Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234382e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          c3UpEhq8LmVw9+pnmmxKZ5Zggw+VacLbycXgVPC2F0w=
Subject key identifier:   51:7D:51:D5:0D:88:66:3C:70:78:40:0F:B3:F3:EA:50:B8:87:41:7F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       655C90E9EF3552324A1CC289946D41550464CCD7
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:08 +0000
ROA not before:           Thu 06 Mar 2025 03:12:08 +0000
ROA not after:            Thu 05 Mar 2026 03:17:08 +0000
asID:                     262663
IP address blocks:        187.62.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5c:90:e9:ef:35:52:32:4a:1c:c2:89:94:6d:41:55:04:64:cc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:08 2025 GMT
            Not After : Mar  5 03:17:08 2026 GMT
        Subject: CN=517D51D50D88663C7078400FB3F3EA50B887417F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:fa:f8:03:3f:94:f7:ac:04:d5:78:da:c6:
                    80:44:4d:20:07:c6:73:27:f7:90:0c:3a:33:c3:35:
                    cf:5f:bb:b0:11:de:bb:61:31:0d:27:50:23:0f:07:
                    9b:03:48:72:28:36:99:ce:7a:81:05:69:21:53:68:
                    a8:66:ae:92:72:5f:62:28:a7:f8:55:55:66:28:f1:
                    4d:e2:8c:4e:c8:c2:be:10:fb:b5:33:01:50:97:cb:
                    9d:b5:15:c5:05:25:6e:8f:5e:2f:3b:01:60:d3:43:
                    5d:a1:07:4b:72:34:60:10:59:70:f5:44:0c:f5:3d:
                    0b:c5:40:45:76:74:d0:03:75:d4:92:c3:ff:ad:0d:
                    11:3f:dd:a7:65:1d:cd:17:57:0c:ff:0b:ba:96:e9:
                    b4:d0:fd:01:d8:06:d0:74:7e:76:30:ee:15:23:81:
                    71:73:a7:17:4f:cb:11:c5:fb:2f:4b:d5:20:cf:28:
                    ba:bd:32:c0:a4:e5:0f:aa:b9:21:94:ae:5f:b3:25:
                    8c:86:45:71:46:b5:29:ab:6e:d1:27:43:a9:cf:6a:
                    e5:ec:53:7d:2d:33:2a:91:cf:b3:ef:b5:62:0e:fb:
                    8c:1f:e0:14:5c:45:d4:2e:01:52:0b:b0:ac:07:62:
                    51:d6:ed:11:f2:cf:96:55:e0:7f:5b:b4:92:f7:a7:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7D:51:D5:0D:88:66:3C:70:78:40:0F:B3:F3:EA:50:B8:87:41:7F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:ca:b0:2c:8a:99:3b:66:a8:b9:b3:c6:a4:30:fc:48:a1:94:
         f3:e7:3a:f1:ae:77:e6:51:0c:95:66:15:40:c2:b0:50:65:af:
         71:1a:a4:33:c3:cb:83:d4:d2:6b:a3:00:ce:8c:2e:90:17:14:
         c9:30:57:51:9d:a1:7a:f0:38:2c:a5:78:69:f9:49:a3:a2:bc:
         ab:33:c2:e5:2d:4f:07:1a:ae:0c:08:6f:57:bc:7b:d3:b2:09:
         6d:29:a7:7f:9b:cb:3e:a6:a7:ea:09:d0:09:2b:46:5d:34:1e:
         d3:a1:e7:78:a9:a8:19:66:1b:ed:20:1b:57:7d:60:81:22:13:
         b0:f5:64:6b:a2:85:f6:7e:b5:88:60:9a:a8:b4:5f:6b:e1:78:
         1e:12:77:51:60:a7:85:3d:6e:42:d0:19:ed:cc:68:8e:02:07:
         39:67:c8:d1:0d:96:a5:8c:f4:dd:e5:81:af:93:32:c0:38:9e:
         03:fe:64:6c:b3:4f:fc:85:d9:6f:94:c8:c2:93:24:70:49:f1:
         4f:d0:e0:cd:d9:86:94:24:d1:ee:d9:d4:24:54:87:38:8e:c5:
         6c:81:79:96:c6:84:0a:1d:ab:ae:13:d2:25:65:aa:47:32:21:
         62:a8:16:e9:95:65:c0:df:ea:c6:19:ef:6c:cd:87:b8:9c:6b:
         50:58:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:53:48 2025 by rpki-client