Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          YfQQvcsMi/8xJ6FP7rj2QCH8GLuFuQcuprfQoIV3D0Q=
Subject key identifier:   A5:4E:CC:AD:C5:47:2A:C7:04:5D:19:55:9A:5D:0C:5F:1B:00:52:B2
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       32376DD09C0EEDFA56002B4B228AAF84AC760E6E
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:19:02 +0000
ROA not before:           Thu 04 Apr 2024 02:14:02 +0000
ROA not after:            Thu 03 Apr 2025 02:19:02 +0000
asID:                     262663
IP address blocks:        187.62.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 13:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:37:6d:d0:9c:0e:ed:fa:56:00:2b:4b:22:8a:af:84:ac:76:0e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:14:02 2024 GMT
            Not After : Apr  3 02:19:02 2025 GMT
        Subject: CN=A54ECCADC5472AC7045D19559A5D0C5F1B0052B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:43:73:8b:56:2a:04:c9:b5:d3:5e:cc:ea:
                    b9:b4:26:36:ef:03:d1:9c:40:ab:5d:07:3b:aa:b6:
                    d7:d2:cd:e1:88:3f:99:b4:44:e1:a7:54:f4:32:40:
                    50:8c:7e:f1:5a:5c:5f:66:2c:b0:f4:c0:37:f1:c1:
                    74:ea:6c:2a:3b:7f:9c:11:08:d0:27:5c:2f:4e:66:
                    26:dc:94:ec:0a:3c:72:33:04:b5:43:f2:90:8b:d6:
                    2a:78:c2:af:87:36:03:15:08:95:9c:29:b1:33:b1:
                    dc:2a:43:1b:1f:59:e7:02:d2:f1:89:4e:75:47:16:
                    08:0c:7e:b2:d8:fa:89:a3:7f:88:02:66:d3:67:8c:
                    b0:70:51:3f:a0:7d:9f:22:64:12:68:7e:2e:07:87:
                    46:3b:ac:bd:83:45:70:0d:20:23:f3:c3:52:6c:0e:
                    97:49:d5:a3:f8:25:e8:1b:85:02:0b:b8:28:e8:d2:
                    16:f9:18:bb:e3:dc:17:54:2a:81:02:c2:27:7c:70:
                    3c:75:ec:08:e9:2d:93:c5:7f:2f:3c:23:14:bb:31:
                    ad:fd:d6:64:cd:03:94:66:df:bc:d0:c8:ad:d1:14:
                    3e:2f:ce:06:df:40:dd:9a:3b:ec:b8:52:0b:0b:31:
                    df:d7:37:25:e5:3f:62:63:43:0c:a6:be:6c:70:c3:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4E:CC:AD:C5:47:2A:C7:04:5D:19:55:9A:5D:0C:5F:1B:00:52:B2
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:42:a1:d1:1d:87:2f:a1:8a:4c:9b:c3:fa:66:2f:6e:0d:
         ab:d7:4b:cd:33:f2:cd:f8:60:26:6e:d3:f1:57:bc:b3:cc:9a:
         50:00:c8:49:05:0f:91:82:24:bf:79:85:17:e3:e2:cf:5e:97:
         31:47:c7:64:5a:8a:59:50:3e:56:c2:2e:78:a1:83:09:7e:0e:
         46:2a:38:fe:e6:0f:ab:78:d8:8f:75:d2:5e:73:e7:b8:c9:63:
         69:51:f9:08:ea:97:5d:6e:8e:96:94:bd:f1:47:c6:01:27:9a:
         1f:65:24:23:00:c3:ad:16:eb:1a:8a:80:65:75:a2:d0:e0:e4:
         7b:e0:37:a7:7d:e8:b5:cc:6d:ad:52:3d:72:2b:ec:1e:96:78:
         05:16:3e:d4:ed:95:fd:47:69:1e:fc:d5:76:2e:cf:9f:9d:76:
         cf:8d:9f:a7:1b:77:a5:3f:33:b4:38:81:8c:ed:39:ec:49:63:
         17:22:85:32:ed:2e:88:c1:9e:f3:6f:23:3f:99:7b:ca:2e:f3:
         e3:9f:81:6b:65:0e:48:1d:9f:72:be:b5:ee:7c:5f:e8:be:70:
         14:98:bb:97:0b:ec:83:d4:bf:c7:fc:80:23:e8:2c:2e:7d:3b:
         bf:9b:78:b1:f7:fe:bd:05:e2:d5:87:bd:a9:aa:17:63:51:7d:
         f4:f5:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 16:38:36 2024 by rpki-client on console-ams.rpki-client.org