Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35342e302f32342d3234203d3e20323732353431.roa
File:                     3138362e3231362e35342e302f32342d3234203d3e20323732353431.roa (raw, json)
Hash identifier:          HtTbrZfanNRx9m/CmX/gtEtTK8cDU7ANxr7Tt13IlvQ=
Subject key identifier:   DB:31:61:CA:AB:D5:27:01:A2:17:D4:2D:B6:3A:A8:0F:15:32:AF:B0
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       4FB5217AE6DEAF0D0175D0C5D29FE37999C69C56
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35342e302f32342d3234203d3e20323732353431.roa
Signing time:             Thu 06 Mar 2025 03:16:57 +0000
ROA not before:           Thu 06 Mar 2025 03:11:57 +0000
ROA not after:            Thu 05 Mar 2026 03:16:57 +0000
asID:                     272541
IP address blocks:        186.216.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b5:21:7a:e6:de:af:0d:01:75:d0:c5:d2:9f:e3:79:99:c6:9c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:57 2025 GMT
            Not After : Mar  5 03:16:57 2026 GMT
        Subject: CN=DB3161CAABD52701A217D42DB63AA80F1532AFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:6c:52:b4:06:d9:df:1f:ea:36:6e:bf:37:
                    00:e6:b6:28:7b:e7:07:75:c4:bb:1f:22:5a:69:b8:
                    23:19:54:70:8f:a3:75:0d:1c:29:ee:6a:a1:07:81:
                    46:dc:41:05:30:7b:62:41:7a:74:97:ee:06:34:05:
                    50:03:4e:b6:fc:a6:4a:ec:4b:9a:ba:6f:c3:63:39:
                    54:45:00:7f:1e:62:cf:99:0a:3c:c6:59:f0:dc:66:
                    78:7d:51:a6:7a:c7:02:c8:7a:bb:aa:69:60:1b:cc:
                    e8:eb:ba:9c:87:91:2d:94:93:04:52:c2:d1:0a:47:
                    63:90:35:5e:5b:c4:9f:52:0b:03:c5:02:f8:2f:71:
                    ff:85:46:e3:6b:9c:11:6b:bd:a6:a2:f0:4c:a5:cb:
                    53:40:cc:b8:2b:29:0d:52:6d:50:49:02:6e:54:64:
                    d6:c3:66:0c:49:f3:0a:22:bd:ea:9f:7e:b6:c9:2e:
                    ed:26:d1:1c:42:e1:9d:43:dd:62:25:b3:b1:0e:89:
                    c5:cf:68:73:8f:0a:ae:d7:07:a8:cc:b1:0f:6e:d1:
                    89:cb:ba:bc:62:31:02:6c:a0:20:5b:2d:6e:0a:2b:
                    3f:85:bd:39:42:1b:2a:ba:59:ad:fa:97:04:85:75:
                    6a:2e:72:d4:69:84:1d:92:65:ce:56:d4:8d:20:cf:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:31:61:CA:AB:D5:27:01:A2:17:D4:2D:B6:3A:A8:0F:15:32:AF:B0
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e35342e302f32342d3234203d3e20323732353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:4f:18:9e:56:01:1a:b9:50:ba:6e:4a:11:9f:1d:f3:e5:
         04:02:9b:28:e4:17:34:c1:53:77:9b:31:1d:8b:1e:94:4c:86:
         bf:f7:7a:5d:54:d6:0a:00:07:ef:7b:0e:87:f7:ea:52:e9:ab:
         0d:16:ba:b0:e8:a3:b5:35:61:b6:47:6a:b1:da:30:f5:df:87:
         e1:65:5e:95:2f:17:5d:10:6a:f0:e9:55:f2:7e:49:7e:c8:84:
         2c:58:5f:2e:95:26:a3:c8:49:c0:1b:b4:74:7a:cb:e4:c8:f2:
         23:06:a8:54:8c:6e:9f:d7:a2:9c:d7:4d:f5:f7:83:5f:49:a2:
         90:c8:42:a9:55:1e:33:67:dc:a6:d8:8f:fa:f3:45:05:29:dc:
         2c:11:ce:51:98:17:87:5b:ce:10:49:ad:b6:46:dc:4d:70:0c:
         0b:63:7b:3c:02:34:a4:61:4c:a9:74:1b:ca:2f:ff:30:79:d8:
         5e:0b:7e:bb:b0:ba:ec:61:c8:ad:06:54:c9:a7:48:52:42:dd:
         cc:31:c5:fb:3f:10:0d:3b:ba:0c:b3:ca:02:b8:b3:09:85:33:
         4e:77:98:84:e9:ec:fa:f8:4f:33:10:da:53:dc:3a:34:91:b6:
         65:bb:0f:78:d6:e5:a2:3e:b1:bf:10:4a:ec:80:13:07:79:8c:
         02:4c:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:23 2025 by rpki-client on console.sobornost.net