Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e382e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e382e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          AxlC3u7je4EEAZEOSnpLA5Z3ji+w5QJNcmL0MT+boCw=
Subject key identifier:   2B:3E:E7:E5:A3:B1:E5:20:B9:4D:60:FA:FB:89:D3:D2:1B:16:55:EC
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       3FA6C234FF5A26676EEF6DD8C1612DA40BC255A8
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e382e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:52 +0000
ROA not before:           Thu 06 Mar 2025 03:11:52 +0000
ROA not after:            Thu 05 Mar 2026 03:16:52 +0000
asID:                     262663
IP address blocks:        186.216.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a6:c2:34:ff:5a:26:67:6e:ef:6d:d8:c1:61:2d:a4:0b:c2:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:52 2025 GMT
            Not After : Mar  5 03:16:52 2026 GMT
        Subject: CN=2B3EE7E5A3B1E520B94D60FAFB89D3D21B1655EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:cc:76:38:82:79:01:24:61:96:13:c3:c8:
                    56:be:e2:26:91:b8:d2:73:ad:c7:83:32:d1:a2:e1:
                    dd:ef:06:82:eb:a9:5b:fa:56:c8:8e:12:32:e4:bf:
                    d1:ab:c8:49:d2:ba:7e:78:12:75:f7:9c:13:a8:d2:
                    1e:c3:c8:6a:38:1e:bf:4a:9b:1e:3a:1a:25:53:f0:
                    10:70:f9:13:64:5f:ba:8a:90:86:4c:60:2c:30:3e:
                    f7:de:45:83:99:10:3a:15:e1:8c:0d:85:cc:03:f1:
                    06:30:eb:bc:36:c1:d6:de:74:81:78:4d:29:d1:fa:
                    b2:74:25:f5:35:39:ac:42:0c:24:7e:e2:de:7a:14:
                    10:f1:a9:3e:27:48:cf:1b:d1:87:46:5d:cd:8f:a2:
                    27:55:27:1a:5c:09:42:9d:4d:82:ae:38:6f:d8:ca:
                    82:f9:8c:2c:cc:3a:21:ff:43:71:a8:97:bf:ae:f5:
                    83:ec:dc:f1:25:b9:50:2f:51:c5:70:39:45:62:40:
                    76:79:09:52:76:f1:4e:5f:c9:81:18:c3:4e:c0:c3:
                    0a:e6:a1:d1:67:5d:9b:fd:ec:e3:de:7e:1b:9c:4c:
                    36:d7:58:28:4c:ac:59:00:b8:69:92:80:a3:09:fd:
                    de:c5:ec:cf:85:9b:b7:a1:43:86:60:f9:03:37:c1:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3E:E7:E5:A3:B1:E5:20:B9:4D:60:FA:FB:89:D3:D2:1B:16:55:EC
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e382e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:bb:cd:82:d2:73:f3:5b:5e:81:7a:65:22:e5:24:fa:32:
         ab:61:5b:1b:71:83:35:42:a7:a0:e1:0e:d1:76:a2:0a:d6:03:
         81:b3:1d:c8:ca:57:b1:5a:18:69:9c:13:77:b7:d3:1e:54:fe:
         20:6c:cd:9b:6f:b6:7d:87:aa:e8:16:8d:24:ac:1e:25:f6:0a:
         07:e6:ad:2b:0b:76:80:c5:87:75:dd:d6:db:e9:f8:40:77:de:
         31:e7:88:53:87:2b:32:a1:35:18:74:d0:53:12:8c:8f:93:14:
         cc:a3:4b:75:e5:63:ea:13:d7:c3:25:4f:36:23:e2:6b:c8:b0:
         95:07:ed:dc:75:22:61:2e:ee:b9:87:30:22:9b:91:85:44:0f:
         69:e8:93:bd:68:5f:da:07:88:02:63:36:55:f2:43:cc:22:b5:
         fd:32:e1:22:b4:00:e9:85:30:5c:b5:f7:f2:9b:e9:31:a0:c1:
         a3:fa:55:b0:80:73:fc:97:2b:6f:f6:29:93:ea:2a:36:65:d8:
         c5:82:dd:d6:f4:e3:87:ab:d8:67:da:30:cb:ec:dc:63:3e:a6:
         07:7c:11:db:44:02:f1:3b:b0:79:63:e9:23:54:36:53:91:4e:
         f5:09:76:31:c5:1b:fb:e7:f2:f4:02:89:bc:c8:57:35:06:c1:
         66:96:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net