Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234322e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          JQiolzLEtr08kpxvr21Sd4rcP+q7TqvF3Nr/URysJb0=
Subject key identifier:   BC:FF:22:97:4D:9A:18:87:C3:E6:2D:89:B6:16:AF:60:7D:63:7C:A9
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2C0D91D4F2286EFFD53006AD9E65D566055221B5
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:02 +0000
ROA not before:           Thu 04 Apr 2024 02:14:02 +0000
ROA not after:            Thu 03 Apr 2025 02:19:02 +0000
asID:                     262663
IP address blocks:        187.62.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0d:91:d4:f2:28:6e:ff:d5:30:06:ad:9e:65:d5:66:05:52:21:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:02 2024 GMT
            Not After : Apr  3 02:19:02 2025 GMT
        Subject: CN=BCFF22974D9A1887C3E62D89B616AF607D637CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:e2:0e:0e:73:e7:ee:2d:10:6e:a6:3b:7e:
                    e9:ff:3b:13:2d:9a:c7:e9:22:49:2a:3e:3c:df:20:
                    a8:16:9b:f6:6c:eb:69:89:90:18:a6:26:9e:f8:d9:
                    f5:4c:c7:88:52:6a:63:54:11:47:58:33:24:80:d1:
                    44:22:fd:d8:59:ab:c6:c1:3b:7c:0d:e4:23:f4:2b:
                    2c:75:a9:6b:be:42:16:3a:dc:83:82:b8:7b:94:32:
                    71:eb:d0:b9:ef:60:83:b7:a7:78:c9:79:4c:9d:f5:
                    99:b2:60:fe:24:52:d9:34:54:68:35:07:ef:ce:7e:
                    0a:4d:84:e3:41:90:06:54:0c:c2:ad:b1:63:bc:b9:
                    08:1a:ee:e2:32:1f:f9:f5:05:f7:26:b3:2b:37:ca:
                    f1:51:f6:06:d8:3f:10:4c:7d:fa:02:ce:a9:57:74:
                    ce:e5:c0:e5:7c:bb:92:77:d4:d2:2a:4a:d8:a1:41:
                    7c:cc:0d:89:bb:0e:69:31:24:d1:5d:7e:b5:e9:e8:
                    ab:ca:45:f9:97:d7:e2:2f:c2:be:32:9e:ea:db:cd:
                    f6:9c:33:df:9a:c1:70:f1:ed:1a:fd:3e:19:55:c9:
                    bb:b8:a1:66:b6:c2:38:32:81:88:2c:f4:47:1c:0a:
                    15:f8:c3:e7:cd:15:5c:60:b5:e6:20:cf:df:3a:3f:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FF:22:97:4D:9A:18:87:C3:E6:2D:89:B6:16:AF:60:7D:63:7C:A9
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:3e:cf:53:f3:04:08:03:a5:0c:fe:50:52:06:17:48:82:
         d9:77:ad:b2:79:be:90:ad:e7:70:f1:1c:93:d1:0f:62:35:6b:
         2a:7a:ec:fb:96:5f:b6:52:b2:55:57:ef:29:2a:18:cd:87:68:
         f5:8e:7f:5d:16:91:c8:b2:14:b5:46:d7:ac:d3:5c:b1:48:80:
         25:b8:e9:92:98:ec:d1:f0:53:ef:51:fc:a7:cb:b1:73:54:28:
         5e:4a:88:29:6a:ac:44:33:ef:99:ed:76:13:a6:51:1a:55:7a:
         95:47:d8:e7:f3:f2:41:45:cb:5b:44:52:d4:c4:b1:91:ff:cc:
         86:14:73:d9:3e:82:19:40:2e:99:ac:12:2f:a4:7e:d6:14:e9:
         6a:40:26:ea:d3:a2:c3:77:15:26:ce:60:d5:91:08:1d:fc:7b:
         51:14:3c:40:cf:6f:68:c7:ac:ce:3d:9d:5a:c9:6f:87:46:78:
         f6:19:e8:ae:63:1e:c2:60:31:19:f9:a7:c9:16:1f:77:71:a0:
         72:72:88:a5:6d:02:b7:c6:e8:47:ca:dc:d4:2b:bd:bf:d3:a8:
         89:4c:70:cc:87:e2:22:b3:54:c8:e8:31:5c:d7:17:65:af:0b:
         22:b3:71:7b:7b:59:ef:d1:66:e2:b3:1b:41:86:a7:ad:1c:30:
         00:88:e7:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULA2R1PIobv/VMAatnmXVZgVSIbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNDA0MDQwMjE0MDJaFw0yNTA0MDMwMjE5MDJaMDMxMTAvBgNV
BAMTKEJDRkYyMjk3NEQ5QTE4ODdDM0U2MkQ4OUI2MTZBRjYwN0Q2MzdDQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbOIODnPn7i0QbqY7fun/OxMt
msfpIkkqPjzfIKgWm/Zs62mJkBimJp742fVMx4hSamNUEUdYMySA0UQi/dhZq8bB
O3wN5CP0Kyx1qWu+QhY63IOCuHuUMnHr0LnvYIO3p3jJeUyd9ZmyYP4kUtk0VGg1
B+/OfgpNhONBkAZUDMKtsWO8uQga7uIyH/n1Bfcmsys3yvFR9gbYPxBMffoCzqlX
dM7lwOV8u5J31NIqStihQXzMDYm7DmkxJNFdfrXp6KvKRfmX1+Ivwr4ynurbzfac
M9+awXDx7Rr9PhlVybu4oWa2wjgygYgs9EccChX4w+fNFVxgteYgz986PylRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvP8il02aGIfD5i2JthavYH1jfKkwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM3MmUzNjMyMmUzMjM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PvIwDQYJKoZIhvcNAQELBQADggEBAGwWPs9T
8wQIA6UM/lBSBhdIgtl3rbJ5vpCt53DxHJPRD2I1ayp67PuWX7ZSslVX7ykqGM2H
aPWOf10WkciyFLVG16zTXLFIgCW46ZKY7NHwU+9R/KfLsXNUKF5KiClqrEQz75nt
dhOmURpVepVH2Ofz8kFFy1tEUtTEsZH/zIYUc9k+ghlALpmsEi+kftYU6WpAJurT
osN3FSbOYNWRCB38e1EUPEDPb2jHrM49nVrJb4dGePYZ6K5jHsJgMRn5p8kWH3dx
oHJyiKVtArfG6EfK3NQrvb/TqIlMcMyH4iKzVMjoMVzXF2WvCyKzcXt7We/RZuKz
G0GGp60cMACI570=
-----END CERTIFICATE-----
Generated at Fri Sep 20 15:37:01 2024 by rpki-client on console-fra.rpki-client.org