Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          gnBJ5PgrkbmaCw2x/SChcula0zM4La3BPANBDaoHmGE=
Subject key identifier:   99:4A:FD:3A:F6:10:01:BD:42:71:D5:18:67:CB:EB:2E:1B:5C:E9:90
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       61047184424D084ED375EED73CABC21EDE3C4292
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:04 +0000
ROA not before:           Thu 06 Mar 2025 03:12:04 +0000
ROA not after:            Thu 05 Mar 2026 03:17:04 +0000
asID:                     262663
IP address blocks:        186.216.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:04:71:84:42:4d:08:4e:d3:75:ee:d7:3c:ab:c2:1e:de:3c:42:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:04 2025 GMT
            Not After : Mar  5 03:17:04 2026 GMT
        Subject: CN=994AFD3AF61001BD4271D51867CBEB2E1B5CE990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:17:3e:b6:2b:21:e1:bb:1c:03:e2:8c:c8:
                    1a:59:a4:b7:51:fc:40:ea:34:0f:41:aa:8b:73:c8:
                    84:2f:a5:cc:89:1d:9b:a5:57:02:c6:bf:5b:80:9b:
                    4c:b3:51:e6:be:1f:7b:e4:46:7d:a5:55:20:65:fe:
                    f7:1d:ab:6f:a6:69:97:61:46:37:be:f5:80:8f:c5:
                    97:72:55:68:ea:9c:8d:b9:34:28:3f:49:74:7b:4d:
                    3b:69:8a:a0:d7:6c:9a:a8:9d:85:9e:09:b4:76:13:
                    f5:10:d2:eb:8d:9e:d3:27:ed:75:56:95:22:0f:63:
                    6b:2f:e1:e1:e5:37:54:1c:c6:3b:04:3e:04:a0:ab:
                    aa:5f:d6:6d:a2:be:7c:dd:5b:fc:c1:e3:1e:8e:39:
                    a6:46:08:52:0f:f1:cc:76:25:69:d5:a1:31:c2:8f:
                    79:ed:fe:5e:21:92:a4:5a:5b:c3:80:e0:70:c7:86:
                    f2:ff:b7:5e:d6:f0:e8:df:02:ba:93:48:59:fd:7c:
                    10:7b:78:7c:bb:4c:1f:3e:58:bd:74:21:a6:cd:fd:
                    82:ef:46:50:6d:2e:8b:ac:31:47:ae:4c:45:da:a3:
                    28:bc:f5:05:25:0f:3b:49:9c:b7:99:ab:52:3f:19:
                    d5:05:66:96:68:0c:42:12:a6:d4:7f:69:f0:0c:5a:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:FD:3A:F6:10:01:BD:42:71:D5:18:67:CB:EB:2E:1B:5C:E9:90
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:80:0e:aa:a2:10:9d:38:43:a8:56:00:eb:8c:37:2f:e7:
         c0:20:18:0f:9e:69:00:cf:02:a1:63:20:1f:ac:54:0f:86:2d:
         41:3b:aa:82:48:13:af:44:aa:5d:07:68:2b:18:28:b2:6b:11:
         fa:20:17:dd:c7:e1:ee:c8:fd:63:59:02:16:ee:c1:42:fb:94:
         93:19:b8:58:38:8e:a5:48:68:56:d2:24:a1:f0:26:1d:5e:1e:
         e6:74:cc:49:c9:61:23:77:fa:c4:c8:3c:52:13:9c:41:37:92:
         b2:d7:ab:94:f5:fa:08:a6:2b:21:8f:c6:13:9d:5d:d0:d9:e6:
         1c:8f:4b:74:2d:0f:44:53:77:8c:eb:5f:94:ca:d6:90:0f:6d:
         38:0b:ab:53:39:c5:12:8e:fc:bd:1c:d6:c0:a7:62:9d:dc:39:
         24:4c:32:82:1c:35:48:61:9c:87:07:2b:4c:aa:dd:8d:03:b1:
         b1:7c:35:76:73:f4:33:9a:a2:8a:4e:6e:8e:7e:3d:8e:37:55:
         67:01:99:6c:ba:97:33:53:4a:21:75:95:b1:e9:1e:e0:b6:19:
         9f:c4:4a:91:31:7f:fe:30:9f:6d:cc:77:8b:72:8d:5c:63:1d:
         71:b9:15:1b:3b:13:4a:58:b7:91:6e:de:a8:05:2f:15:9f:36:
         19:73:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:23 2025 by rpki-client on console.sobornost.net