Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31362e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          eg2DXBPMoyuIo+QjJ4ydE2quereD93DpvNUa+CT9oYs=
Subject key identifier:   70:99:28:0C:FD:3D:2E:43:3F:80:0B:3F:EC:A4:8D:EE:CC:3B:79:03
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       544F50471AC8320B6F8CEBB815C7B1AFEBD78325
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:04 +0000
ROA not before:           Thu 06 Mar 2025 03:12:04 +0000
ROA not after:            Thu 05 Mar 2026 03:17:04 +0000
asID:                     262663
IP address blocks:        186.216.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4f:50:47:1a:c8:32:0b:6f:8c:eb:b8:15:c7:b1:af:eb:d7:83:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:04 2025 GMT
            Not After : Mar  5 03:17:04 2026 GMT
        Subject: CN=7099280CFD3D2E433F800B3FECA48DEECC3B7903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:44:3b:89:b3:eb:bf:1c:46:db:c1:82:78:
                    0b:fe:4a:98:62:c3:5a:d0:2f:6d:fc:d4:60:75:17:
                    66:3f:79:ce:34:f9:2d:5b:f9:e9:eb:ca:dd:f7:5b:
                    5f:4d:58:fa:c9:99:0e:99:52:41:b6:f5:f5:b0:e5:
                    aa:84:a5:a1:4d:e4:c1:64:8c:a7:b6:fa:0d:2b:62:
                    f1:02:c8:7f:34:50:22:12:86:f5:78:49:26:dc:74:
                    ad:81:89:e5:81:9f:84:9c:23:d8:a7:a4:2e:4d:b2:
                    41:5c:b5:48:87:a1:50:dc:42:99:36:7e:9a:db:8b:
                    cf:51:17:e4:1c:9d:78:7e:bf:f6:df:05:20:c0:53:
                    13:67:e1:ef:91:f1:05:a9:51:e1:47:ed:19:93:1f:
                    da:3b:8a:20:71:9c:20:3b:6a:f3:f1:3b:3b:ba:9d:
                    4b:9b:a3:ed:12:01:20:c2:d3:f5:7b:c9:f7:48:16:
                    3c:22:99:02:0d:d2:c7:fb:73:9a:2b:f7:93:e8:f3:
                    52:4d:48:7f:86:0c:6b:70:c9:3b:17:31:5c:dc:5b:
                    ab:63:98:59:b5:94:df:03:8e:56:1c:53:9e:c0:c0:
                    3f:31:d3:0c:45:c3:73:cc:41:e2:72:3b:1b:b4:9d:
                    29:a7:07:09:90:8a:ab:47:d8:68:70:e9:31:7d:43:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:28:0C:FD:3D:2E:43:3F:80:0B:3F:EC:A4:8D:EE:CC:3B:79:03
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:4d:e7:7e:62:3a:e8:cd:6c:b8:2b:cb:68:22:b0:b4:9a:
         b3:7b:9c:35:6f:a7:57:8c:4a:b6:cb:1e:63:ae:22:d5:dc:ca:
         7d:f1:49:65:9d:d3:9e:4d:c7:28:d6:7c:8c:6d:65:7b:19:71:
         e2:5a:31:49:ef:8d:4e:1d:97:11:b5:22:2f:f4:a8:88:a7:8e:
         fb:b1:1a:b0:46:f0:01:80:1e:85:32:2b:0e:1f:5d:18:7a:26:
         77:13:90:c9:bf:cd:e3:fc:32:d5:7d:c8:86:20:f6:b2:48:75:
         67:62:1a:32:75:cb:7b:1a:77:e1:d5:b5:bb:61:85:09:0f:00:
         72:a8:ad:a3:cb:18:aa:86:b8:ef:5a:1d:36:21:ab:fd:0e:39:
         8c:29:ef:fa:6c:3d:c4:16:22:10:3e:c0:85:2a:d3:26:50:ea:
         92:84:62:8a:f1:a4:c7:92:7e:35:0a:21:30:68:20:20:b7:3d:
         c7:56:f4:a6:05:2a:12:c0:86:f1:59:36:3c:eb:5c:0b:43:70:
         5c:33:c6:62:fd:c4:b0:87:85:1c:ae:31:33:21:ed:d1:25:4d:
         92:43:c3:42:df:dd:74:89:aa:0e:4c:25:9e:85:0b:f2:c0:dc:
         88:75:1e:79:b7:d6:74:7d:04:01:47:1a:ee:0f:86:2a:a2:c8:
         6a:3b:e4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net