Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          kj2Z/+PHfgC2Icxl4tFOq61iVALSY9xLn1Si5+QcyQo=
Subject key identifier:   0B:BA:84:03:69:90:F7:A9:18:38:ED:90:45:85:B4:9D:1D:2A:91:9A
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       547A782230F779E53A26765BD5C9B73277FDAE31
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:05 +0000
ROA not before:           Thu 06 Mar 2025 03:12:05 +0000
ROA not after:            Thu 05 Mar 2026 03:17:05 +0000
asID:                     262663
IP address blocks:        186.216.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 17:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7a:78:22:30:f7:79:e5:3a:26:76:5b:d5:c9:b7:32:77:fd:ae:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:05 2025 GMT
            Not After : Mar  5 03:17:05 2026 GMT
        Subject: CN=0BBA84036990F7A91838ED904585B49D1D2A919A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:2b:94:29:35:df:18:46:a0:c8:65:e7:42:
                    7a:e5:1b:bb:d3:c0:d2:3f:a3:50:ce:8d:0e:7d:f5:
                    9b:95:8d:ea:b9:72:1e:09:5b:3c:44:65:db:18:e2:
                    95:39:78:14:87:61:c3:1b:3a:72:4b:ba:b3:c4:df:
                    70:b5:5b:7d:b2:09:9f:83:a0:31:b9:6a:8f:8f:bf:
                    4c:28:83:a8:4d:1c:4a:1e:25:7d:ec:8c:d4:ac:43:
                    13:e8:8f:13:fe:e0:b8:53:f1:d7:26:a8:78:23:35:
                    d3:b3:d4:61:6b:f4:28:d3:c7:95:8e:bc:08:08:8c:
                    9e:3a:12:75:7b:5f:23:9e:93:67:5b:b1:97:17:47:
                    7c:5c:97:ef:27:4c:2b:43:67:b2:17:a1:dc:0b:bb:
                    ae:9a:5a:63:ff:8b:f0:40:90:db:d0:4f:d1:5a:9c:
                    c0:f9:25:bc:65:ff:e8:3d:e2:8c:60:0d:e6:38:f3:
                    96:0c:50:45:e6:d0:5a:bb:4a:fb:b8:83:a6:33:a0:
                    e6:4a:c5:9e:65:30:d7:e3:a9:2d:10:17:00:ce:04:
                    ba:48:14:da:77:74:b4:a7:ae:4a:58:43:5e:f2:e9:
                    19:40:9a:38:a6:b1:55:3c:40:9f:22:2a:a3:22:5e:
                    8a:41:d7:4b:35:ad:1b:ec:f9:7d:0d:eb:48:73:e1:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BA:84:03:69:90:F7:A9:18:38:ED:90:45:85:B4:9D:1D:2A:91:9A
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:96:85:ba:25:89:dd:85:75:78:a5:08:b2:15:58:f6:53:fc:
         a3:2a:16:49:95:4f:94:96:4a:97:da:b8:29:53:5b:2d:fc:69:
         13:b4:14:51:b1:70:76:68:6e:3c:96:c6:a6:61:68:4a:9b:22:
         8b:f5:91:43:c6:6e:ed:d2:af:f6:90:10:cb:91:db:c4:1f:45:
         8f:74:7c:4e:9b:a8:88:0d:25:29:1b:e5:e9:3b:14:68:14:5b:
         aa:c3:05:95:61:5f:39:0c:06:85:f6:dd:14:5d:c4:1d:fb:55:
         d5:88:cc:7e:5c:11:b1:c0:98:76:b0:01:26:a3:66:a1:e0:df:
         bc:d5:55:af:a3:90:a5:a7:7a:b1:a7:fc:af:45:9c:94:71:cd:
         9c:47:9e:e2:cc:f0:dc:19:07:e3:e3:aa:33:cd:13:93:6f:4f:
         e8:56:f7:21:56:c1:37:d4:b9:33:23:08:f7:f3:e3:26:a8:7e:
         f7:3d:e8:f8:b8:a1:b9:4f:2b:f3:e2:07:02:2a:dd:f9:4a:87:
         bc:cf:7f:75:0d:f0:5a:7e:88:05:a8:db:01:c2:7d:ec:92:e1:
         85:c1:b5:09:8e:20:1a:78:e5:a4:7b:a0:91:27:91:10:5a:45:
         d6:49:61:69:dc:32:c4:9a:27:3e:4f:05:33:69:fe:57:bb:4d:
         a9:64:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:00:35 2025 by rpki-client