Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e312e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e312e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          bDztClpwe7m6iw4tQ9ALMddeq5tvIU61SDNawGvLdHs=
Subject key identifier:   3F:6C:EA:45:D6:CF:BA:84:EE:E3:D6:10:76:90:FA:CE:DD:12:34:D6
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       204CA68E460A53A06A9798C0FF74AA3735E39BB2
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e312e302f32342d3234203d3e20323632363633.roa
Signing time:             Tue 29 Jul 2025 22:29:19 +0000
ROA not before:           Tue 29 Jul 2025 22:24:19 +0000
ROA not after:            Tue 28 Jul 2026 22:29:19 +0000
asID:                     262663
IP address blocks:        186.216.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4c:a6:8e:46:0a:53:a0:6a:97:98:c0:ff:74:aa:37:35:e3:9b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Jul 29 22:24:19 2025 GMT
            Not After : Jul 28 22:29:19 2026 GMT
        Subject: CN=3F6CEA45D6CFBA84EEE3D6107690FACEDD1234D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:53:e3:52:94:4a:47:69:6a:47:8f:39:0f:
                    2b:35:2d:81:8b:3c:1a:0b:e0:08:71:9d:87:20:32:
                    b8:77:20:2b:51:75:e0:5d:5a:28:c4:d7:68:33:37:
                    3f:5f:1b:c0:c6:44:e0:70:c6:ca:9a:de:87:71:70:
                    e4:a2:d2:3b:df:0f:1c:48:84:ad:2c:67:28:23:34:
                    ec:10:9f:56:88:50:b1:ca:c2:b3:82:ad:00:75:32:
                    9a:ca:54:7e:97:fe:80:43:5b:07:6e:db:38:72:23:
                    25:6e:f4:ab:b2:fa:79:4b:e4:4e:70:fc:25:dd:ea:
                    a3:4a:10:5a:3e:71:e7:33:07:5b:55:55:2b:42:92:
                    05:37:1c:90:9e:f1:ed:0f:85:69:b4:55:3d:0d:67:
                    63:3e:33:a7:d0:31:64:b8:41:61:d2:a7:34:b5:fe:
                    99:b8:ac:1c:63:45:13:a7:3b:ed:37:01:8b:0e:a2:
                    2e:71:3f:e2:74:d9:05:c6:60:16:e8:d2:dc:2b:63:
                    15:da:ab:ce:ba:e0:4c:31:cf:45:42:e3:34:d7:50:
                    af:0d:c4:04:2f:19:68:bb:6c:f9:47:fb:6f:4e:96:
                    23:11:ec:af:37:00:71:81:ff:e0:88:68:1d:c0:b9:
                    b3:6e:a3:c7:87:60:b6:3a:ee:a3:e8:fa:32:31:fd:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6C:EA:45:D6:CF:BA:84:EE:E3:D6:10:76:90:FA:CE:DD:12:34:D6
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e312e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:56:87:12:c5:2b:59:d8:1c:3f:8a:3e:b1:20:92:7f:5f:2e:
         fe:51:a8:fd:77:74:12:5a:60:ed:90:4c:01:ef:e4:3d:1e:77:
         84:4d:a2:03:66:18:32:77:01:94:ca:be:48:1f:86:9b:5f:2c:
         ae:ea:fe:bb:ad:01:fa:69:d9:8c:67:c1:7e:f5:ea:23:34:fc:
         08:01:3c:e4:ee:da:52:1e:54:64:a0:26:49:bf:50:2b:87:45:
         27:2b:0e:5f:c6:be:0f:0c:0c:ac:8c:27:81:d6:1d:a1:3b:05:
         6a:04:d6:d6:9e:07:ed:29:7a:d2:b9:de:ad:f7:e6:da:0f:27:
         f1:43:88:a4:bf:7b:9b:be:c1:26:36:99:e3:3e:aa:28:35:8e:
         5e:10:4a:70:c2:db:79:bb:b9:67:0c:06:3d:9f:10:70:df:20:
         41:03:8c:53:58:d9:1c:57:ea:a8:6f:71:52:d2:b2:ba:3d:e8:
         df:a2:7f:94:ad:06:b3:44:d9:8a:7c:d7:af:4e:c0:5e:a4:05:
         87:66:e0:f2:e7:87:5f:b0:cd:57:21:ff:b1:28:23:5b:4b:99:
         83:80:06:91:cb:58:fc:8e:1b:cd:20:0b:05:d9:ef:16:7d:1c:
         4e:e5:ff:de:1d:5f:7e:71:14:b1:32:69:52:65:97:11:b1:50:
         23:5e:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:39 2025 by rpki-client