:56:b4:a4:58:7b:e7:47:d8:
                    4d:a2:bc:75:b3:52:5e:c2:5a:42:0e:87:45:76:19:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D4:70:8F:32:B7:44:75:24:4E:A9:74:28:FC:78:6F:FE:6D:35:B5
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:4d:4d:1e:69:17:7f:b0:fd:77:8d:b4:da:ca:89:79:1a:50:
         b9:33:5d:84:ae:ee:1e:45:f0:68:c9:95:31:d9:5d:5e:9b:b5:
         0d:c5:cf:b9:39:8c:01:a7:86:0e:f8:d6:78:92:17:d0:b8:cb:
         66:64:5e:90:7e:db:c3:c4:4f:55:96:75:8f:7b:3b:6e:ab:85:
         fd:9c:93:21:f7:70:ae:eb:12:e3:7d:e7:1c:70:61:a9:91:82:
         e8:00:c8:e6:eb:f3:13:a5:e9:32:30:2c:c3:ea:02:22:37:64:
         77:61:79:3a:c4:11:6a:75:15:08:2b:67:61:3c:43:2b:c2:df:
         1d:b3:ab:4c:22:ea:0d:d3:07:85:d9:44:74:e4:74:ac:82:7d:
         67:8e:1e:6c:16:60:38:12:60:10:08:8b:fc:3c:ba:c6:19:12:
         13:c1:0d:54:49:d4:99:c7:04:6e:0c:f7:a1:8b:11:a0:14:32:
         53:80:d5:1d:c1:a1:29:d1:19:e4:8a:8e:0b:9a:19:1e:c6:ec:
         0a:fa:a7:8c:e5:9c:0a:f3:df:13:4e:99:c4:74:a5:e7:f1:73:
         22:cb:75:30:56:00:ce:08:e8:a5:40:e2:52:1e:e6:6b:95:f9:
         80:b3:6e:de:89:a6:ce:61:76:50:e4:a8:34:c7:7b:6e:b4:81:
         d8:36:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:29 2025 by rpki-client