Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          jPV1m6wDuld/yR8rkufxSXDKHqKKeSyrNwm9Tk64UWE=
Subject key identifier:   85:7E:FC:4D:A1:7C:A3:AE:02:87:BA:A4:F1:3B:B4:57:6A:3E:8A:16
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5CB89F1F64509E04644253546926288EEC270E1B
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:58 +0000
ROA not before:           Thu 04 Apr 2024 02:13:58 +0000
ROA not after:            Thu 03 Apr 2025 02:18:58 +0000
asID:                     262663
IP address blocks:        186.216.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b8:9f:1f:64:50:9e:04:64:42:53:54:69:26:28:8e:ec:27:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:58 2024 GMT
            Not After : Apr  3 02:18:58 2025 GMT
        Subject: CN=857EFC4DA17CA3AE0287BAA4F13BB4576A3E8A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:22:26:6c:2b:94:80:20:5d:18:ed:60:21:ed:
                    17:59:dc:6a:65:78:c6:03:f5:f5:ca:bf:40:c6:f6:
                    79:3b:44:e4:4f:24:a4:46:64:1b:e2:db:77:59:4f:
                    70:b7:77:e6:44:5b:64:db:c7:ce:4f:3d:fd:e4:42:
                    d1:c8:72:ba:c0:e9:d9:6d:5f:b1:07:4e:cf:5f:ed:
                    f1:f7:7a:9e:b6:40:97:61:4f:1e:8c:56:3f:b2:95:
                    cc:56:11:fc:4c:7f:ff:5f:b8:9c:a6:05:ec:c6:b3:
                    9a:01:93:00:21:62:f1:5c:82:52:9c:bf:8b:39:e2:
                    04:b7:5e:bb:95:f9:0c:c0:fc:46:fc:77:ca:9d:07:
                    11:67:7c:4e:cd:77:da:08:dc:42:ca:34:3c:41:c0:
                    69:f7:d8:2a:35:8b:10:67:a2:98:6c:63:13:71:60:
                    84:ef:50:ed:95:b5:62:4b:c5:d2:5a:7c:07:a1:7b:
                    53:e4:02:8f:de:c7:6e:d5:f7:93:6b:45:4c:77:fc:
                    df:6c:78:b5:03:be:06:f2:e7:f7:01:a3:97:16:30:
                    d4:15:08:b6:fb:a1:5a:cb:0a:b3:5f:59:9b:7e:f8:
                    f1:70:72:de:90:d1:3f:56:d8:b7:eb:4c:6e:e5:b8:
                    9b:32:6d:54:f7:d2:65:2a:cf:a3:5f:e9:0f:04:f5:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:FC:4D:A1:7C:A3:AE:02:87:BA:A4:F1:3B:B4:57:6A:3E:8A:16
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ef:df:30:7a:bd:28:8c:7d:39:81:01:d1:c6:2d:3f:dd:4b:80:
         aa:e7:cc:de:95:a3:54:b9:fa:2f:d5:fa:c7:a0:ae:00:4f:94:
         a4:8f:da:ac:d0:62:8a:67:02:2c:95:85:4b:f8:46:86:52:6d:
         be:37:17:ea:86:e9:4b:84:e9:bc:b5:aa:54:11:84:b7:97:6e:
         67:c3:11:06:67:a3:9e:10:70:a9:7b:ea:aa:f7:0c:a5:75:e5:
         91:b3:71:7a:50:7c:e2:f5:f9:72:5c:60:28:24:d0:09:e2:f6:
         a1:d5:8f:a8:0c:3f:f2:d4:e1:a5:b5:8b:c5:7a:a3:22:83:6c:
         a1:55:18:19:51:aa:b3:06:28:44:c2:95:8d:c7:07:7c:09:d7:
         ad:80:2b:da:5b:a3:3e:fb:f9:35:d3:26:02:5c:19:be:cd:84:
         f9:b3:87:d1:b1:05:f9:2f:74:d2:94:e7:9a:8f:63:1f:37:65:
         2b:7a:11:bc:78:8c:2b:f7:eb:bb:81:80:ee:40:9c:2c:85:01:
         f1:13:91:e2:61:fc:ba:fd:84:a6:52:5c:1d:6d:77:9e:5b:7a:
         a4:47:3e:55:64:51:aa:f8:f5:a2:ec:c7:5e:8b:d2:f0:68:03:
         5d:93:21:60:eb:e5:15:ad:5d:7e:69:1c:d8:24:55:6b:0e:1c:
         1c:a0:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org