Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          M471FiNcNboXaAcX/3ZdVvx/ixBRbtUxgrAz1EcDZ78=
Subject key identifier:   08:E2:DD:A2:5F:02:9F:90:56:C9:BB:11:42:89:FC:51:E3:C6:17:27
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6566431EE824428C951B971E956CD581989A30BB
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:06 +0000
ROA not before:           Thu 06 Mar 2025 03:12:06 +0000
ROA not after:            Thu 05 Mar 2026 03:17:06 +0000
asID:                     262663
IP address blocks:        187.62.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:66:43:1e:e8:24:42:8c:95:1b:97:1e:95:6c:d5:81:98:9a:30:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:06 2025 GMT
            Not After : Mar  5 03:17:06 2026 GMT
        Subject: CN=08E2DDA25F029F9056C9BB114289FC51E3C61727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:e4:2d:d0:fe:65:4d:5c:95:b5:a7:df:0c:
                    25:fb:1c:3d:98:d4:33:44:f2:4e:94:6c:86:ea:4c:
                    1b:84:19:88:e2:e4:64:30:c0:9c:ac:31:4b:c2:f0:
                    a3:66:db:7d:da:03:47:32:54:ad:fd:ce:42:19:92:
                    a0:79:69:26:66:0d:e5:f0:32:67:45:cf:98:6c:4d:
                    8c:3f:7b:dc:28:f0:9b:25:3d:ca:b4:52:4a:aa:5b:
                    11:57:42:07:e1:19:28:11:46:37:b8:2a:51:97:cb:
                    11:41:2b:75:b8:8f:63:92:dc:dc:dd:d3:3b:50:4b:
                    21:ca:ca:d3:3c:cc:5e:d7:cc:40:fc:90:be:5e:4d:
                    36:1c:39:f3:a5:ba:ac:3f:0f:bf:9b:f0:4c:e5:d4:
                    d3:17:ae:29:f9:77:c8:d2:6b:77:65:09:a6:09:30:
                    d2:38:f0:78:85:e3:4d:54:a9:87:5a:17:2d:b4:a1:
                    f9:be:9d:fe:97:cb:82:f0:5b:5d:d7:2c:a6:31:19:
                    35:40:db:b9:09:4d:22:e0:c6:2a:4c:25:63:0a:bf:
                    49:31:6d:f4:84:81:ce:fd:d1:71:41:dc:88:81:e3:
                    b4:d8:5f:e5:f0:eb:09:02:60:2a:2d:05:f3:be:41:
                    6a:8d:9e:33:24:36:47:b9:cc:2c:14:a8:35:8e:fa:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E2:DD:A2:5F:02:9F:90:56:C9:BB:11:42:89:FC:51:E3:C6:17:27
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:05:16:d9:72:80:44:0a:05:8a:71:7c:70:9e:85:41:68:ad:
         ce:e0:13:57:d8:62:8a:e6:1a:e6:a2:74:ff:1c:36:0f:9a:91:
         f7:03:30:c6:e0:3b:b7:41:ba:32:cd:78:dc:7e:e9:eb:4a:75:
         3b:6c:78:6a:7e:6f:fb:04:e6:8c:1a:ab:84:9e:fe:db:d6:d0:
         17:f4:03:fb:40:62:59:37:49:52:6f:eb:72:06:33:65:e8:4c:
         f6:ca:a3:5e:b6:27:30:99:3b:ef:b8:de:43:53:dd:50:a5:c6:
         4c:eb:d0:dd:27:ad:55:69:58:43:f9:a0:d2:d3:b5:32:71:69:
         50:de:ba:3c:9e:83:8a:4b:5b:ae:ea:4a:57:10:3c:aa:d4:c5:
         6b:16:75:94:a5:53:dd:09:d0:50:d5:93:50:6c:24:40:50:a2:
         ea:cf:04:be:55:f2:6b:79:3e:5a:04:41:a2:1b:4a:5b:04:e0:
         7c:0a:18:a6:27:14:ab:36:11:02:c9:2b:44:74:c9:5a:18:1e:
         e0:b4:e5:cc:72:5b:42:88:e9:89:fe:ca:b8:f6:9a:de:f9:75:
         d4:34:d9:f8:5e:72:96:f8:81:2e:c8:83:6c:f8:55:46:82:e0:
         e2:94:af:bb:79:72:a8:94:f6:f7:50:43:7a:5c:49:54:c8:33:
         a5:34:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:51:55 2025 by rpki-client