Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31352e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          Qkbc0fDa6YHOd78cRBv3O82MiGnCldjndzMhdxek5Jo=
Subject key identifier:   37:A9:B3:E8:B9:C8:8C:C9:FE:51:79:46:BC:CB:F5:4A:EC:C2:02:1B
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       19DE3A586679082479CF17112A891400E690953D
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:08 +0000
ROA not before:           Thu 06 Mar 2025 03:12:08 +0000
ROA not after:            Thu 05 Mar 2026 03:17:08 +0000
asID:                     262663
IP address blocks:        186.216.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 15:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:de:3a:58:66:79:08:24:79:cf:17:11:2a:89:14:00:e6:90:95:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:08 2025 GMT
            Not After : Mar  5 03:17:08 2026 GMT
        Subject: CN=37A9B3E8B9C88CC9FE517946BCCBF54AECC2021B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:73:94:50:4c:d3:14:f1:f0:5a:2c:de:d9:
                    0d:5c:df:3e:3e:19:65:87:7d:6c:bc:6e:3f:b4:8d:
                    5b:f7:42:31:43:19:dc:37:19:fe:29:b3:24:39:66:
                    79:70:90:53:ba:56:3f:cf:6b:40:16:a5:5a:8a:24:
                    ec:2a:a3:7c:78:6a:30:71:c7:af:f8:0c:06:25:31:
                    23:b7:b7:1b:4b:3b:a7:d8:7c:03:57:47:15:9b:9f:
                    bd:eb:ea:44:e7:6a:22:b7:9c:95:9b:24:1a:46:e8:
                    ea:c5:1e:e6:78:db:11:6c:38:84:97:b9:9a:8c:19:
                    fb:fa:94:91:61:72:15:c4:3e:de:4a:f1:35:4f:f2:
                    1a:db:13:65:bd:b1:45:ac:ba:35:32:04:0b:d0:86:
                    f1:4b:bb:db:70:13:37:a8:1a:1b:33:d7:8a:f5:f0:
                    21:69:6c:76:05:0b:6f:5a:c8:57:17:8c:19:8c:67:
                    f9:7b:ba:66:86:d4:5a:2e:5d:7b:f9:10:b4:a7:1e:
                    54:46:0e:0b:c9:04:43:b3:e5:41:15:3a:2d:97:53:
                    a6:1d:8c:1b:5e:98:03:ea:42:ca:8d:92:28:fe:40:
                    76:ca:49:1a:04:b5:2f:3a:58:d5:6b:84:72:3c:42:
                    86:3d:47:d4:3b:cb:9a:2c:a1:b0:be:f4:56:17:68:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A9:B3:E8:B9:C8:8C:C9:FE:51:79:46:BC:CB:F5:4A:EC:C2:02:1B
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:4b:71:f0:27:04:4d:1c:87:be:75:0e:28:e5:79:73:e4:85:
         42:dd:89:42:e1:b3:f2:29:bb:34:5b:fd:ff:38:8e:cc:30:17:
         b9:7a:96:d2:be:de:90:c5:24:5f:2e:c7:10:cb:e9:82:00:8c:
         8f:ea:21:6f:aa:88:15:e0:5c:e5:72:b0:8f:c6:1d:b9:6c:d0:
         11:b4:12:b9:80:67:c8:c7:de:df:02:b5:b7:5a:92:c1:35:a2:
         24:a2:81:45:91:cb:e6:09:3c:50:ca:73:aa:83:7f:19:9c:e7:
         d0:94:d4:3b:91:60:fc:1a:9a:7b:59:fb:f4:91:6f:bb:23:31:
         4f:95:ed:dd:b2:e1:2e:9c:b0:d7:02:ee:f7:f8:ed:75:d3:6e:
         03:a1:68:c2:a0:09:89:63:1f:1d:ff:04:c5:b8:cc:da:5e:c0:
         0b:9e:c6:fb:2b:18:80:b6:f1:fb:7d:d6:14:90:eb:c4:84:1b:
         44:54:a6:90:a4:54:3b:11:42:95:aa:4f:ce:01:50:af:19:bf:
         78:a3:56:86:5f:d1:da:4d:37:80:3d:f7:26:95:f7:74:f3:62:
         61:94:e3:27:ec:c0:e2:df:88:f2:af:9b:61:55:fd:73:e0:72:
         97:12:ca:46:65:ac:e7:af:c4:8d:78:18:0e:c5:b8:fb:48:5a:
         af:83:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:12 2025 by rpki-client on console.sobornost.net