Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS262663.roa
File:                     AS262663.roa (raw, json)
Hash identifier:          YFHHrgsxKXFreKMggGd2cwVKKtzRwB5xUEyXF74ib+A=
Subject key identifier:   4C:E6:14:8A:F1:23:40:33:C0:DF:0F:F2:2F:71:A0:20:C1:F1:49:4D
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6D5D7C3E69597323E2E90FC371C9584E9DFACF18
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS262663.roa
Signing time:             Wed 17 Sep 2025 14:55:08 +0000
ROA not before:           Wed 17 Sep 2025 14:50:08 +0000
ROA not after:            Wed 16 Sep 2026 14:55:08 +0000
asID:                     262663
IP address blocks:        186.216.0.0/24 maxlen: 24
                          186.216.1.0/24 maxlen: 24
                          186.216.2.0/24 maxlen: 24
                          186.216.3.0/24 maxlen: 24
                          186.216.4.0/24 maxlen: 24
                          186.216.5.0/24 maxlen: 24
                          186.216.6.0/24 maxlen: 24
                          186.216.7.0/24 maxlen: 24
                          186.216.8.0/24 maxlen: 24
                          186.216.9.0/24 maxlen: 24
                          186.216.10.0/24 maxlen: 24
                          186.216.11.0/24 maxlen: 24
                          186.216.12.0/24 maxlen: 24
                          186.216.13.0/24 maxlen: 24
                          186.216.14.0/24 maxlen: 24
                          186.216.15.0/24 maxlen: 24
                          186.216.16.0/24 maxlen: 24
                          186.216.17.0/24 maxlen: 24
                          186.216.18.0/24 maxlen: 24
                          186.216.19.0/24 maxlen: 24
                          186.216.20.0/24 maxlen: 24
                          186.216.21.0/24 maxlen: 24
                          186.216.22.0/24 maxlen: 24
                          186.216.23.0/24 maxlen: 24
                          186.216.24.0/24 maxlen: 24
                          186.216.25.0/24 maxlen: 24
                          186.216.26.0/24 maxlen: 24
                          186.216.27.0/24 maxlen: 24
                          186.216.28.0/24 maxlen: 24
                          186.216.29.0/24 maxlen: 24
                          186.216.30.0/24 maxlen: 24
                          186.216.31.0/24 maxlen: 24
                          186.216.32.0/24 maxlen: 24
                          186.216.33.0/24 maxlen: 24
                          186.216.35.0/24 maxlen: 24
                          186.216.36.0/24 maxlen: 24
                          186.216.37.0/24 maxlen: 24
                          186.216.38.0/24 maxlen: 24
                          186.216.39.0/24 maxlen: 24
                          186.216.40.0/22 maxlen: 22
                          186.216.40.0/23 maxlen: 23
                          186.216.40.0/24 maxlen: 24
                          186.216.41.0/24 maxlen: 24
                          186.216.42.0/24 maxlen: 24
                          186.216.43.0/24 maxlen: 24
                          186.216.44.0/24 maxlen: 24
                          186.216.45.0/24 maxlen: 24
                          186.216.46.0/24 maxlen: 24
                          186.216.47.0/24 maxlen: 24
                          186.216.48.0/24 maxlen: 24
                          186.216.49.0/24 maxlen: 24
                          186.216.50.0/23 maxlen: 23
                          186.216.50.0/24 maxlen: 24
                          186.216.51.0/24 maxlen: 24
                          186.216.52.0/24 maxlen: 24
                          186.216.53.0/24 maxlen: 24
                          186.216.54.0/24 maxlen: 24
                          186.216.55.0/24 maxlen: 24
                          186.216.56.0/24 maxlen: 24
                          186.216.57.0/24 maxlen: 24
                          186.216.58.0/24 maxlen: 24
                          186.216.59.0/24 maxlen: 24
                          186.216.60.0/24 maxlen: 24
                          186.216.61.0/24 maxlen: 24
                          186.216.62.0/24 maxlen: 24
                          186.216.63.0/24 maxlen: 24
                          187.62.224.0/24 maxlen: 24
                          187.62.225.0/24 maxlen: 24
                          187.62.226.0/24 maxlen: 24
                          187.62.227.0/24 maxlen: 24
                          187.62.228.0/24 maxlen: 24
                          187.62.229.0/24 maxlen: 24
                          187.62.230.0/24 maxlen: 24
                          187.62.231.0/24 maxlen: 24
                          187.62.232.0/24 maxlen: 24
                          187.62.234.0/24 maxlen: 24
                          187.62.235.0/24 maxlen: 24
                          187.62.236.0/24 maxlen: 24
                          187.62.237.0/24 maxlen: 24
                          187.62.238.0/23 maxlen: 23
                          187.62.238.0/24 maxlen: 24
                          187.62.239.0/24 maxlen: 24
                          187.62.240.0/24 maxlen: 24
                          187.62.241.0/24 maxlen: 24
                          187.62.242.0/24 maxlen: 24
                          187.62.243.0/24 maxlen: 24
                          187.62.244.0/24 maxlen: 24
                          187.62.246.0/24 maxlen: 24
                          187.62.247.0/24 maxlen: 24
                          187.62.248.0/24 maxlen: 24
                          187.62.249.0/24 maxlen: 24
                          187.62.250.0/24 maxlen: 24
                          187.62.251.0/24 maxlen: 24
                          187.62.255.0/24 maxlen: 24
                          2804:164:1000::/36 maxlen: 36
                          2804:164:d900::/40 maxlen: 40
                          2804:164:f800::/40 maxlen: 40
                          2804:164:fa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5d:7c:3e:69:59:73:23:e2:e9:0f:c3:71:c9:58:4e:9d:fa:cf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Sep 17 14:50:08 2025 GMT
            Not After : Sep 16 14:55:08 2026 GMT
        Subject: CN=4CE6148AF1234033C0DF0FF22F71A020C1F1494D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:1e:df:46:d5:51:97:78:21:a1:53:04:02:
                    d5:f7:4f:de:68:17:bb:0c:35:8d:0a:f0:39:34:ca:
                    72:1e:d6:3d:26:af:b7:c8:2a:0e:1a:c1:06:ed:b4:
                    61:0c:b6:ba:91:b9:29:29:10:4b:13:33:86:0d:d0:
                    0b:21:8e:e5:55:45:9f:a0:d2:03:0f:2b:ca:c8:26:
                    a1:f7:e1:e0:1f:c0:59:6f:11:d2:4c:f4:63:16:80:
                    97:61:d4:4c:e0:f3:fc:22:c5:0c:a3:da:8a:71:0a:
                    24:89:7c:55:30:ba:bd:a6:a7:9c:14:d9:a3:43:b3:
                    68:15:97:8e:66:8d:8f:2e:25:e9:5c:bf:e5:4c:8a:
                    1d:ab:4b:60:a0:69:50:ce:f8:9f:a9:6d:e8:30:25:
                    91:dc:f6:b7:0c:e1:75:6f:2d:e8:88:38:da:65:81:
                    69:fa:56:cf:be:54:2f:80:63:08:0d:29:40:22:40:
                    93:05:ee:f0:ed:a8:a2:bc:65:c4:63:75:0c:b6:98:
                    2f:d2:bb:f4:57:19:92:fd:49:67:39:76:b7:f0:a7:
                    88:c0:dd:66:10:e9:96:12:d4:77:81:5b:5c:d4:ab:
                    4e:80:6d:b9:f0:15:ae:2c:4d:c5:27:18:25:a9:d8:
                    f5:47:8f:f4:c5:84:e7:0f:08:6f:80:21:66:23:d0:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E6:14:8A:F1:23:40:33:C0:DF:0F:F2:2F:71:A0:20:C1:F1:49:4D
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS262663.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.0.0-186.216.33.255
                  186.216.35.0-186.216.63.255
                  187.62.224.0-187.62.232.255
                  187.62.234.0-187.62.244.255
                  187.62.246.0-187.62.251.255
                  187.62.255.0/24
                IPv6:
                  2804:164:1000::/36
                  2804:164:d900::/40
                  2804:164:f800::/40
                  2804:164:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:b4:ba:7f:73:38:35:e2:52:8a:58:b5:a3:83:e8:72:a1:
         44:e8:71:f1:16:98:a5:5a:76:4c:16:7d:0f:2b:15:1d:6c:fb:
         14:1e:ad:77:3e:08:0e:c7:d3:14:6c:79:a1:cb:00:8e:36:3e:
         ed:8e:95:cf:72:63:7c:c8:0b:56:65:a7:fd:8c:69:7e:6c:cd:
         d1:3b:3a:f1:a9:2f:d2:47:1f:f3:3a:eb:30:95:27:0a:5d:75:
         8f:1e:1a:0b:be:fe:9f:1e:26:e4:3b:2a:5c:81:f0:fd:29:15:
         12:48:75:9c:ac:f0:99:5c:a6:fd:1f:bb:fb:37:c8:a4:0e:48:
         27:f5:b3:92:a2:05:8a:a0:9d:8d:4d:21:19:7c:75:c7:6a:cd:
         e8:1d:f0:6f:3e:fd:82:5e:4c:69:ee:ec:e3:81:eb:71:be:d4:
         9d:ed:86:dc:2e:e9:a1:a0:a6:7c:19:e9:1e:0a:0a:42:47:57:
         ae:cb:11:3b:c7:e6:54:e9:f1:76:20:a6:9e:ab:13:b3:75:93:
         76:6c:03:ef:45:2a:68:8a:d1:86:76:ef:29:fb:22:4d:a9:26:
         e8:a6:d3:83:9c:e4:ec:93:3e:8b:cc:9b:f3:45:34:c1:89:fb:
         5a:c9:4f:e2:db:20:8d:8f:37:51:d7:a4:e1:b0:ff:1b:18:06:
         56:55:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:56:03 2025 by rpki-client