Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34392e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e34392e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          QnK39qvsZFNB4Bs+/neeuo25wy7KHLZbBmv9LESbPLY=
Subject key identifier:   7F:B2:DF:05:D9:BD:8A:21:EE:E4:53:E0:87:EE:CC:14:33:B4:51:33
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       2465B2A304D9484B325F1220CBA96665FCE9ED1B
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34392e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:55 +0000
ROA not before:           Thu 06 Mar 2025 03:11:55 +0000
ROA not after:            Thu 05 Mar 2026 03:16:55 +0000
asID:                     262663
IP address blocks:        186.216.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:65:b2:a3:04:d9:48:4b:32:5f:12:20:cb:a9:66:65:fc:e9:ed:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:55 2025 GMT
            Not After : Mar  5 03:16:55 2026 GMT
        Subject: CN=7FB2DF05D9BD8A21EEE453E087EECC1433B45133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:36:ff:e1:b4:a5:71:8d:70:fd:f7:b7:9a:
                    9d:37:b8:77:27:dd:e3:1d:5d:41:85:2a:4e:33:8f:
                    af:b1:14:e6:98:3f:30:61:67:fc:3a:f3:92:0c:84:
                    ad:03:53:c2:3d:de:a0:8d:6d:bb:ca:d3:00:3d:75:
                    bf:b9:b1:16:f6:e7:0c:46:97:24:af:81:1e:10:d5:
                    fb:30:5a:96:14:91:5e:70:ae:6d:8e:93:b5:5e:99:
                    bb:0e:b5:88:8c:be:dd:93:6c:ac:2e:22:41:1b:fd:
                    5a:b7:d8:1d:75:f4:e1:83:27:6e:44:96:ff:64:68:
                    5f:a1:80:ff:2e:db:0b:e0:1f:1c:7f:64:bd:6f:ac:
                    0b:f3:0c:69:df:6b:b7:17:72:ef:bf:f6:57:d5:7b:
                    12:09:db:48:01:5f:77:7e:69:72:b5:a5:e2:93:91:
                    03:01:c5:58:3b:8d:fa:2d:0b:91:39:d9:93:28:4d:
                    ca:26:57:ee:45:04:20:97:d8:e4:9c:05:e5:64:67:
                    ca:bb:e4:d4:5c:ca:9e:94:57:fa:b5:b9:2c:28:e9:
                    a5:cf:4f:46:a9:86:32:39:52:0f:a8:22:b4:b9:c8:
                    17:f0:66:16:ba:92:93:5e:b6:4d:6d:6f:a0:de:7b:
                    e4:f6:9d:07:29:7e:e5:99:f6:4d:7e:90:51:8c:2f:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B2:DF:05:D9:BD:8A:21:EE:E4:53:E0:87:EE:CC:14:33:B4:51:33
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e34392e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:0e:9a:e4:47:fa:f3:14:c1:60:65:77:e1:6a:7a:5b:10:d9:
         15:f8:be:b5:e1:3f:ad:f2:24:f5:04:57:90:6b:f4:97:99:2a:
         9d:fe:95:33:ea:ef:4f:33:7a:89:07:2b:ae:26:90:2e:e1:2d:
         ae:be:d9:57:8c:33:21:ab:5a:ef:1a:14:5a:fd:42:6e:6e:9e:
         88:8d:d1:6b:78:4f:02:db:18:84:b6:20:cc:7d:6c:c8:a6:e3:
         c5:71:51:3a:d9:71:56:6a:e5:43:5f:b1:c0:30:4e:7a:47:54:
         10:ea:e0:12:5d:f8:22:27:56:c0:5a:7d:da:9c:7e:68:1d:f9:
         2c:bc:56:7b:1c:80:56:08:f2:9b:67:56:d4:fa:b9:9b:e2:cf:
         a4:13:8b:bc:c5:bf:11:7d:5b:9a:86:64:4d:e9:15:11:be:29:
         44:cd:4d:2f:c2:1d:d2:5e:1a:5a:0e:18:3c:ae:bb:f6:32:3f:
         a6:e7:ff:76:a9:9d:c7:76:fd:ca:f4:47:f5:d7:8c:6a:23:c3:
         1e:c5:c9:84:10:fa:b1:27:8e:e3:45:6c:05:f2:ea:74:cf:e6:
         ec:49:56:42:f5:94:da:f6:b0:22:6e:2c:d7:f8:b1:94:ae:8a:
         d1:f2:4e:25:92:bc:3c:d5:a1:92:32:54:bf:5b:64:7c:64:5f:
         88:bc:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net