Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32372e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e32372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          AipHHoqNWEyTM/lxAtS9kkEwo0hmtvYQtw8AHqWQ+4E=
Subject key identifier:   E2:EE:0F:B3:F2:B7:E7:05:D5:E0:39:D8:8E:CF:6B:F0:64:19:50:ED
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       65C891F31AF1A7237FBB5273C45A81CAAD215874
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:05 +0000
ROA not before:           Thu 06 Mar 2025 03:12:05 +0000
ROA not after:            Thu 05 Mar 2026 03:17:05 +0000
asID:                     262663
IP address blocks:        186.216.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:91:f3:1a:f1:a7:23:7f:bb:52:73:c4:5a:81:ca:ad:21:58:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:05 2025 GMT
            Not After : Mar  5 03:17:05 2026 GMT
        Subject: CN=E2EE0FB3F2B7E705D5E039D88ECF6BF0641950ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:be:2f:aa:a3:b5:38:ef:39:52:db:2d:28:11:
                    9a:4c:7b:b5:66:97:e6:92:21:2f:fd:fa:de:cf:98:
                    cb:b7:6b:dc:49:e6:f3:50:66:75:16:54:c6:92:8f:
                    db:cb:91:0a:31:94:f7:37:3a:de:67:55:d5:0c:86:
                    a6:a1:9c:b2:fb:9a:79:c4:2c:af:9a:4b:08:5a:02:
                    4c:19:c3:09:3b:a8:fa:13:69:33:4d:59:39:fd:84:
                    f2:dc:84:dd:a4:7a:cf:8f:71:9a:a4:5f:4c:36:af:
                    ea:40:c8:34:d9:29:9a:31:db:66:00:25:e1:a4:dd:
                    01:d7:d5:b4:99:54:fc:af:e2:57:b2:6c:cd:d0:a8:
                    b7:c5:66:19:b2:71:b8:ec:1e:d9:35:43:46:d5:f7:
                    64:32:65:ba:7f:b8:0b:9f:0e:16:f5:43:7b:03:cd:
                    cd:75:d2:fc:8e:c7:3c:06:a2:b0:12:b9:5c:ca:84:
                    dd:b9:03:27:61:d7:01:d5:d0:4d:6c:e8:d4:5e:69:
                    6d:fb:b9:88:87:27:b1:b6:b4:d0:04:fd:6f:42:23:
                    db:b7:d4:6a:03:63:f9:80:a8:5b:78:d4:b5:ee:51:
                    3c:c6:fa:49:1e:9f:de:04:9d:c5:27:b4:5a:f7:aa:
                    13:6c:7a:e1:6c:06:ed:59:23:b9:06:51:d5:0f:b7:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EE:0F:B3:F2:B7:E7:05:D5:E0:39:D8:8E:CF:6B:F0:64:19:50:ED
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e32372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:50:6c:d4:c5:9c:13:a9:47:ef:c2:01:5e:f5:ac:89:f9:b9:
         a3:fd:74:65:df:6b:92:1a:6d:94:61:8e:3d:c9:c4:0d:c0:a1:
         28:6a:59:63:fd:6c:70:7f:0e:8d:c6:78:8f:f2:19:a6:65:a8:
         60:8b:a8:9e:de:b1:76:0d:cf:2c:ac:ab:ec:48:84:21:3c:24:
         43:bb:1d:5e:91:77:0c:a1:bb:23:22:33:70:cf:0b:93:81:bc:
         a2:b2:d4:d2:73:5e:f6:c1:ab:ad:a4:b0:0f:67:ad:3b:f2:be:
         66:97:53:3c:9f:91:38:ff:19:c6:d1:7b:c9:89:bb:bb:83:d6:
         5a:1a:70:2f:7a:5d:e4:03:b5:2f:13:5f:f7:2f:75:fc:a1:6f:
         c4:13:c4:bb:7a:02:2f:df:6b:89:32:20:fa:94:bd:01:dc:53:
         12:b7:66:f4:9b:15:23:17:3e:12:72:8a:65:bd:19:68:aa:15:
         4d:eb:09:d5:64:dc:9e:e0:fd:d0:8b:70:cd:d1:0d:81:31:75:
         69:13:4b:d5:c8:16:98:f5:a3:1c:00:03:5a:18:00:d6:0a:6d:
         bf:cb:8a:0d:75:18:7a:ae:ea:23:87:df:9c:f0:31:3b:43:4d:
         84:52:1f:17:31:6b:51:2f:0a:91:a2:41:f2:7b:0d:74:a4:b0:
         49:8c:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net