Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          FJDwwUBVg+9bHzc6or0w+BoN1m8byyYwQ3yul3CQcM0=
Subject key identifier:   A4:1E:20:5B:6A:F2:F2:4B:50:10:E7:46:9A:E3:F7:7D:EA:D9:63:7F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       79F7267A2A6F8CCC6E7D5A246C1436FD79CED0E1
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:58 +0000
ROA not before:           Thu 06 Mar 2025 03:11:58 +0000
ROA not after:            Thu 05 Mar 2026 03:16:58 +0000
asID:                     262663
IP address blocks:        187.62.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f7:26:7a:2a:6f:8c:cc:6e:7d:5a:24:6c:14:36:fd:79:ce:d0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:58 2025 GMT
            Not After : Mar  5 03:16:58 2026 GMT
        Subject: CN=A41E205B6AF2F24B5010E7469AE3F77DEAD9637F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:18:a0:3a:b4:93:64:33:58:bc:61:90:98:
                    97:5a:69:bd:5c:e4:ff:bc:eb:bd:ff:5c:3a:d5:a6:
                    c7:dd:9b:83:1a:3a:73:35:e2:56:fe:14:b5:a1:db:
                    9c:03:48:cd:eb:f1:b7:29:bf:46:f9:f4:08:d5:58:
                    56:94:a7:db:59:cb:42:cf:9c:29:93:75:54:fe:ac:
                    b3:51:7f:d2:91:ca:4f:71:5d:5e:7a:b8:4a:c8:78:
                    ec:75:c5:18:bb:c5:3b:af:6a:da:93:45:b9:11:cc:
                    ac:a0:a1:06:2a:5b:8e:7d:17:9b:3b:88:99:86:3a:
                    a5:41:f4:06:1b:c1:3f:44:e3:0e:c5:66:83:bb:29:
                    c2:23:06:83:6f:0d:c3:7d:39:e6:72:ab:01:27:ff:
                    e7:e3:44:36:77:4e:0f:81:4d:d8:b7:3a:f6:0c:78:
                    e6:1d:5c:81:ef:78:ed:82:fb:a8:d3:03:3f:62:22:
                    86:a8:4c:c4:95:6b:17:7e:55:1b:41:cb:a4:8d:12:
                    3a:5e:c6:99:b2:a8:99:7b:3c:b5:ec:4d:92:46:36:
                    1a:11:8d:71:65:f1:9b:e5:10:a7:4b:92:cb:6e:f9:
                    69:40:0c:ff:65:88:05:82:b7:89:45:dd:2b:26:27:
                    64:c9:29:30:3b:d3:ef:3b:a1:8b:37:3a:8c:30:de:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1E:20:5B:6A:F2:F2:4B:50:10:E7:46:9A:E3:F7:7D:EA:D9:63:7F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:67:43:d4:4a:cc:60:63:a7:1f:f1:5e:e0:1a:d6:22:61:69:
         55:5e:30:e0:64:62:b1:e8:11:0a:9e:b7:21:cc:10:b7:0e:9f:
         23:4a:f4:37:45:80:64:c6:a5:d3:0c:1a:00:14:69:be:ba:93:
         ff:c6:ab:6d:81:c6:bc:ca:56:4c:94:6b:ac:17:bf:cc:b4:46:
         f0:4b:60:ba:d9:4b:82:0c:53:6d:a6:f3:0f:79:9a:bf:fd:21:
         f2:d1:77:d1:85:b6:6d:b7:6d:cb:28:ad:6e:dd:3a:ee:49:8d:
         1f:ba:84:6e:ba:85:5c:28:ce:e8:33:5a:4f:6d:20:b2:5d:76:
         41:51:12:4d:72:31:34:6a:c9:06:57:a2:f6:36:08:04:b3:ac:
         f0:43:24:20:08:fc:ad:ae:35:c5:68:f7:c9:4f:5f:01:fc:a2:
         1f:4b:0e:f9:03:e3:64:69:4e:e3:12:83:d9:00:ff:a8:7e:6f:
         f4:d3:8d:ab:50:d6:ca:1d:30:74:e5:38:1c:5c:82:d5:3d:ea:
         c8:bb:e4:6a:ce:4b:fe:16:a7:cb:89:78:bd:a1:f1:ed:cc:b0:
         86:19:97:5b:3c:d2:9c:74:0b:b8:68:c4:c5:b8:b1:55:4f:2b:
         c2:93:09:88:c0:48:81:d8:c5:a8:d1:dc:ee:29:bc:3a:70:3a:
         9e:96:bc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:07:57 2025 by rpki-client