Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          HS2nwnr5IV+lMxnuiw+AnOAl0J0Vn5xV4EhThJYkg6I=
Subject key identifier:   82:4B:7B:1F:8A:8B:39:74:08:5F:1A:8F:EB:FF:BD:44:39:4F:C7:74
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       16EB86908609AEB9BE6AE6780E24324114376CE8
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:59 +0000
ROA not before:           Thu 06 Mar 2025 03:11:59 +0000
ROA not after:            Thu 05 Mar 2026 03:16:59 +0000
asID:                     262663
IP address blocks:        186.216.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:eb:86:90:86:09:ae:b9:be:6a:e6:78:0e:24:32:41:14:37:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:59 2025 GMT
            Not After : Mar  5 03:16:59 2026 GMT
        Subject: CN=824B7B1F8A8B3974085F1A8FEBFFBD44394FC774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:82:12:4c:66:3d:ed:17:6e:c6:01:00:b7:
                    54:3d:63:55:9c:c9:e7:2b:bc:18:69:b6:dd:8a:c5:
                    8b:1f:07:9d:bc:ea:4f:dc:24:97:b4:47:5e:ec:ef:
                    62:53:a7:f7:8a:8b:55:e4:14:55:30:41:ea:cd:e0:
                    33:1e:9f:bd:76:8c:3e:5a:df:e9:e5:42:ef:d1:68:
                    2c:af:a6:fb:2d:75:68:5a:5f:88:a3:36:37:5f:e0:
                    4f:82:5b:2b:80:8b:24:0a:d3:a6:d3:62:cc:ac:7b:
                    67:c5:24:24:05:4e:ec:de:b7:16:14:37:be:47:64:
                    e9:f5:52:c9:56:c3:6a:7c:0b:0b:22:ad:e7:26:9b:
                    aa:d2:2b:9c:23:02:35:b5:37:42:87:42:85:28:82:
                    1f:71:c6:80:a5:65:86:6e:20:60:53:b9:10:dd:3b:
                    bb:0f:04:fa:cf:9c:d4:11:8f:ac:56:95:59:1f:77:
                    ab:d0:21:e1:40:9d:5c:d2:19:c1:ca:88:14:8b:38:
                    ba:01:7d:bb:3c:7e:22:84:57:99:5b:ef:32:7e:88:
                    7a:11:1f:48:64:53:cf:b6:c1:79:f2:55:ff:1e:80:
                    c1:ad:31:81:ca:d4:68:b5:44:0a:bf:49:5f:f7:3e:
                    58:65:b8:b2:60:0e:d6:4b:fe:70:d8:8e:0b:ec:46:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4B:7B:1F:8A:8B:39:74:08:5F:1A:8F:EB:FF:BD:44:39:4F:C7:74
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5b:f9:9f:7c:9d:e3:da:be:58:b1:6f:60:4b:f2:c8:6d:1b:
         9d:58:b8:71:e6:9e:81:b4:07:b2:a2:48:89:1f:e1:a9:55:4f:
         8f:34:af:5a:cb:7f:f5:45:cd:a6:0f:e0:a6:09:2e:f9:3d:a4:
         c7:af:53:48:7e:17:c7:72:7a:8e:e3:89:f3:2c:d4:05:ff:48:
         41:4e:37:a6:18:4d:97:fb:db:75:ed:73:39:fe:15:49:9d:3f:
         ab:26:6a:30:d8:6f:bd:fd:16:0f:e0:fb:91:b2:f5:6b:64:bd:
         18:d0:fe:d6:47:4f:d7:da:c5:81:b8:53:40:9d:a3:5d:ce:e9:
         d0:36:4f:30:58:af:52:82:aa:10:6c:f2:1c:0e:ee:90:c5:24:
         a7:b5:17:de:5f:a6:1e:1a:c3:0f:51:cf:16:9a:1c:96:d9:92:
         9d:7c:b3:f3:26:be:74:c4:97:c6:9b:85:4d:e3:94:18:36:c8:
         ca:67:e2:95:e0:f4:1b:c8:1e:67:64:5f:5a:fa:13:6d:4d:06:
         6c:d8:42:24:fb:ee:03:11:4b:49:35:fd:cc:72:1b:3d:ee:d9:
         99:f5:ef:d7:7b:49:dc:02:f4:85:93:8d:04:2a:b9:30:e4:2e:
         1b:b9:f2:86:7f:7b:06:aa:1c:79:e8:db:dd:f1:f1:56:9a:0d:
         f2:8d:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:23 2025 by rpki-client on console.sobornost.net