Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e392e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e392e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          AonMYF8Qz2ueUbyAZbfKVqaPPZIeBhAZrL431E4vyjI=
Subject key identifier:   A0:8E:39:45:8F:EB:39:B0:F8:D2:78:C2:21:30:DD:9B:3B:96:E7:1A
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6B23EAD8D4C66615AE1F40E050CE3D3B4B3B070E
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e392e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:55 +0000
ROA not before:           Thu 04 Apr 2024 02:13:55 +0000
ROA not after:            Thu 03 Apr 2025 02:18:55 +0000
asID:                     262663
IP address blocks:        186.216.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:23:ea:d8:d4:c6:66:15:ae:1f:40:e0:50:ce:3d:3b:4b:3b:07:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:55 2024 GMT
            Not After : Apr  3 02:18:55 2025 GMT
        Subject: CN=A08E39458FEB39B0F8D278C22130DD9B3B96E71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:7a:1f:fe:51:55:27:4d:7e:f0:a9:ea:cc:
                    70:6a:dd:bc:b1:d7:93:fb:0b:04:a0:b8:7d:aa:21:
                    59:92:ba:23:b0:83:ab:43:44:66:6b:1a:96:3d:dc:
                    8d:a1:f9:bf:21:41:42:7c:2a:4e:44:6a:84:56:17:
                    0a:63:d9:29:3d:f7:1b:f0:7f:ec:31:63:82:74:3c:
                    aa:08:0a:7d:0d:3f:a9:fa:d8:9e:94:71:f8:ca:5a:
                    ec:8e:20:e3:84:4a:9e:2d:9e:14:f8:d0:12:63:96:
                    4d:99:fd:34:bd:37:62:79:99:b6:47:5f:50:c2:c4:
                    72:29:e1:2b:e6:a2:d9:dd:3d:e0:6d:5b:e7:67:70:
                    ea:8e:4f:53:77:e2:4e:e8:d1:33:47:43:85:bf:22:
                    78:49:e6:23:64:25:43:a5:d0:86:99:0a:3f:ab:f5:
                    cb:be:fb:ba:27:53:e6:5f:da:20:98:1d:27:dd:9d:
                    95:1a:48:c7:b3:a1:d7:86:06:f3:f5:ed:2b:da:12:
                    d5:9e:39:90:ea:9c:66:ec:f7:35:8a:b3:b2:66:bc:
                    6a:23:68:f0:c0:25:b6:67:d6:b8:49:59:ca:87:48:
                    d3:13:c5:c5:99:c0:89:4c:61:12:24:6e:9a:c2:70:
                    7b:fb:ae:f5:8d:38:e7:ef:ab:84:34:ae:9e:e7:0d:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8E:39:45:8F:EB:39:B0:F8:D2:78:C2:21:30:DD:9B:3B:96:E7:1A
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e392e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:f8:8a:b5:c0:86:f4:6c:41:d0:69:e9:15:ea:1e:4e:f6:f6:
         a1:4f:d7:c9:92:1a:7d:1f:3a:5b:ba:b6:e1:51:65:10:77:4e:
         32:e3:55:80:aa:ca:e9:85:c7:7b:c4:b8:99:08:a6:7a:24:55:
         27:57:62:c0:92:2c:91:e2:f6:3e:8e:ba:49:ae:b4:f1:40:3f:
         69:30:af:1a:a6:53:56:55:7d:15:38:04:68:3f:64:6b:33:b3:
         1b:de:87:c6:2f:8d:bf:3c:f0:aa:91:97:2a:85:aa:b6:3d:11:
         d8:35:51:9b:4e:e1:b6:03:41:6c:34:a9:aa:88:4e:fe:6a:23:
         b7:bf:bd:c5:e7:2e:77:81:98:d1:18:4c:23:1f:c8:5b:f4:8a:
         8f:11:8e:87:38:e0:0f:31:a0:2c:49:f2:e5:06:b1:c4:63:c5:
         c9:3a:3e:21:a0:dd:c5:78:35:9c:40:16:8c:88:c2:2c:05:b5:
         52:e6:9e:9f:c5:2b:8b:3a:b6:0d:f3:df:25:b3:95:94:6b:b3:
         9d:b1:c8:78:8e:24:b9:c6:db:36:f2:82:94:30:1d:60:1e:b4:
         cf:41:5d:d5:d7:a8:bc:2f:22:8a:00:4d:98:8d:42:a6:b3:12:
         79:3c:38:85:a9:68:db:61:9b:a4:b1:00:bc:d7:a7:af:9d:3a:
         0b:d7:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:29 2024 by rpki-client on console-fra.rpki-client.org