Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          jwq4JOD9UkgGyChskv/oCqFtREMGsOdvSk7gs/LE6YE=
Subject key identifier:   BE:56:C5:72:77:18:4E:60:73:D8:C4:92:08:BC:C4:C9:0C:44:EE:E6
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1190DD528C08120A891A652EA93F1BC68C0F0CA0
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:05 +0000
ROA not before:           Thu 06 Mar 2025 03:12:05 +0000
ROA not after:            Thu 05 Mar 2026 03:17:05 +0000
asID:                     262663
IP address blocks:        187.62.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:dd:52:8c:08:12:0a:89:1a:65:2e:a9:3f:1b:c6:8c:0f:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:05 2025 GMT
            Not After : Mar  5 03:17:05 2026 GMT
        Subject: CN=BE56C57277184E6073D8C49208BCC4C90C44EEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:fe:c5:f6:3c:d1:08:7e:49:a0:7c:f3:b4:
                    8e:1a:65:c7:94:74:f6:63:0f:f9:fd:e1:c0:27:3e:
                    60:c7:a9:54:83:66:77:c5:21:6e:64:5d:12:cb:57:
                    2e:fc:50:7e:e3:ed:51:8e:42:0e:65:0f:ce:0d:e5:
                    7f:15:f2:ce:77:85:22:15:16:e0:ac:f9:1b:f3:28:
                    58:99:fb:1d:2e:34:ab:c0:c6:ed:7a:bc:31:14:09:
                    64:c2:64:3f:ea:83:87:3c:a2:a8:7c:af:ce:c6:d8:
                    f4:34:26:d5:a6:83:f2:b5:e0:58:ad:65:0f:6e:19:
                    9a:63:b0:98:c6:74:73:3b:0b:3e:a9:a2:05:d3:95:
                    80:03:7d:90:b4:cf:31:0c:f5:26:24:3b:34:34:d9:
                    ef:39:07:18:67:94:a7:17:47:a2:2a:57:f4:98:e6:
                    d8:06:0b:42:19:41:46:e8:85:72:4c:8e:c8:29:c1:
                    cf:c6:a8:e7:6f:f1:76:e2:6a:69:f1:04:4b:30:12:
                    b5:de:64:f0:c6:fa:9e:80:3b:0c:c0:32:94:f4:ee:
                    5e:8d:13:ad:ea:ff:aa:24:09:b0:5f:64:d4:ce:f9:
                    de:f8:89:35:1d:6d:11:88:2b:e6:4a:10:be:23:9a:
                    57:2c:d4:f8:2d:27:58:c1:a3:f9:ba:bd:7f:af:ba:
                    09:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:C5:72:77:18:4E:60:73:D8:C4:92:08:BC:C4:C9:0C:44:EE:E6
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:13:e6:87:82:c7:06:30:6e:eb:ae:91:b1:9c:aa:bd:09:68:
         21:49:b9:42:12:e9:d0:46:a0:ef:bd:b2:55:92:1c:90:51:ff:
         0c:c2:7e:43:a1:56:3b:4d:09:79:e5:66:68:11:3e:e1:ee:68:
         f3:89:a6:b7:fb:db:cf:75:62:10:80:50:7e:be:fc:34:d4:36:
         73:54:6f:4d:be:4b:7d:02:63:44:8f:98:1d:97:e0:62:56:66:
         9e:49:81:20:dd:7f:15:5f:f8:0e:bc:b8:2c:22:41:00:72:44:
         2c:d5:bb:30:b1:9f:0f:89:de:ac:1d:76:ec:21:0c:81:be:6e:
         ad:f8:e6:13:b8:a0:a9:d2:d5:ca:11:26:b4:b6:1a:23:12:5e:
         c3:df:71:28:31:65:54:69:b5:aa:07:99:d7:ab:12:7b:44:bb:
         85:b5:86:c1:ab:0d:e0:47:3c:f8:16:5c:cf:95:9e:50:05:93:
         ee:b5:8b:be:b3:d5:34:22:72:7e:de:04:14:02:16:57:cb:9d:
         b1:b7:c4:46:cb:2f:ea:64:c2:bc:84:bd:65:75:98:af:7d:39:
         61:79:8a:2c:47:98:0d:c0:30:ff:c8:70:39:e5:e4:21:ad:55:
         4b:a0:ea:78:d5:c2:fe:7b:f0:d3:76:45:c7:26:e4:b2:e9:b0:
         1e:35:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net