Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          VLCA7adsqiJHuZH6HTOn4GI+PdxygYkTwyA88yROuaE=
Subject key identifier:   40:6C:3C:10:93:C9:55:99:1F:8C:7A:56:D8:86:09:BE:03:E6:2C:E6
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       5C6DE6CD5E6BEEEC922148BE10ADC53FE177D66C
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:56 +0000
ROA not before:           Thu 06 Mar 2025 03:11:56 +0000
ROA not after:            Thu 05 Mar 2026 03:16:56 +0000
asID:                     262663
IP address blocks:        186.216.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6d:e6:cd:5e:6b:ee:ec:92:21:48:be:10:ad:c5:3f:e1:77:d6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:56 2025 GMT
            Not After : Mar  5 03:16:56 2026 GMT
        Subject: CN=406C3C1093C955991F8C7A56D88609BE03E62CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:0b:e7:76:7d:be:7f:b5:c7:ef:0b:21:df:
                    49:d7:09:e0:73:72:9b:68:12:2c:7f:89:ee:6c:92:
                    2e:c5:b5:ef:2f:11:c4:e7:5a:5b:e9:53:ba:4c:9b:
                    6b:e2:38:03:eb:f3:64:3d:07:93:97:8f:67:e0:8b:
                    1b:96:34:c4:87:73:c2:fb:28:5e:7f:f3:fe:59:f1:
                    78:e9:c1:8e:82:8c:70:f1:8c:ce:48:96:62:a1:e1:
                    58:d8:d8:67:5d:36:2a:cf:fa:29:33:59:13:9c:8a:
                    16:d3:0d:28:6d:29:70:40:d6:c7:5e:88:dc:c7:63:
                    fc:aa:b0:40:f7:d4:23:89:ca:94:b3:aa:a3:24:ac:
                    3e:f4:9a:16:b1:09:2b:bf:7e:6e:ef:c5:e5:3e:9b:
                    9f:f4:bf:b0:2c:49:3d:a0:a8:77:9c:bc:1a:46:b2:
                    90:09:4b:67:03:5b:84:d0:8a:be:f8:d3:d6:e8:22:
                    ac:5a:7a:4d:66:4e:68:b4:2b:78:74:3e:80:5b:e3:
                    e2:bf:c1:32:90:2c:08:33:14:88:a3:e5:a5:87:15:
                    b0:a8:90:d8:08:c6:7c:84:5c:5d:3e:d5:77:52:c1:
                    0a:f2:7c:69:b6:a7:81:07:82:26:ca:6a:d6:71:1a:
                    8b:eb:8f:62:1c:cd:1a:5e:bb:e5:c0:c0:64:f0:31:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:3C:10:93:C9:55:99:1F:8C:7A:56:D8:86:09:BE:03:E6:2C:E6
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e33362e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a3:14:17:d1:38:d9:e0:4d:dc:41:49:fa:41:ad:19:65:40:
         8a:eb:0b:c2:05:d6:4e:4e:0c:8d:d7:9f:c1:d3:4c:02:c6:5b:
         b5:ee:9f:3d:15:ea:ec:cb:3a:04:68:1d:64:87:c9:85:6c:52:
         9f:00:6f:e6:ea:f1:ba:85:e4:5a:07:61:8a:0f:1b:fa:4e:51:
         ee:f9:48:37:3c:e1:fd:89:47:b0:5a:1e:21:3a:f0:d9:73:8b:
         a2:eb:e2:a0:5c:be:42:ea:9f:5b:a1:b9:e4:e4:d5:46:b6:ff:
         85:63:73:a0:66:a6:cb:91:10:b2:5a:32:08:41:23:54:55:91:
         f9:ef:e6:b7:89:e9:cc:71:db:b9:d4:3a:6f:5e:81:8e:c6:3b:
         84:d8:d5:9a:90:0b:e1:ab:2d:f8:9e:63:a4:8b:b6:b9:57:3c:
         d7:d4:4c:40:0e:26:dc:5c:a8:1e:72:98:48:39:cc:2c:c5:43:
         c6:38:9f:50:15:10:83:21:be:d0:6a:73:06:af:62:d4:6c:40:
         29:f7:d0:b7:f5:80:4e:67:1c:9b:57:3d:18:1a:6e:9e:69:b8:
         d8:0b:15:fc:e0:b9:54:31:5f:06:9f:00:5d:a5:c4:a4:02:ab:
         cc:54:1f:d8:f4:0d:2b:f4:15:c4:01:0c:46:8c:ad:17:48:81:
         91:5d:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net