Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          Lr0RvKoKD/b8XmQMxqZlJQ6AY3Sj6iG0I1zJyN+P23E=
Subject key identifier:   73:80:02:88:9C:10:CD:D7:DF:7C:56:E2:8C:63:59:67:80:AA:2E:44
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       0644B022167B3887B29D810BB8596DCD4F63EAA3
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:01 +0000
ROA not before:           Thu 06 Mar 2025 03:12:01 +0000
ROA not after:            Thu 05 Mar 2026 03:17:01 +0000
asID:                     262663
IP address blocks:        187.62.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:b0:22:16:7b:38:87:b2:9d:81:0b:b8:59:6d:cd:4f:63:ea:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:01 2025 GMT
            Not After : Mar  5 03:17:01 2026 GMT
        Subject: CN=738002889C10CDD7DF7C56E28C63596780AA2E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:ea:d1:b8:83:9e:16:81:57:4d:8b:fc:1e:
                    8b:3d:35:0b:dc:33:f1:bc:c7:6e:89:3a:97:60:9a:
                    b8:1e:13:69:ee:b2:eb:1f:39:59:6d:63:3c:a8:e7:
                    67:c7:d6:c1:1f:7d:70:dd:ec:fe:63:95:2a:7b:38:
                    0e:49:85:47:e6:53:7a:f6:35:eb:a6:c1:b6:b0:d3:
                    f8:1a:5e:82:84:c7:dc:23:fa:b6:52:6c:78:c4:6b:
                    28:7b:46:39:b4:ac:47:c5:3e:b2:a5:e4:f0:34:00:
                    ea:1b:6c:3a:e5:c4:8b:92:09:8b:33:bd:87:42:0d:
                    76:32:43:e5:da:2f:12:a2:97:69:69:fe:bf:76:9b:
                    36:85:2e:75:a9:c2:08:f5:4f:0d:4e:24:12:d4:63:
                    71:35:51:5e:11:ea:df:cb:70:ba:32:40:8d:6b:63:
                    62:45:de:e2:6d:ec:76:7c:d5:90:df:0a:41:6f:b1:
                    38:60:0c:60:81:cc:92:8a:7b:1f:25:96:b1:26:9e:
                    03:6c:e9:4c:91:b2:b2:07:0b:84:0a:8f:85:05:fe:
                    30:b4:d9:f7:91:4f:1e:cf:98:11:26:0a:b1:69:cb:
                    0c:b0:31:9b:58:df:5c:2f:05:5c:46:12:2d:ef:ee:
                    45:1f:8b:db:90:46:1d:32:08:18:7b:95:e7:48:19:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:02:88:9C:10:CD:D7:DF:7C:56:E2:8C:63:59:67:80:AA:2E:44
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:9d:c3:2b:3f:69:fc:48:dd:2a:88:20:28:57:61:bf:d1:
         c1:65:6e:73:be:43:79:07:bf:9e:fd:23:07:45:6b:ba:b2:c7:
         b1:40:4d:bb:dd:36:21:b0:8a:db:d0:83:3c:e0:ae:39:84:56:
         f5:4a:ee:d7:5d:fc:c1:88:e1:e3:30:27:62:21:c5:36:d1:bf:
         c2:c1:dd:bc:b7:53:3f:a6:92:30:c8:1d:0f:b4:9e:9e:54:4a:
         68:a9:aa:6d:b3:9e:7f:ba:cc:fd:87:90:24:f6:c6:06:0f:ba:
         f8:d5:99:e2:e1:da:7f:21:5b:5b:5d:f9:a0:49:d2:f5:cc:b7:
         32:b8:51:b6:51:80:6e:78:81:e7:50:fe:ea:89:0b:8e:a8:7b:
         de:ba:60:9f:ac:13:1a:b3:c4:fa:4b:0d:a0:e2:4b:a9:4a:05:
         18:38:db:89:35:19:a2:30:b0:a9:89:c6:28:d9:f3:de:1d:28:
         27:13:ca:c3:0c:54:98:78:1c:2e:08:9c:f7:f0:b9:9d:c1:50:
         e0:8b:8f:7d:34:1c:7d:33:b4:9c:47:0c:e0:b5:92:45:5c:6b:
         75:81:5f:9a:1a:23:a3:88:7f:86:ef:13:8b:94:3f:4b:77:ed:
         c6:a5:c6:f1:b8:b1:e4:2f:bd:8d:d8:3c:2f:5b:2c:68:51:4c:
         1e:3b:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:50:45 2025 by rpki-client