Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234312e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          40JXwvIER3Lariy6vu2ETdKfo46u8JiFiYkD9r1i3Ks=
Subject key identifier:   84:37:36:11:85:10:0E:C4:28:FE:7B:0A:D4:1C:2C:1F:CC:49:E6:BF
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2D3F7A6079F69BFDB4631CD75DFBB686BFC847D4
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:08 +0000
ROA not before:           Thu 04 Apr 2024 02:14:08 +0000
ROA not after:            Thu 03 Apr 2025 02:19:08 +0000
asID:                     262663
IP address blocks:        187.62.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3f:7a:60:79:f6:9b:fd:b4:63:1c:d7:5d:fb:b6:86:bf:c8:47:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:08 2024 GMT
            Not After : Apr  3 02:19:08 2025 GMT
        Subject: CN=8437361185100EC428FE7B0AD41C2C1FCC49E6BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:79:91:d7:7b:a8:f3:fd:72:ee:d7:9c:ad:
                    c6:85:0f:ea:4e:7d:cb:cd:62:00:38:5e:b7:5f:2e:
                    8a:de:e9:e2:a6:57:df:ef:43:fa:e5:e7:e0:67:d3:
                    18:08:10:13:13:98:67:66:a5:e8:1b:69:05:71:fd:
                    ea:db:f8:20:a7:99:61:10:ba:c8:9e:b0:1e:5b:1d:
                    9e:01:f0:3b:fc:9f:d8:6d:ff:f8:1f:b2:9c:73:fb:
                    41:3d:3a:4e:27:4a:ec:69:17:fc:ea:09:b2:fb:68:
                    0b:09:6d:4c:e6:ca:04:c6:fc:25:2c:d8:bd:e6:29:
                    36:b3:da:59:f2:31:3e:2d:48:85:fd:2e:87:a5:9f:
                    06:c1:78:aa:79:e9:91:2a:7d:13:30:84:83:e9:aa:
                    05:6f:bd:0d:d5:0b:fc:18:ae:ba:91:c4:90:72:bd:
                    8d:24:e9:0d:6a:e6:71:e5:3c:ae:4f:d7:47:4c:e5:
                    24:3b:69:6a:c3:04:fd:78:0b:ca:41:3e:02:b9:96:
                    3a:a7:7e:82:63:72:f7:d1:15:98:82:e2:c9:ed:e6:
                    a7:88:bb:58:ad:77:b7:b0:a3:97:08:35:72:db:da:
                    40:ac:06:94:f0:5c:bf:26:42:19:be:be:81:c2:14:
                    5c:94:05:ba:d4:66:3c:f0:86:72:18:49:a4:8d:8a:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:36:11:85:10:0E:C4:28:FE:7B:0A:D4:1C:2C:1F:CC:49:E6:BF
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:38:1c:3e:4f:19:40:12:44:b8:2f:78:f2:80:f2:74:af:
         aa:0e:17:9c:93:59:3c:55:96:56:9e:b7:4e:be:a0:6b:ef:4f:
         05:f4:2e:98:71:b7:5d:08:c5:43:d3:f7:ca:76:aa:5b:da:c9:
         63:0e:63:71:19:25:47:c9:9c:18:3e:8c:75:16:10:88:86:2a:
         92:8f:48:ca:9e:09:db:e1:c8:f8:89:31:f3:66:3d:4a:5d:0f:
         77:32:30:54:21:a2:42:0c:a5:6e:32:bc:b2:d8:89:ea:2a:50:
         59:a5:2a:dc:9e:52:4d:b5:b9:b5:34:25:ac:a6:9a:a9:d9:8d:
         84:49:37:df:1a:e9:8e:46:8f:8d:c0:04:0c:fd:39:35:9d:7c:
         17:3f:22:c5:c3:dc:69:d3:47:97:52:49:13:2d:a6:9f:18:f5:
         ba:f4:62:78:c8:e6:28:36:eb:85:e1:64:00:2e:a0:e7:5d:1c:
         6c:73:c2:9b:35:29:18:e3:9e:ad:24:9e:15:89:3b:39:74:af:
         ad:f8:10:24:b7:f9:a0:08:5c:76:99:cc:5e:80:2d:54:d0:5a:
         d6:82:2c:72:5c:0e:9b:09:c4:24:8d:48:1d:bc:95:1c:52:7a:
         06:d0:4e:5f:fc:3b:9c:6b:12:d0:b7:fb:a0:9b:be:13:7d:9e:
         a0:be:ff:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org