Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          5CljUsvK6naFA+4mnIvinZQC+F91IBqbiVV2HVtA0yY=
Subject key identifier:   3A:5D:61:81:4E:CE:3E:1E:48:0D:BB:96:74:05:90:BD:BC:6B:81:E0
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7F79223A878C0828EFBE6CBAFE7F0F8975873542
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:04 +0000
ROA not before:           Thu 06 Mar 2025 03:12:04 +0000
ROA not after:            Thu 05 Mar 2026 03:17:04 +0000
asID:                     262663
IP address blocks:        186.216.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:79:22:3a:87:8c:08:28:ef:be:6c:ba:fe:7f:0f:89:75:87:35:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:04 2025 GMT
            Not After : Mar  5 03:17:04 2026 GMT
        Subject: CN=3A5D61814ECE3E1E480DBB96740590BDBC6B81E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:9c:54:30:08:f9:fb:ee:93:24:66:c7:a5:
                    a1:e8:a2:4c:82:b4:57:6c:53:c6:8a:01:4d:06:d1:
                    e2:15:e1:17:59:46:f3:0b:df:c6:c3:4e:7f:b5:63:
                    e8:1f:d1:28:d2:f6:1b:48:84:c6:1b:ad:b1:be:9f:
                    a0:d9:68:14:54:e2:7b:e1:07:d8:9d:2a:df:46:2c:
                    38:5b:8d:72:dd:4a:7a:36:64:0b:d3:97:9e:c9:9f:
                    05:11:ea:bc:b8:0e:90:8e:c6:5a:62:19:bf:2d:08:
                    15:21:4b:09:f3:b9:eb:e9:38:df:0f:40:83:5d:a7:
                    92:d1:92:05:3c:59:e1:be:df:86:10:7c:03:c8:a3:
                    90:ee:d5:65:96:f1:2f:67:bf:cf:6c:1d:11:49:e7:
                    a1:03:cd:57:d3:00:dc:cb:cc:4d:64:06:23:32:ee:
                    43:c6:e9:33:37:dc:84:e4:0a:2a:ba:eb:94:95:ef:
                    7e:3b:0b:b5:1b:d9:44:a0:0b:e8:3e:2f:63:f4:51:
                    9e:57:36:60:9f:20:c5:2f:e1:ea:cb:7d:b9:40:ae:
                    d1:06:f1:8c:3d:8f:58:36:71:71:76:5b:0b:a9:93:
                    50:0a:6b:0b:7a:e7:9c:2f:c7:3c:48:7a:1c:6a:d5:
                    58:2f:39:ce:59:ac:90:4b:05:90:89:67:c9:ac:51:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:61:81:4E:CE:3E:1E:48:0D:BB:96:74:05:90:BD:BC:6B:81:E0
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e36332e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:45:0c:16:8f:a2:c8:9b:ac:be:d6:aa:dd:73:fb:e7:46:
         a3:4c:2b:df:f0:73:a9:68:d9:96:aa:b2:f4:a0:ba:75:38:dc:
         0b:28:3d:9b:27:01:db:20:a4:f0:44:a6:06:96:ef:32:2d:03:
         71:57:1b:16:01:34:fb:fd:71:cd:b8:15:c6:82:59:1c:74:8d:
         e6:40:98:a5:93:3f:5c:cc:fb:80:88:d2:88:e8:a2:40:38:13:
         40:53:b0:8c:fa:29:92:da:54:b5:b4:ea:52:6e:c7:f7:80:fd:
         f6:85:16:1e:92:e6:9f:c8:9b:e2:c5:49:f6:87:a4:b7:ff:a7:
         57:6c:5a:9c:c6:a0:5e:2f:ee:43:0b:e3:b7:86:80:1b:b9:53:
         c2:cb:be:df:e4:0a:24:3a:46:c9:19:95:77:fd:53:05:5a:ef:
         8e:57:2c:66:61:23:e7:2f:dc:75:c0:41:a2:93:a4:dc:a1:28:
         a5:27:c4:5f:d7:94:eb:b5:a5:10:28:77:3a:16:7b:56:a4:63:
         3c:91:d0:7e:2e:e2:bf:71:50:6e:7a:c9:ad:82:55:5e:23:0f:
         6d:63:b4:f6:96:85:2e:04:b1:06:c1:0d:5b:eb:2c:18:d6:96:
         b0:c8:52:b7:1e:44:5b:75:60:44:a3:86:b5:40:84:e4:7f:75:
         c5:a9:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net