Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233362e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          G+k/Qto9ayoURfprn7wOlmLjjZ6Emv3O3r2gFzA/xeY=
Subject key identifier:   7F:B7:9E:42:E3:25:38:5E:71:07:FB:D0:12:DC:40:E1:9C:C7:67:EE
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5FA9569DF295313D40935A67FAAC0B9449A8CEF1
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:59 +0000
ROA not before:           Thu 04 Apr 2024 02:13:59 +0000
ROA not after:            Thu 03 Apr 2025 02:18:59 +0000
asID:                     262663
IP address blocks:        187.62.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a9:56:9d:f2:95:31:3d:40:93:5a:67:fa:ac:0b:94:49:a8:ce:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:59 2024 GMT
            Not After : Apr  3 02:18:59 2025 GMT
        Subject: CN=7FB79E42E325385E7107FBD012DC40E19CC767EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:4a:c6:a0:56:91:41:ae:92:f2:6f:9d:ac:
                    e4:de:f3:f4:00:2e:00:b1:41:d1:4e:ec:f7:81:46:
                    87:e5:f7:f0:dc:70:82:71:06:8b:ab:83:a6:ce:f7:
                    fa:7b:6f:fe:a3:4e:c4:21:cc:3f:0b:f4:4e:23:77:
                    59:09:b0:b0:59:ea:87:af:38:db:4d:e0:29:1f:0f:
                    29:4e:b8:23:46:c3:7e:5a:d5:4a:7b:19:3c:00:7a:
                    7f:28:07:5b:9b:01:5f:af:f6:13:00:5b:10:42:2e:
                    4f:0c:d2:21:f7:a3:18:f9:dc:c2:3c:e6:4e:c7:9c:
                    ff:0d:d7:19:71:e4:a0:0c:a9:c4:de:9b:c3:1a:90:
                    a6:8d:88:c9:cb:dc:8b:b8:09:ee:4b:b7:de:f6:5b:
                    1f:20:fb:4b:02:a1:fb:91:a0:99:86:d6:8d:71:f8:
                    85:f0:15:10:33:7e:9b:9f:a6:38:22:a3:43:e6:7d:
                    75:99:fe:5b:a0:5e:88:64:e0:39:1b:7a:61:2b:5a:
                    bc:6a:f7:61:ee:29:eb:03:bf:77:22:f2:e5:12:91:
                    db:61:bb:73:33:b5:15:b1:6b:0d:5e:3d:b6:cc:24:
                    8b:9c:03:32:96:f2:ea:65:16:ca:c1:24:fe:02:ea:
                    69:7e:ae:a4:41:ec:40:ec:88:4e:ce:06:64:35:5e:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B7:9E:42:E3:25:38:5E:71:07:FB:D0:12:DC:40:E1:9C:C7:67:EE
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:0d:63:ba:e1:d1:b1:c7:0e:87:5e:c3:9e:41:79:0c:56:
         d3:41:64:87:78:0e:95:5b:27:31:a4:cf:b8:2a:e7:2b:c9:fc:
         2a:23:00:89:04:c9:f8:77:02:b6:0d:7f:c1:5e:0e:7e:b9:4c:
         a1:40:28:8f:b1:13:ec:79:52:e6:ce:3f:75:4a:f3:00:2b:59:
         6b:ef:98:9e:0b:bb:8f:29:c9:16:ee:32:25:e6:9b:e5:3b:f1:
         a0:a5:d3:75:83:84:4b:47:75:0b:b7:18:3d:0b:a5:6c:3d:db:
         ec:f8:71:1a:9c:af:9a:d5:a8:5c:6d:b4:cc:3b:e2:ab:d6:f2:
         07:e8:ed:a8:ae:f9:fb:97:84:7f:61:36:fb:38:28:f8:de:1a:
         17:21:d4:c8:f1:29:20:1b:1c:39:9e:3e:ad:f1:27:f9:1a:d0:
         4d:72:a6:82:c3:c9:fb:7e:98:c5:20:5a:cc:0a:0f:87:9e:b3:
         0e:95:b2:36:f7:a0:4f:59:cf:32:b8:7b:b4:6f:a8:22:47:25:
         67:26:cb:d8:1b:ef:17:5b:86:84:57:53:64:d3:6b:20:3c:7e:
         a2:e1:86:bd:4f:ec:b0:6a:fc:85:8e:da:d2:99:8f:22:fd:89:
         4b:f9:78:c9:40:63:77:bf:4f:2d:71:3c:2a:14:1c:ce:83:38:
         a9:f6:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org