Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          Q1Z7JGmRIvsupFWgfaiZXNpPtn/3h3fAg88C78cFAB8=
Subject key identifier:   37:F6:C6:24:B1:5A:4C:42:FB:31:E1:B8:67:59:B7:24:62:1C:24:4E
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       292EEF615BCEA970CC323CDF138DCC0D22C1A846
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:57 +0000
ROA not before:           Thu 06 Mar 2025 03:11:57 +0000
ROA not after:            Thu 05 Mar 2026 03:16:57 +0000
asID:                     262663
IP address blocks:        186.216.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2e:ef:61:5b:ce:a9:70:cc:32:3c:df:13:8d:cc:0d:22:c1:a8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:57 2025 GMT
            Not After : Mar  5 03:16:57 2026 GMT
        Subject: CN=37F6C624B15A4C42FB31E1B86759B724621C244E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:6c:97:b8:5e:05:20:ea:70:89:40:1b:bf:
                    90:51:66:93:6b:30:86:cf:ff:a5:fe:8a:82:35:9b:
                    00:52:ba:7b:d8:bc:06:99:88:f8:f2:58:05:88:a6:
                    37:81:16:24:54:59:1a:0c:f5:5f:de:de:a7:d0:5f:
                    e9:80:47:b8:b9:ec:2a:ed:0e:7f:54:c4:16:8b:b7:
                    21:20:ce:03:2d:cb:a2:b8:09:87:cd:57:b2:0a:26:
                    7f:57:27:7e:dd:61:10:b7:0f:b5:d9:54:f5:ec:ba:
                    bd:a6:9d:ef:9c:3e:31:f9:d4:63:95:55:af:98:81:
                    2a:db:5a:7f:e7:da:10:a8:a1:f5:72:cc:53:cb:32:
                    19:de:1f:4f:df:b5:d6:93:82:a0:14:eb:7c:a4:16:
                    d8:c6:c4:0d:4e:a6:3b:77:3b:1f:69:b1:d3:53:e5:
                    9f:92:cc:68:cd:6a:a8:5d:53:e7:54:f4:47:b1:cb:
                    c6:3f:d9:0c:05:a3:15:33:6c:4d:ec:ec:42:c9:26:
                    73:35:4e:2c:70:cb:2c:01:42:01:b2:9d:c1:0d:17:
                    fe:78:be:b7:2d:08:2f:55:cc:09:3f:70:8f:f5:3d:
                    0d:84:38:42:f2:fd:79:ef:06:36:c7:d1:65:14:ee:
                    1d:fd:e2:f1:81:fa:01:0b:bd:d7:38:3b:49:04:29:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F6:C6:24:B1:5A:4C:42:FB:31:E1:B8:67:59:B7:24:62:1C:24:4E
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:14:57:75:97:af:32:0e:a8:07:0a:d2:0a:7b:4b:a5:64:0b:
         4e:79:1e:eb:b8:db:e9:90:d8:1c:51:60:d8:3a:0d:ce:5c:1c:
         2a:6a:98:fe:bd:88:40:ee:f4:82:4d:d1:aa:1e:0e:0b:db:4f:
         96:c9:53:81:47:5e:25:fd:92:02:9c:03:99:5d:73:ea:03:f3:
         67:b8:7d:a1:7e:07:a6:cb:e1:6b:ef:1c:0d:9e:ae:55:7a:be:
         fb:ee:4c:bd:4f:48:c5:40:8c:81:7c:86:9c:fe:2c:76:24:ca:
         41:0f:cd:19:91:1c:f9:94:45:e2:74:1c:d3:b6:40:fc:c4:6f:
         0d:5c:4d:2d:97:7c:9f:94:4e:b3:85:3a:a5:61:7d:80:8d:de:
         39:99:be:bc:0f:fe:31:dd:4e:3b:60:c5:77:49:96:54:10:57:
         72:f4:28:a5:2f:6b:9e:95:d2:1e:02:80:cd:ab:c8:81:19:70:
         d3:46:46:43:d4:c2:17:df:1c:3c:88:54:3b:a0:a2:c0:15:95:
         c4:2c:5b:94:0b:3f:93:a1:5f:3c:54:ae:fb:47:48:90:b0:85:
         31:93:c3:27:01:4b:52:c8:55:d9:81:86:c4:fe:2a:f4:86:d2:
         2a:03:a7:9b:12:db:45:d7:ca:ed:a3:3f:b3:58:ca:b7:36:88:
         0f:61:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net