Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          wB5l3SW4HpVzTn0VzzWdnwGQISCProvPGVPoSPK+nOI=
Subject key identifier:   4F:ED:D8:9D:A0:CE:37:78:57:1F:57:37:6C:4D:53:9F:22:F3:4E:BB
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1A11912D7D150AFCE01E8142365E176214C4ECF0
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:07 +0000
ROA not before:           Thu 04 Apr 2024 02:14:07 +0000
ROA not after:            Thu 03 Apr 2025 02:19:07 +0000
asID:                     262663
IP address blocks:        187.62.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:11:91:2d:7d:15:0a:fc:e0:1e:81:42:36:5e:17:62:14:c4:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:07 2024 GMT
            Not After : Apr  3 02:19:07 2025 GMT
        Subject: CN=4FEDD89DA0CE3778571F57376C4D539F22F34EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:22:62:ad:3e:f8:06:f2:a3:a5:fa:0c:09:
                    28:5f:03:bb:f0:a1:7d:2e:57:db:88:f4:a5:ef:60:
                    46:59:fb:9a:f3:ec:91:22:cd:c4:61:26:04:13:85:
                    cc:e5:fa:b7:0e:f6:b0:93:65:70:b6:33:bc:b4:d4:
                    1e:1d:73:3e:b9:fc:68:5d:69:e8:58:89:20:fb:b9:
                    01:08:8a:99:7a:dd:30:de:94:e0:5c:87:a4:df:08:
                    7a:f7:c3:4d:a5:b2:0b:46:18:3b:60:7c:bc:a1:b0:
                    fc:fd:39:63:8a:0c:90:91:96:c8:9f:34:56:c7:e5:
                    d0:29:51:0a:75:92:cd:aa:67:aa:35:f0:25:bc:09:
                    c3:f8:be:bf:11:3d:a8:60:bd:cb:d3:b9:f9:64:1d:
                    1f:52:a0:49:9a:81:fe:10:fc:ef:d3:9a:79:2a:03:
                    32:02:18:9b:d9:b7:b0:2b:57:23:28:f1:dc:34:3a:
                    4c:b9:ee:3e:33:2e:1e:0c:00:5b:01:4e:11:6b:25:
                    16:cd:ba:17:75:b4:c2:cd:1a:09:96:48:3b:68:a1:
                    d8:22:d2:9d:8e:46:18:b2:d8:bb:ab:f4:c1:01:b3:
                    14:38:51:2d:e4:b3:23:12:ec:8a:a3:2c:0c:51:75:
                    8c:49:83:0c:3e:eb:7d:18:89:09:cb:73:f9:f3:1c:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:D8:9D:A0:CE:37:78:57:1F:57:37:6C:4D:53:9F:22:F3:4E:BB
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:b9:fa:87:14:2e:06:ef:ab:a2:e2:30:08:43:e1:90:e6:
         a8:af:4e:05:41:5d:1b:72:0f:44:c3:3b:0c:dc:eb:49:2f:01:
         d3:ab:0c:1e:a2:57:3e:a7:77:70:27:23:04:c3:fd:c4:d6:f1:
         20:7a:2f:2e:13:ba:0c:39:ac:80:d2:87:66:e2:8a:5a:13:bb:
         f8:57:01:33:66:54:f2:3b:8e:fb:33:4a:75:1c:28:b7:7a:52:
         e1:09:17:09:1b:74:62:ca:d3:f8:8d:74:7c:22:49:b1:82:fa:
         48:e9:0f:c8:e5:c8:15:14:d1:35:06:8a:ed:da:27:70:82:16:
         d6:2d:c4:d5:d5:59:40:a8:b0:42:84:34:7f:86:1b:f8:30:6c:
         e6:99:90:a1:2f:35:b8:f3:45:96:3e:b5:82:54:2c:f4:6f:7c:
         01:6f:43:84:88:0c:57:d0:86:63:20:7d:47:d9:cf:aa:ec:09:
         bc:8b:dd:7c:8e:c7:d7:ca:c2:77:25:12:8f:6e:4c:fa:68:0d:
         be:5f:ab:67:12:f1:98:77:4f:75:52:6b:6a:6f:24:d8:3a:26:
         ce:f1:ff:3f:0d:25:be:c1:51:a1:0a:2c:4b:f6:49:8d:c6:f9:
         50:f5:92:2d:bc:ac:0e:33:ea:03:a7:1a:5e:e8:eb:71:12:64:
         95:90:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org