Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34372e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          RTI6KlNjwoXema1O6C1iyL9ly0JIBbwsKIrwTNZQS9Q=
Subject key identifier:   31:7A:E7:FA:10:A5:E8:4E:9F:C7:E8:06:D1:10:F5:71:5C:5D:3B:62
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       49CA14043420D56AA6E03AFBD0EB5FA9CE9404B9
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:53 +0000
ROA not before:           Thu 06 Mar 2025 03:11:53 +0000
ROA not after:            Thu 05 Mar 2026 03:16:53 +0000
asID:                     262663
IP address blocks:        186.216.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 10:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ca:14:04:34:20:d5:6a:a6:e0:3a:fb:d0:eb:5f:a9:ce:94:04:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:53 2025 GMT
            Not After : Mar  5 03:16:53 2026 GMT
        Subject: CN=317AE7FA10A5E84E9FC7E806D110F5715C5D3B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:1d:f9:f2:58:99:ac:d3:fa:31:11:71:78:
                    24:e1:ef:5d:0c:f8:9d:2f:e8:43:6d:2e:b0:a6:6a:
                    b0:c2:5c:b1:e3:6d:e3:ac:34:74:06:91:37:c6:10:
                    86:47:61:ab:12:7f:62:d2:17:c6:64:fc:6a:dd:df:
                    11:21:43:80:6e:dd:19:76:ac:56:a2:da:4a:8b:53:
                    f9:42:df:96:31:8d:fb:ab:ba:88:cd:e0:3d:e9:4e:
                    c0:7b:95:9b:22:58:bd:7f:72:6b:1c:68:b8:6f:ac:
                    be:92:06:f2:af:7a:2c:7b:cd:0c:de:a4:2e:c8:8a:
                    90:12:08:86:a9:65:07:0a:e6:57:4b:c1:ed:59:37:
                    55:1e:a0:ac:39:db:38:c8:f8:d4:31:71:a1:61:f2:
                    1c:17:af:88:4c:4e:e2:34:83:37:c5:27:10:62:49:
                    1a:3b:f2:48:9c:01:10:76:14:8d:29:9b:00:e5:d3:
                    b2:74:8b:b0:7e:dc:fe:62:49:5b:5f:94:d4:f2:14:
                    49:67:4e:5d:be:03:74:dc:9d:e2:5f:d6:2b:35:6e:
                    8f:1a:d8:9f:78:bd:1b:1d:3c:71:af:35:b2:7a:0a:
                    73:e7:c3:d6:d5:03:1c:a3:64:72:7c:de:c7:fc:15:
                    00:f5:8b:26:34:49:0b:26:13:2b:92:6e:dc:01:dc:
                    19:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7A:E7:FA:10:A5:E8:4E:9F:C7:E8:06:D1:10:F5:71:5C:5D:3B:62
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:ed:82:f8:2c:f2:4b:14:e8:99:ae:85:d8:d0:7a:09:80:65:
         00:01:d1:05:cd:e7:e0:cb:f6:ef:7a:7c:7c:bc:9b:97:b9:24:
         cb:7c:d5:55:78:42:2b:06:e8:f8:fb:75:f2:26:1c:94:6c:ce:
         52:08:19:70:71:a2:cc:62:94:ff:98:48:bb:d0:7d:c8:c3:8b:
         06:64:2b:b6:bd:ab:2e:89:1e:72:1c:25:d2:34:22:96:9d:fb:
         42:5d:7a:e9:35:e8:47:8c:6f:f9:87:75:02:87:18:3a:46:a2:
         e3:96:0a:94:a0:e8:ce:d1:c0:1c:76:6f:28:fb:bf:4b:08:60:
         a3:8b:6e:31:93:3c:15:9f:43:fc:c1:eb:22:52:8e:78:1b:ee:
         97:a5:ad:4c:c2:7f:e9:ea:be:3a:33:bc:c9:1b:31:9d:06:f5:
         36:42:36:02:e5:80:30:d1:83:38:aa:3c:6c:30:73:d4:46:57:
         b5:ba:b8:eb:4c:46:ce:e1:33:89:41:12:b3:ba:8f:e7:74:8f:
         5f:a5:cf:bf:3f:89:07:30:49:38:e1:14:e2:8b:8a:0a:36:49:
         00:56:f1:7c:45:18:17:44:b9:28:13:d1:fe:2c:43:3d:f8:db:
         88:b3:5a:59:e6:3e:95:8f:47:cf:46:1d:a0:e0:d0:13:00:e7:
         45:ea:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:01:39 2025 by rpki-client