Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e392e302f32342d3234203d3e20323632363633.roa
File:                     3138362e3231362e392e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          Q8TlYHP2madQjH5SKjt201zLIBqOEHUG+6xajtXkmE0=
Subject key identifier:   67:75:13:39:5C:4B:31:8D:B9:FE:17:6D:70:B1:B2:55:BD:BC:6F:AD
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1A101A2F79600319F97E18E02FB6533C41F6BACA
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e392e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:16:55 +0000
ROA not before:           Thu 06 Mar 2025 03:11:55 +0000
ROA not after:            Thu 05 Mar 2026 03:16:55 +0000
asID:                     262663
IP address blocks:        186.216.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:10:1a:2f:79:60:03:19:f9:7e:18:e0:2f:b6:53:3c:41:f6:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:55 2025 GMT
            Not After : Mar  5 03:16:55 2026 GMT
        Subject: CN=677513395C4B318DB9FE176D70B1B255BDBC6FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:a6:fb:f8:22:1b:fa:8d:6e:68:99:61:4b:
                    cc:1e:d0:d8:ff:fe:f8:77:44:df:42:a9:60:c2:bd:
                    73:dc:82:90:0d:54:92:91:98:78:de:a8:17:bc:c7:
                    22:73:1f:87:fe:06:0c:e5:52:c7:ce:6e:24:c9:bd:
                    44:94:87:6d:45:3b:1c:40:25:d6:29:4f:3a:87:1a:
                    bf:6a:c5:0a:a1:8e:ee:8f:ae:bf:13:fe:1b:c0:2f:
                    7e:a4:48:81:90:1a:3c:61:4a:7c:04:c5:89:25:2b:
                    72:c7:55:67:a1:f4:73:ab:9c:9d:d7:3f:95:04:b4:
                    98:75:60:6a:9a:44:c9:bb:1f:d2:71:ae:93:0b:1e:
                    21:b6:8a:9d:cc:70:0c:83:71:7f:97:b9:3a:84:25:
                    8d:f6:bf:d1:ef:6b:45:41:5c:b5:62:d2:94:c7:29:
                    2f:2c:75:25:c3:6e:12:3d:0e:92:1a:d4:90:eb:02:
                    82:82:11:71:b7:25:b9:35:05:82:52:fb:f1:97:da:
                    53:22:18:f1:f3:f1:f9:02:91:76:4b:d1:36:8c:7f:
                    49:c8:6e:f2:e3:25:2c:32:89:14:1d:ad:f3:0a:c4:
                    a4:a6:aa:eb:df:37:38:ff:5f:15:cf:4e:a6:1d:48:
                    a8:52:46:ee:22:b3:45:17:17:a2:0e:33:da:a0:db:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:75:13:39:5C:4B:31:8D:B9:FE:17:6D:70:B1:B2:55:BD:BC:6F:AD
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138362e3231362e392e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:17:52:fc:c2:57:fe:93:da:43:7e:14:35:2c:34:4f:2c:c9:
         af:6b:96:a5:6d:34:04:af:e7:26:8c:30:8d:76:f7:90:a6:17:
         10:1b:2a:25:84:7a:d7:8d:8a:a8:4c:d5:94:f0:2a:ff:9b:e5:
         a5:45:5a:aa:b9:80:50:8e:15:10:ba:0e:06:05:aa:64:48:81:
         53:b3:59:96:23:4b:78:e0:21:f6:2c:0e:22:19:60:76:26:04:
         c1:65:32:ed:e1:c3:b0:c7:e4:40:51:1e:82:68:9d:48:90:e1:
         17:b1:f0:69:9d:a8:25:8c:8d:0b:53:75:dc:4d:64:29:da:be:
         df:83:ef:35:a3:b8:08:4c:8e:b4:3c:b4:5a:cf:a6:10:10:9f:
         00:8d:da:83:89:04:14:e0:c1:cd:b4:eb:c0:be:8d:56:96:8e:
         ed:22:42:6b:81:0a:50:4a:be:54:7b:db:c5:44:46:68:9b:12:
         b4:7a:2a:b0:13:d4:69:6b:78:bd:46:c5:b5:62:29:ee:1a:ed:
         01:4d:41:24:71:94:ec:6e:d0:41:fc:76:e5:e1:d7:46:32:3e:
         ad:49:9c:b6:6c:6a:0a:8f:1c:9c:c3:6f:c2:ea:2f:96:34:75:
         c1:c7:72:c2:b3:91:08:bd:d5:4c:18:8c:35:40:69:f2:17:7c:
         dd:dd:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net