Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          k7BDK20fmYJxt3VBKkaEC/KU0eg9ZsLExoHwyg5NbKY=
Subject key identifier:   7A:9E:8D:65:1B:EF:29:6B:4B:BB:90:29:60:5E:49:44:8B:50:00:62
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5DB25376E0D39BA188174992CDA638D4AD26D02C
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:54 +0000
ROA not before:           Thu 04 Apr 2024 02:13:54 +0000
ROA not after:            Thu 03 Apr 2025 02:18:54 +0000
asID:                     262663
IP address blocks:        187.62.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b2:53:76:e0:d3:9b:a1:88:17:49:92:cd:a6:38:d4:ad:26:d0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:54 2024 GMT
            Not After : Apr  3 02:18:54 2025 GMT
        Subject: CN=7A9E8D651BEF296B4BBB9029605E49448B500062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:83:0d:a1:54:0d:ad:7c:b1:db:a1:00:c6:
                    a3:93:1e:12:17:8b:3b:4a:7b:2f:8b:b0:e1:30:26:
                    36:ac:c2:ef:39:7e:88:74:9a:fe:ba:6e:19:af:5d:
                    76:4c:ea:33:4e:0b:9a:7d:88:c0:0e:e8:f6:0d:ed:
                    56:b3:77:12:08:7f:bd:d2:32:f9:62:86:5b:5c:3f:
                    d2:0f:cd:c0:3a:19:dd:44:f5:82:a4:3a:a6:cd:43:
                    bd:f1:a0:ed:03:68:0d:be:fa:52:70:b8:92:ae:ca:
                    a1:91:3e:01:7c:47:22:37:b6:cb:fd:9a:fa:ca:2d:
                    70:ae:ef:43:88:71:5f:12:36:61:bc:db:0d:30:4b:
                    0f:d4:f7:f3:bc:5d:f4:26:f5:87:30:29:f7:2c:90:
                    05:b8:66:86:b3:a8:e4:e0:d0:ca:d2:f6:3f:3b:19:
                    70:a3:ed:3c:b2:19:72:30:d5:c5:0f:07:06:7d:07:
                    70:0a:e7:3d:78:1e:e7:04:27:7a:28:0e:28:46:4c:
                    5f:93:80:79:4f:a4:02:77:8d:93:45:db:bd:5f:ee:
                    80:96:e5:05:c6:0c:31:99:31:95:95:c8:13:da:e8:
                    ef:4d:6a:c4:32:47:45:f8:71:5a:ad:f4:ff:a4:04:
                    51:54:b8:ee:32:9f:1e:aa:1c:80:83:dd:8f:81:e0:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:8D:65:1B:EF:29:6B:4B:BB:90:29:60:5E:49:44:8B:50:00:62
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:3a:5f:7d:5e:fb:ba:04:cb:f9:a4:25:6a:72:95:a0:81:
         5f:c0:34:e7:00:54:38:2c:1e:31:3f:82:06:03:2b:d4:af:c0:
         80:32:cf:63:0c:ca:17:83:f2:35:8a:68:ad:f2:56:aa:bf:2f:
         e2:be:8d:78:66:1c:89:42:c4:78:c8:06:9d:8f:16:be:c3:ed:
         f2:ad:6f:7f:0b:56:a9:49:d4:cc:a7:87:e8:ae:a5:e0:94:a5:
         52:7c:a0:99:cd:6f:26:5f:a9:f7:f2:40:5a:2e:cb:ed:56:99:
         77:bb:fa:16:b3:0a:34:a4:5c:b3:dd:84:ec:1d:64:95:44:e4:
         13:91:7b:13:a7:4f:12:45:ed:8a:a1:63:6a:43:af:71:38:63:
         1b:64:fe:45:79:17:58:fd:9d:98:9c:b9:78:33:3f:95:cd:ba:
         6d:3e:5f:81:2c:ab:66:a1:48:22:6b:e5:b9:d7:2f:d0:fc:e1:
         b6:b1:04:06:72:15:e3:2b:7a:68:ae:88:5f:85:84:ef:b0:5b:
         d5:bf:ce:f0:60:fa:e6:80:9e:ab:db:ad:0b:ca:78:bf:ed:3a:
         5b:b1:20:25:d3:30:d3:db:8f:41:be:09:ad:b0:55:17:39:a7:
         0e:f8:76:2a:71:51:39:9d:68:df:90:fd:3e:68:d2:47:d7:a8:
         24:4c:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:31 2024 by rpki-client on console-fra.rpki-client.org