Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233302e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          KYmAkpEX8Vf17kKAlAMy7ts1io07uomGwViLT4QE0xY=
Subject key identifier:   C2:FB:21:D6:8F:C8:85:36:A1:7F:5C:C4:3A:F1:36:F3:7F:EB:50:45
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       24A528F3D6A2587166E98AD8EEDBAE941DA1BCB7
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:57 +0000
ROA not before:           Thu 06 Mar 2025 03:11:57 +0000
ROA not after:            Thu 05 Mar 2026 03:16:57 +0000
asID:                     262663
IP address blocks:        187.62.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a5:28:f3:d6:a2:58:71:66:e9:8a:d8:ee:db:ae:94:1d:a1:bc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:57 2025 GMT
            Not After : Mar  5 03:16:57 2026 GMT
        Subject: CN=C2FB21D68FC88536A17F5CC43AF136F37FEB5045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:ee:2f:51:3e:36:82:be:00:fb:59:ed:f4:
                    0f:e3:81:c4:1e:d9:33:24:c8:89:e2:3f:a9:33:c3:
                    02:60:1d:7c:91:21:5d:e5:a6:f4:00:eb:81:62:c3:
                    bd:bb:45:28:84:7f:77:93:9d:71:7c:9a:a4:a7:1a:
                    9b:c7:97:fd:cc:ec:a4:02:ed:8a:ba:66:c4:4b:1e:
                    72:eb:2e:51:be:ca:27:10:f2:9e:6f:a5:5d:bc:3c:
                    6d:e4:a4:90:aa:d0:54:65:cf:73:3b:24:70:f3:26:
                    ec:b7:3c:e9:7c:c0:c1:31:d7:dd:77:56:2c:73:4b:
                    39:cd:19:41:b0:18:89:89:28:32:d1:db:98:03:43:
                    ef:51:9f:97:3e:e0:b3:26:70:f4:c7:4c:f2:fd:e5:
                    0a:28:77:ea:82:98:5e:7e:34:fd:f9:a1:c6:a4:89:
                    2b:39:e8:08:82:02:72:e0:e4:20:62:23:df:d8:ca:
                    63:71:2d:79:f8:d4:f8:d1:8d:3c:84:52:aa:92:49:
                    bf:3c:e2:63:bc:ea:c3:01:fd:58:77:ef:7d:ad:ca:
                    6d:38:4b:c1:41:2c:be:21:6d:61:09:c9:4b:2a:a0:
                    ea:fd:5b:43:f3:80:9f:2a:c5:ad:37:6b:4b:3b:41:
                    ed:d6:03:aa:7c:4b:c2:e6:e7:1a:93:c0:e4:a8:c9:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:21:D6:8F:C8:85:36:A1:7F:5C:C4:3A:F1:36:F3:7F:EB:50:45
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a7:23:22:a3:a1:02:e6:57:bd:d2:7b:64:99:f7:f2:08:98:
         fb:63:ac:79:d9:ce:fb:09:9d:c4:30:a8:79:1a:54:f6:77:e4:
         0a:09:46:26:b8:80:0b:42:88:d4:08:07:91:3b:04:14:96:17:
         16:53:e6:04:4e:18:09:8b:f2:3b:76:bd:fa:b4:35:1e:95:6e:
         cd:40:4d:25:32:24:0c:bf:6e:1d:5b:a3:ea:51:bd:5f:6e:bf:
         03:ed:43:1f:18:11:c3:b9:36:86:f4:85:b3:29:66:a2:22:4e:
         43:bc:5d:4e:bf:ea:34:f7:46:7b:cb:6b:8a:b1:43:ae:30:1b:
         2a:3e:63:9a:7c:e1:37:e6:6d:2d:a0:37:6f:73:03:34:85:9e:
         11:73:e3:1d:cf:09:71:76:be:f0:eb:dc:1a:10:9e:8c:1b:74:
         b3:63:f6:ec:8d:2e:2f:3f:f2:74:4b:26:5e:c4:2e:2e:69:b0:
         6f:e1:a7:44:3a:8a:33:23:f9:76:a4:99:a0:a4:d7:33:75:cb:
         db:ba:2b:2d:a6:1d:88:9b:45:b4:74:cd:78:f4:95:6c:29:e1:
         89:8d:f6:da:63:dd:7b:15:23:01:68:1e:36:c0:7c:44:b0:ad:
         7c:a4:5f:57:5b:07:8d:cc:a2:1a:c7:ea:a1:78:98:70:15:1b:
         1d:a9:1c:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJKUo89aiWHFm6YrY7tuulB2hvLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzExNTdaFw0yNjAzMDUwMzE2NTdaMDMxMTAvBgNV
BAMTKEMyRkIyMUQ2OEZDODg1MzZBMTdGNUNDNDNBRjEzNkYzN0ZFQjUwNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLO4vUT42gr4A+1nt9A/jgcQe
2TMkyIniP6kzwwJgHXyRIV3lpvQA64Fiw727RSiEf3eTnXF8mqSnGpvHl/3M7KQC
7Yq6ZsRLHnLrLlG+yicQ8p5vpV28PG3kpJCq0FRlz3M7JHDzJuy3POl8wMEx1913
VixzSznNGUGwGImJKDLR25gDQ+9Rn5c+4LMmcPTHTPL95Qood+qCmF5+NP35ocak
iSs56AiCAnLg5CBiI9/YymNxLXn41PjRjTyEUqqSSb884mO86sMB/Vh3732tym04
S8FBLL4hbWEJyUsqoOr9W0PzgJ8qxa03a0s7Qe3WA6p8S8Lm5xqTwOSoyYYfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwvsh1o/IhTahf1zEOvE283/rUEUwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM3MmUzNjMyMmUzMjMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PuYwDQYJKoZIhvcNAQELBQADggEBAH6nIyKj
oQLmV73Se2SZ9/IImPtjrHnZzvsJncQwqHkaVPZ35AoJRia4gAtCiNQIB5E7BBSW
FxZT5gROGAmL8jt2vfq0NR6Vbs1ATSUyJAy/bh1bo+pRvV9uvwPtQx8YEcO5Nob0
hbMpZqIiTkO8XU6/6jT3RnvLa4qxQ64wGyo+Y5p84TfmbS2gN29zAzSFnhFz4x3P
CXF2vvDr3BoQnowbdLNj9uyNLi8/8nRLJl7ELi5psG/hp0Q6ijMj+XakmaCk1zN1
y9u6Ky2mHYibRbR0zXj0lWwp4YmN9tpj3XsVIwFoHjbAfESwrXykX1dbB43MohrH
6qF4mHAVGx2pHLk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:54:01 2025 by rpki-client