Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234332e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          /dJ/XhQZWjBzk1tOVdIugMMGFlPwmPP1D3o6bb+3Oug=
Subject key identifier:   65:5E:B7:FA:9A:74:99:D3:74:DE:9B:0E:4A:E6:D0:CD:A8:AC:00:13
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       11DE0228D3D678525794E156D87CBAA984A6DBE1
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:56 +0000
ROA not before:           Thu 06 Mar 2025 03:11:56 +0000
ROA not after:            Thu 05 Mar 2026 03:16:56 +0000
asID:                     262663
IP address blocks:        187.62.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:02:28:d3:d6:78:52:57:94:e1:56:d8:7c:ba:a9:84:a6:db:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:56 2025 GMT
            Not After : Mar  5 03:16:56 2026 GMT
        Subject: CN=655EB7FA9A7499D374DE9B0E4AE6D0CDA8AC0013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:df:01:7c:d5:ce:85:b0:41:19:ac:17:0f:
                    31:64:d3:01:cc:56:18:1f:ae:c5:3f:aa:1a:61:e8:
                    43:7d:a2:9b:de:5d:a3:ba:25:ee:87:09:40:fb:6b:
                    26:9c:9b:21:0c:48:4f:3c:45:25:fb:da:8d:c1:6d:
                    fa:55:67:15:8a:49:d3:22:02:bc:5f:e4:05:51:d5:
                    c4:14:12:a8:c6:fd:60:69:e4:4d:66:67:a5:30:7c:
                    9b:95:ec:59:4c:fb:bc:b4:9b:6b:71:2a:1d:9f:97:
                    7d:ba:88:d0:b3:3e:79:82:66:ca:4e:6d:c8:9e:5f:
                    4b:0f:a4:55:93:18:9e:88:83:e9:4b:fc:3a:f4:60:
                    a7:e0:db:dd:3b:24:f7:b4:16:34:e5:20:b0:ea:ce:
                    27:42:43:e1:53:94:88:c2:b6:eb:0b:e9:7d:3d:ad:
                    5e:93:85:07:f2:ac:53:3f:e9:a2:c6:06:f7:ce:f4:
                    21:04:df:a6:03:0e:15:29:ee:ef:53:9d:e5:1e:35:
                    83:25:ea:c8:53:7f:c4:55:63:59:9b:cc:7c:7f:20:
                    e2:66:9e:42:30:80:41:a2:8e:e7:d6:ec:81:8c:d3:
                    78:dc:5c:ac:58:e4:2c:2e:1a:58:3f:81:bb:49:4f:
                    d1:20:8a:ce:0f:46:b2:3d:0c:1e:62:3d:9f:bd:9b:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5E:B7:FA:9A:74:99:D3:74:DE:9B:0E:4A:E6:D0:CD:A8:AC:00:13
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:83:11:1b:cd:6f:cb:0d:6b:3e:1f:e3:b0:79:3a:4d:10:
         87:db:e2:1d:0f:ce:40:93:ed:4e:cd:3a:ca:9d:e4:13:64:aa:
         53:a6:19:5e:9d:77:df:6e:b9:6f:02:f0:45:b9:96:43:3a:31:
         e1:18:5b:25:e0:a1:27:c2:93:1e:8e:4b:23:72:cc:fd:46:8d:
         a7:77:d9:8d:31:fe:36:99:2c:95:37:7a:54:ad:5f:00:ee:d2:
         7c:b7:f2:70:1c:e8:7e:0c:11:f8:4d:04:c9:f3:22:41:b5:00:
         86:91:8e:82:bb:ed:f8:df:0d:42:91:f9:89:2c:96:0a:7b:b0:
         8b:d1:b0:58:03:cf:0d:fd:6a:4f:78:6c:38:bb:ef:85:39:4c:
         85:05:14:89:49:07:ba:df:f5:be:6f:ca:fe:cb:37:3d:cc:70:
         f1:57:e8:91:08:9e:3f:09:47:b6:26:a5:77:83:7b:2c:27:fc:
         8b:00:45:32:89:6d:c8:41:ab:d3:52:a0:ff:85:47:a4:2a:d0:
         06:1c:72:7f:cf:b6:d2:83:54:19:76:f7:65:d5:51:a6:5f:fc:
         80:07:63:fc:14:8a:8b:8f:1d:27:17:10:2f:68:af:05:c0:88:
         e4:3f:70:8e:1d:4d:82:95:83:e2:14:5b:dd:f7:79:ff:0b:5b:
         fa:50:96:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:43:57 2025 by rpki-client