Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          njmcwFHphE1m9X66Dy8bq28+ByiAWjSsF/Iyylw6ZjQ=
Subject key identifier:   11:75:E2:E5:49:A8:C5:AB:3E:D1:F9:0A:73:5F:B2:F8:0D:91:83:CF
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1D455EB65B38ECC410E24086A36EB0E5F0B9F75A
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:09 +0000
ROA not before:           Thu 04 Apr 2024 02:14:09 +0000
ROA not after:            Thu 03 Apr 2025 02:19:09 +0000
asID:                     262663
IP address blocks:        187.62.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:45:5e:b6:5b:38:ec:c4:10:e2:40:86:a3:6e:b0:e5:f0:b9:f7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:09 2024 GMT
            Not After : Apr  3 02:19:09 2025 GMT
        Subject: CN=1175E2E549A8C5AB3ED1F90A735FB2F80D9183CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:6c:c2:bb:21:47:a0:f2:6d:f4:5a:27:d7:
                    c8:bf:71:79:67:9e:00:32:52:54:6e:5b:41:cc:4d:
                    8a:2e:21:32:db:bd:e3:dc:8f:1e:1b:d3:23:f3:23:
                    1e:ee:9b:66:9a:7a:ce:b0:30:e8:09:c2:70:34:fa:
                    7e:33:25:e6:53:d1:86:39:77:39:ba:d7:44:87:6c:
                    d6:13:14:1f:5f:e7:f4:0a:19:b1:e0:10:21:dc:b1:
                    23:f7:51:4d:87:c7:69:39:00:cf:ce:40:f5:22:28:
                    84:ad:b3:eb:a7:31:72:9d:d7:4b:4f:76:b8:2e:8d:
                    bf:a8:8d:e0:03:06:ca:21:47:e0:0f:20:85:72:d0:
                    fe:66:fb:a1:fb:80:6b:89:8b:79:9b:08:67:55:bb:
                    14:bf:76:61:a8:4f:40:b2:82:0c:b0:fa:54:c0:08:
                    39:18:f0:61:41:da:4d:64:91:bf:e8:a1:c3:03:b7:
                    1f:89:57:b5:e8:8c:a7:ac:c1:2e:16:1c:4a:6c:f8:
                    13:47:9c:b5:f2:bd:1c:96:63:fa:cf:0b:b0:78:97:
                    31:89:da:66:f0:8e:a1:08:32:d8:79:9f:29:c9:53:
                    a6:22:82:bc:78:22:75:ce:e1:f9:ab:b5:de:2e:2f:
                    c1:d9:6a:66:1e:5b:a7:b5:5c:80:a3:7b:fc:04:e2:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:E2:E5:49:A8:C5:AB:3E:D1:F9:0A:73:5F:B2:F8:0D:91:83:CF
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:34:6f:95:1b:2c:d9:98:0e:d5:96:f7:e9:c7:47:17:02:56:
         5c:75:05:dd:7e:de:55:5d:69:2f:85:d1:86:79:e5:6e:1f:39:
         4f:f4:28:2c:d4:50:6e:af:aa:0f:0f:e1:09:ab:be:d3:6c:b9:
         8a:3d:58:a1:cd:f7:57:da:06:e1:21:f0:74:23:ee:c9:8f:25:
         d5:14:40:0d:c6:6b:d7:48:43:97:7c:13:20:db:f7:6f:1d:98:
         7f:e8:ea:31:f2:01:ce:9e:15:cd:10:e7:d1:ea:24:39:01:51:
         e4:2c:a1:99:ee:bb:f2:a3:15:83:36:45:4c:6e:37:6c:38:86:
         95:e2:48:df:c3:8e:4c:99:c1:df:33:e6:8d:76:bc:94:9a:a4:
         0b:e3:04:2e:7a:29:ba:37:b5:29:36:be:b6:c5:22:4c:37:b1:
         0e:34:72:22:02:14:f7:4f:3c:48:5e:24:25:19:54:12:77:21:
         89:03:1c:21:9b:d1:8a:05:e3:c1:c5:5a:dc:27:a5:c2:30:9a:
         b0:e9:48:f6:d6:43:ad:55:d1:02:b5:a0:47:af:de:43:00:11:
         b6:b8:38:7f:68:ac:82:b9:dd:5f:ac:d0:7b:ad:ce:9b:ad:5a:
         d7:6e:69:76:d0:33:76:8c:89:ef:07:e5:60:b3:f8:f5:62:47:
         88:18:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org