Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33302e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33302e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          A7TL6ZWZA+iLy58ndNhERIbB2dwBXzeQWLqAXhpEeIs=
Subject key identifier:   6A:A2:43:2E:A9:1B:72:1D:0D:DE:10:70:6C:BA:1E:B6:F3:09:B8:FB
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       6B46B234A26B7721D15ABDB6D8CF7DD1EB442281
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33302e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:00 +0000
ROA not before:           Thu 06 Mar 2025 03:12:00 +0000
ROA not after:            Thu 05 Mar 2026 03:17:00 +0000
asID:                     262663
IP address blocks:        186.216.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:46:b2:34:a2:6b:77:21:d1:5a:bd:b6:d8:cf:7d:d1:eb:44:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:00 2025 GMT
            Not After : Mar  5 03:17:00 2026 GMT
        Subject: CN=6AA2432EA91B721D0DDE10706CBA1EB6F309B8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:bb:8a:f8:c3:5f:94:a8:a4:d2:de:5c:c9:
                    32:50:31:59:d5:a6:78:6c:e8:80:28:78:72:d3:f2:
                    b3:b0:dd:84:9c:af:11:77:33:81:cb:58:4c:ab:98:
                    c8:9d:ed:a3:a1:d4:69:a4:3b:25:d6:ec:9a:5a:c0:
                    de:10:39:f3:ec:86:c0:f4:16:d1:77:ef:d1:09:da:
                    5f:ff:aa:ed:55:2d:cd:41:2a:34:79:13:17:2c:4e:
                    88:86:cb:93:e1:75:97:7e:2b:8f:c4:25:9e:e2:56:
                    5c:07:c3:b3:24:5b:17:61:a2:38:c4:c1:9b:a3:4b:
                    69:46:7e:93:96:75:4d:54:eb:d2:d3:05:81:4e:f6:
                    86:7e:9a:1d:72:41:7a:d2:77:23:29:30:a0:f0:24:
                    2a:26:27:88:b5:2a:e3:51:05:87:fd:57:f6:cd:4d:
                    c4:78:0c:ee:99:04:4d:93:3e:a4:5b:af:f2:db:3b:
                    c3:00:46:dd:7b:87:e6:3d:78:ff:1b:ed:f0:27:33:
                    85:d7:56:c2:10:f1:9e:d6:3c:62:b5:bd:f3:1f:ce:
                    46:28:77:cc:1c:56:e0:00:3f:fc:6a:56:b6:0c:27:
                    65:f3:d9:df:46:09:53:79:55:62:1e:8d:35:f0:4d:
                    1f:b9:c3:c0:4d:05:ec:d2:75:cf:82:7c:58:c8:f2:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A2:43:2E:A9:1B:72:1D:0D:DE:10:70:6C:BA:1E:B6:F3:09:B8:FB
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33302e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:0c:41:8a:65:3b:db:d0:1d:48:ec:76:b6:ea:35:fa:04:
         a9:bf:7d:1c:f9:d4:f4:bb:e3:49:2e:52:19:9a:24:e7:70:e3:
         af:fe:d8:76:52:7f:92:6e:cc:8e:32:55:22:0e:e6:6f:7a:3b:
         80:3d:ac:74:67:58:1a:48:b9:19:3c:ae:5e:c8:76:fc:09:4b:
         2b:45:7f:03:42:57:c9:c7:92:c9:9b:85:8c:42:57:31:f9:17:
         f7:e4:b5:72:3f:c0:b0:f2:de:ac:aa:ee:72:17:22:48:78:5c:
         dc:d1:9d:45:33:2c:d0:b8:c0:9b:1b:81:75:ee:4b:f4:9e:a6:
         32:d9:09:90:aa:eb:48:75:54:a7:59:83:c2:52:8d:85:0a:c6:
         3c:46:54:64:8e:ac:7e:8d:b7:5d:b9:da:a5:3a:96:69:41:26:
         bb:00:ad:8f:46:fc:3e:0c:f2:6b:18:ba:f9:ca:82:b8:32:a2:
         8f:2b:61:ab:b3:70:06:8b:e5:36:b9:a7:a1:4a:35:36:3d:ed:
         e1:75:3d:c3:50:4a:e3:d2:62:ed:63:65:07:81:29:94:94:0c:
         36:79:53:ce:81:45:81:57:a5:02:61:ea:67:dc:32:55:74:e4:
         49:d4:82:36:9e:88:72:64:61:67:e2:c8:bf:1c:13:07:f7:a6:
         3c:f5:f3:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa0ayNKJrdyHRWr222M990etEIoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzEyMDBaFw0yNjAzMDUwMzE3MDBaMDMxMTAvBgNV
BAMTKDZBQTI0MzJFQTkxQjcyMUQwRERFMTA3MDZDQkExRUI2RjMwOUI4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhbbuK+MNflKik0t5cyTJQMVnV
pnhs6IAoeHLT8rOw3YScrxF3M4HLWEyrmMid7aOh1GmkOyXW7JpawN4QOfPshsD0
FtF379EJ2l//qu1VLc1BKjR5ExcsToiGy5PhdZd+K4/EJZ7iVlwHw7MkWxdhojjE
wZujS2lGfpOWdU1U69LTBYFO9oZ+mh1yQXrSdyMpMKDwJComJ4i1KuNRBYf9V/bN
TcR4DO6ZBE2TPqRbr/LbO8MARt17h+Y9eP8b7fAnM4XXVsIQ8Z7WPGK1vfMfzkYo
d8wcVuAAP/xqVrYMJ2Xz2d9GCVN5VWIejTXwTR+5w8BNBezSdc+CfFjI8rxlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaqJDLqkbch0N3hBwbLoetvMJuPswHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM2MmUzMjMxMzYyZTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC62B4wDQYJKoZIhvcNAQELBQADggEBABfIDEGK
ZTvb0B1I7Ha26jX6BKm/fRz51PS740kuUhmaJOdw46/+2HZSf5JuzI4yVSIO5m96
O4A9rHRnWBpIuRk8rl7IdvwJSytFfwNCV8nHksmbhYxCVzH5F/fktXI/wLDy3qyq
7nIXIkh4XNzRnUUzLNC4wJsbgXXuS/SepjLZCZCq60h1VKdZg8JSjYUKxjxGVGSO
rH6Nt1252qU6lmlBJrsArY9G/D4M8msYuvnKgrgyoo8rYauzcAaL5Ta5p6FKNTY9
7eF1PcNQSuPSYu1jZQeBKZSUDDZ5U86BRYFXpQJh6mfcMlV05EnUgjaeiHJkYWfi
yL8cEwf3pjz1804=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net