Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31392e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e31392e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          6jujJWVJ2ct/T4/o3JpIvzrTTBDlAKCfhSwPWI6fkko=
Subject key identifier:   88:7F:46:6C:42:95:3B:1D:44:88:5D:2A:F3:3A:54:45:1C:F9:31:BE
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       0A638323DAD39ACA3249793882DD22D1C4391FA1
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31392e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:56 +0000
ROA not before:           Thu 06 Mar 2025 03:11:56 +0000
ROA not after:            Thu 05 Mar 2026 03:16:56 +0000
asID:                     262663
IP address blocks:        186.216.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:63:83:23:da:d3:9a:ca:32:49:79:38:82:dd:22:d1:c4:39:1f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:56 2025 GMT
            Not After : Mar  5 03:16:56 2026 GMT
        Subject: CN=887F466C42953B1D44885D2AF33A54451CF931BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:36:11:4a:78:b7:3d:19:47:bc:11:0f:17:
                    a8:59:c1:08:1d:db:59:4e:11:14:bd:c2:5a:88:f3:
                    ba:41:22:cc:37:29:6e:45:b0:22:f4:99:ff:85:5c:
                    52:f2:88:39:66:fa:bb:a9:2e:de:d4:80:68:a2:7e:
                    42:07:6a:b2:10:fb:50:07:e5:16:a3:84:4e:fd:ac:
                    5c:f0:dc:8e:a4:1e:ba:ae:a4:3f:8c:aa:22:74:d5:
                    fd:3b:7d:4e:42:d9:cc:94:de:68:79:e5:1b:ea:75:
                    b7:6e:5c:e2:9e:2e:44:d3:b6:85:a7:86:83:39:36:
                    0b:30:43:fd:c7:09:9e:05:aa:d8:0e:7b:61:19:a9:
                    0a:d8:00:3f:48:cc:a8:97:4f:b2:09:d6:d5:36:38:
                    54:57:4e:1c:69:1c:36:d3:75:86:08:fb:c9:12:56:
                    89:bd:50:e2:32:69:30:f8:66:8a:25:af:bf:70:29:
                    cf:be:f9:35:b5:f6:38:ad:c1:48:b6:30:17:0a:f3:
                    c4:db:6d:8b:fa:48:45:07:6b:fd:44:41:c5:ea:12:
                    a4:52:a9:9e:09:08:77:75:59:b3:77:25:53:cd:d4:
                    fa:ec:2b:53:ad:f3:c7:c5:ab:52:8d:f6:78:26:c4:
                    b4:cf:32:b3:93:39:68:93:30:37:e1:03:ec:a9:0b:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7F:46:6C:42:95:3B:1D:44:88:5D:2A:F3:3A:54:45:1C:F9:31:BE
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e31392e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:e0:18:2b:aa:56:7e:66:65:51:52:4b:97:25:50:5a:88:
         34:6c:1d:ef:2f:e5:58:a6:96:4d:1f:bb:4f:3e:1a:bc:1b:80:
         af:18:8d:6c:bb:4a:0f:88:81:ce:6a:fc:35:d2:c7:b0:ff:ed:
         69:07:f2:81:11:96:5e:2b:36:97:ac:c6:c0:d6:a8:ef:77:2d:
         f1:f2:68:02:da:4d:64:59:a3:8d:a0:c8:32:d3:01:3b:93:7d:
         35:2a:a0:8c:a8:a1:62:b3:43:db:49:69:5e:78:0b:29:03:d4:
         ee:06:db:87:39:f0:be:63:1e:50:6f:a6:c8:70:aa:cd:7a:5a:
         2f:39:91:1a:a8:df:fa:66:30:0b:72:a6:3f:ff:9a:eb:de:43:
         18:48:e8:6d:37:de:6f:31:3e:35:d4:fe:c2:ee:2e:dd:68:f1:
         47:ed:a5:91:7d:30:cb:1a:0b:c4:c0:12:c1:04:7b:3a:6d:df:
         90:db:1c:f2:1e:00:2c:79:32:da:34:bf:71:65:f3:09:bf:e8:
         d5:17:7e:5e:ca:a0:c0:39:db:3a:5c:da:f3:db:4a:15:51:82:
         f8:3f:b6:33:55:c3:7f:a0:a9:1d:54:ab:5a:81:21:27:4f:8e:
         d5:43:65:2f:fb:3d:3c:63:6c:69:05:bc:e6:c7:2e:06:b3:22:
         e2:70:5f:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCmODI9rTmsoySXk4gt0i0cQ5H6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzExNTZaFw0yNjAzMDUwMzE2NTZaMDMxMTAvBgNV
BAMTKDg4N0Y0NjZDNDI5NTNCMUQ0NDg4NUQyQUYzM0E1NDQ1MUNGOTMxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxzYRSni3PRlHvBEPF6hZwQgd
21lOERS9wlqI87pBIsw3KW5FsCL0mf+FXFLyiDlm+rupLt7UgGiifkIHarIQ+1AH
5RajhE79rFzw3I6kHrqupD+MqiJ01f07fU5C2cyU3mh55RvqdbduXOKeLkTTtoWn
hoM5NgswQ/3HCZ4FqtgOe2EZqQrYAD9IzKiXT7IJ1tU2OFRXThxpHDbTdYYI+8kS
Vom9UOIyaTD4Zoolr79wKc+++TW19jitwUi2MBcK88TbbYv6SEUHa/1EQcXqEqRS
qZ4JCHd1WbN3JVPN1PrsK1Ot88fFq1KN9ngmxLTPMrOTOWiTMDfhA+ypC5ppAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiH9GbEKVOx1EiF0q8zpURRz5Mb4wHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62BMwDQYJKoZIhvcNAQELBQADggEBAEwh4Bgr
qlZ+ZmVRUkuXJVBaiDRsHe8v5Vimlk0fu08+GrwbgK8YjWy7Sg+Igc5q/DXSx7D/
7WkH8oERll4rNpesxsDWqO93LfHyaALaTWRZo42gyDLTATuTfTUqoIyooWKzQ9tJ
aV54CykD1O4G24c58L5jHlBvpshwqs16Wi85kRqo3/pmMAtypj//muveQxhI6G03
3m8xPjXU/sLuLt1o8UftpZF9MMsaC8TAEsEEezpt35DbHPIeACx5Mto0v3Fl8wm/
6NUXfl7KoMA52zpc2vPbShVRgvg/tjNVw3+gqR1Uq1qBISdPjtVDZS/7PTxjbGkF
vObHLgazIuJwX/M=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net