Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          mGzMmLHbQvGpi46txL4PHAzWk52Eh5MlxM3IluUgkbo=
Subject key identifier:   43:9E:D7:B2:94:2F:4C:E3:38:05:03:B0:BE:49:D3:A0:24:E6:D4:A6
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       505C175847A9DBE9AA7F779ABDB3713EF64468EA
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:09 +0000
ROA not before:           Thu 06 Mar 2025 03:12:09 +0000
ROA not after:            Thu 05 Mar 2026 03:17:09 +0000
asID:                     262663
IP address blocks:        187.62.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5c:17:58:47:a9:db:e9:aa:7f:77:9a:bd:b3:71:3e:f6:44:68:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:09 2025 GMT
            Not After : Mar  5 03:17:09 2026 GMT
        Subject: CN=439ED7B2942F4CE3380503B0BE49D3A024E6D4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:65:4a:91:75:29:3c:a2:a3:0a:ac:a6:bf:
                    17:ff:97:38:f3:64:26:79:db:a3:73:d6:18:e1:34:
                    d2:20:aa:ee:5e:be:27:1d:0e:fa:13:2a:b2:6d:bf:
                    1d:e2:da:cb:b0:a8:2e:ff:28:e2:40:ae:bf:5f:6d:
                    a5:d7:85:b2:4d:1d:15:88:67:f4:08:f2:27:83:91:
                    8e:a1:e1:20:be:f6:af:db:56:8a:89:3c:65:d3:7c:
                    71:a5:cb:03:5a:17:e3:56:4a:78:95:36:c9:8f:88:
                    d4:c4:b8:fa:67:d4:4c:9b:b6:14:cf:87:2d:f2:ec:
                    c1:c9:5c:99:ac:d8:00:4e:f0:50:98:f7:a4:c8:ba:
                    db:13:2a:0e:d1:06:44:59:a5:ab:ce:b0:11:20:f2:
                    2e:5a:ac:32:6b:ec:7e:3d:35:6c:e1:b1:3d:cb:e9:
                    52:2d:ef:a7:df:43:3e:73:d7:04:6b:7a:a0:87:5d:
                    08:cc:75:83:b2:d1:78:ec:f8:db:f0:28:be:77:34:
                    44:b8:51:b2:39:27:e2:92:fd:87:06:6f:7d:27:9e:
                    c5:c8:9e:f9:3a:03:54:da:b7:3f:61:ac:35:6a:3c:
                    58:ba:f7:d9:41:5c:b2:be:b1:80:09:a7:13:0f:80:
                    c3:58:cd:13:b9:37:79:2c:2f:62:84:1f:ff:38:8d:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9E:D7:B2:94:2F:4C:E3:38:05:03:B0:BE:49:D3:A0:24:E6:D4:A6
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:41:e5:0a:a9:ea:15:25:77:2a:38:50:da:45:06:f3:4a:c1:
         58:b8:22:5a:35:d0:32:05:f5:b8:2f:3f:df:2a:5d:8a:c1:e9:
         2f:9d:39:13:33:7a:69:3e:1f:b6:44:72:21:00:84:75:05:89:
         f5:15:61:ea:01:c2:34:a5:d0:e9:8e:09:7b:a4:25:d0:4f:3a:
         a9:89:8a:c9:54:b2:3f:e2:eb:67:35:05:12:f3:9d:67:bf:e9:
         69:ba:9c:01:ce:6a:94:61:38:60:b0:4d:75:e1:5a:4a:2e:2f:
         ca:0c:d1:2b:31:6d:4e:7f:74:91:81:ba:de:be:d8:03:08:17:
         8a:a0:a8:e0:a7:c9:aa:49:44:f6:19:90:23:b4:dd:f4:5d:e2:
         b9:79:2e:58:3f:17:a5:ca:92:e7:0f:ad:e6:aa:60:42:35:63:
         4d:6d:b3:e0:de:7f:2f:97:18:d9:c8:cf:38:ce:40:32:de:b7:
         8b:3a:5f:ba:13:2f:4e:d7:a5:c0:f5:23:73:7c:15:69:9d:c2:
         a1:fb:24:72:73:2a:f1:ad:de:1a:fa:7f:b7:1e:3e:13:d8:7f:
         78:b6:d8:f8:d3:e3:6c:4b:3f:16:7e:14:57:52:88:bd:95:93:
         c2:84:65:34:5a:93:00:7f:3d:0c:21:e2:77:fa:f5:c7:9a:23:
         4c:82:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:05:16 2025 by rpki-client