Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          kf6bjBuCff4uiIHwKs7KIh4XQkSywWHrW/yWNyDkSA4=
Subject key identifier:   7C:75:4F:52:83:0E:FC:0F:C3:D5:61:E7:F3:67:DF:FE:81:E6:03:5C
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6A87E5C76B148F8EF1FBED551DE2B84CF31F2329
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:01 +0000
ROA not before:           Thu 06 Mar 2025 03:12:01 +0000
ROA not after:            Thu 05 Mar 2026 03:17:01 +0000
asID:                     262663
IP address blocks:        186.216.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:87:e5:c7:6b:14:8f:8e:f1:fb:ed:55:1d:e2:b8:4c:f3:1f:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:01 2025 GMT
            Not After : Mar  5 03:17:01 2026 GMT
        Subject: CN=7C754F52830EFC0FC3D561E7F367DFFE81E6035C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:78:75:c6:01:39:cc:98:7e:79:9f:98:67:
                    28:2a:56:6a:fb:9f:42:cf:00:b6:af:fa:90:25:76:
                    a8:e2:fb:96:e3:6f:87:19:af:be:60:a8:d9:78:69:
                    08:ee:c1:29:1e:84:e9:f9:d8:33:88:11:23:b9:50:
                    2a:3e:ba:b6:9b:a5:16:fc:e8:f1:68:71:b7:81:9a:
                    04:43:51:0c:20:6f:d1:88:0d:78:a4:f3:81:5d:ae:
                    aa:33:e6:0d:4c:d5:16:e2:e2:a0:d6:b0:bb:00:74:
                    a5:1e:98:8b:6d:9c:c1:39:e7:19:2e:76:8e:50:8d:
                    29:79:c4:c8:22:da:d0:b7:d5:e3:06:62:d6:d0:27:
                    54:2e:79:e9:83:ff:31:75:92:55:31:04:8c:b5:44:
                    07:89:a5:6b:df:ee:7c:d7:73:46:40:94:a7:d2:7d:
                    2d:26:97:f6:9d:2d:f6:6a:dd:14:a7:14:d7:7a:ca:
                    e4:50:2c:c6:0b:72:8c:ab:97:fb:4c:d9:88:83:43:
                    59:31:9c:fc:d8:ff:1f:9c:55:fc:ee:ac:6d:28:d6:
                    6c:c5:10:4a:49:ed:c3:28:c1:7d:81:32:fc:81:62:
                    6b:f6:d5:5e:c6:13:b5:9d:3a:88:dc:55:a2:aa:7d:
                    d9:84:7f:50:89:65:85:be:8d:e0:51:79:8e:32:e6:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:75:4F:52:83:0E:FC:0F:C3:D5:61:E7:F3:67:DF:FE:81:E6:03:5C
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f1:5f:18:69:42:9b:8e:60:ad:7a:70:44:6f:ba:0a:71:bf:82:
         72:ac:4c:c0:20:66:96:96:b3:ca:a2:7c:af:d0:36:bb:81:ca:
         c2:4d:24:1b:81:f2:ec:06:39:20:04:23:7a:48:e6:73:ce:72:
         c2:7f:6a:50:b2:e8:cd:1b:06:eb:ea:88:ca:74:ca:43:40:6f:
         5b:27:36:0d:92:35:34:77:0b:40:1a:0d:86:a3:2a:45:27:4b:
         a9:d3:37:15:39:ae:69:70:52:97:b3:e5:a9:5c:56:09:1c:cb:
         da:12:e9:8b:fd:37:f1:78:b1:ee:86:bd:87:ef:1d:0a:ab:71:
         df:12:0f:92:24:40:10:9e:79:8f:93:94:3e:55:2e:ec:0b:1c:
         1c:0a:0f:c0:3b:e7:0e:9e:51:01:6b:84:c5:c4:8d:f1:e0:1c:
         67:6b:6d:17:37:c9:a5:c5:2d:7d:8f:44:77:f7:b0:e8:7f:77:
         77:91:c7:46:e7:3e:e2:4a:1c:5f:6e:c2:93:58:c1:70:2b:08:
         0d:91:42:3a:e7:73:24:82:65:ea:ff:27:3f:2d:e1:3f:6a:08:
         04:a9:bc:14:1a:7c:8b:57:d7:a4:4f:a0:9e:59:80:1f:31:57:
         64:90:b4:b1:cf:87:4b:6b:8f:24:19:cf:7a:50:4b:c1:49:ea:
         ab:86:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net