Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233342e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          ZpdGRMBwHY70qJ48E3q4kHavRnTArlf4UuhPW1XqpVk=
Subject key identifier:   6B:53:F8:1F:16:29:EE:B9:6F:44:1D:42:B2:8F:BE:1D:FD:F9:C7:45
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       72F8F21B3FA7A56D6CA2FACD86FBDAE54C8EC1F5
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233342e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:09 +0000
ROA not before:           Thu 06 Mar 2025 03:12:09 +0000
ROA not after:            Thu 05 Mar 2026 03:17:09 +0000
asID:                     262663
IP address blocks:        187.62.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f8:f2:1b:3f:a7:a5:6d:6c:a2:fa:cd:86:fb:da:e5:4c:8e:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:09 2025 GMT
            Not After : Mar  5 03:17:09 2026 GMT
        Subject: CN=6B53F81F1629EEB96F441D42B28FBE1DFDF9C745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:ce:96:fa:80:52:35:c4:c0:e4:35:78:3b:
                    f5:df:8d:43:45:e7:a0:79:61:9a:bc:5f:5c:fb:2f:
                    80:a6:78:05:cf:de:44:4e:12:50:2c:45:3e:8a:b9:
                    1b:f3:2b:a2:fe:6d:45:14:1b:e6:05:12:43:07:60:
                    72:18:2f:80:d9:86:06:21:0f:e1:b6:c2:c3:3b:c8:
                    91:77:e3:23:22:7b:e2:8a:95:42:df:c4:dd:9d:2d:
                    81:18:ad:ec:49:e1:15:21:eb:54:16:1a:5d:7c:18:
                    00:fd:b2:2f:37:7c:1c:af:6c:16:09:e1:46:8d:ee:
                    54:a1:72:e4:a8:ec:67:2f:a9:9b:b0:65:0a:c0:da:
                    95:17:a6:2d:d2:4b:58:1c:a5:5d:7c:97:f0:fd:de:
                    35:3c:5f:49:e3:3e:3f:50:7e:f3:91:55:9a:27:11:
                    bf:51:4c:23:89:05:25:25:2a:69:21:1d:12:4a:af:
                    a0:c0:df:c9:10:4b:af:54:fd:a8:42:ff:39:0e:50:
                    0c:08:65:fa:4f:91:28:c5:23:37:28:e4:62:59:ed:
                    5e:ea:08:42:04:ff:c5:60:f6:41:fb:e3:26:f6:4c:
                    9e:da:94:07:6d:a4:f0:c5:27:31:ac:bd:23:e5:37:
                    65:c7:16:7e:a6:3d:13:c0:a3:55:15:4a:4e:88:d6:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:53:F8:1F:16:29:EE:B9:6F:44:1D:42:B2:8F:BE:1D:FD:F9:C7:45
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:8c:0e:86:16:4c:1b:74:5d:6b:c3:5f:87:b5:97:65:83:50:
         c8:c7:16:d9:6e:ad:f2:b3:9c:1c:92:4c:19:16:0a:9a:f0:88:
         15:eb:75:e5:1d:7f:72:7b:11:08:75:b0:ec:66:26:0e:7d:57:
         b5:46:82:30:1e:95:90:8e:8b:d9:c4:14:1a:c5:10:8d:5b:a5:
         54:b3:4f:1e:d0:98:8f:23:5c:2a:de:cb:ed:91:4e:96:9a:c8:
         79:b3:e4:62:b3:e3:23:d0:b7:30:c9:d3:3a:af:32:c8:23:b0:
         1f:18:a8:ea:76:16:16:cd:ea:bc:9d:01:50:94:34:45:d8:1d:
         de:fc:37:cd:b0:c9:20:0f:26:bd:68:7a:1b:5f:4d:fa:10:1c:
         7c:f5:cf:87:f5:a3:4a:cc:c9:d4:47:32:d6:c4:58:31:82:4a:
         23:b6:ed:ac:9c:bc:e5:11:77:d7:2c:e1:de:2d:22:70:a1:da:
         27:0e:bd:da:cc:18:8e:08:00:a9:91:da:1c:d6:ef:88:68:fb:
         16:98:89:4a:ad:e5:c9:ff:15:dd:9a:58:e9:ba:51:6e:0e:f6:
         4b:c6:ed:45:96:c7:97:e4:e7:89:0b:b0:4e:9f:4b:81:16:2e:
         a8:11:23:76:88:17:54:91:b4:86:d7:24:ad:cd:ce:20:13:1c:
         e4:5b:e4:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcvjyGz+npW1sovrNhvva5UyOwfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzEyMDlaFw0yNjAzMDUwMzE3MDlaMDMxMTAvBgNV
BAMTKDZCNTNGODFGMTYyOUVFQjk2RjQ0MUQ0MkIyOEZCRTFERkRGOUM3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLP86W+oBSNcTA5DV4O/XfjUNF
56B5YZq8X1z7L4CmeAXP3kROElAsRT6KuRvzK6L+bUUUG+YFEkMHYHIYL4DZhgYh
D+G2wsM7yJF34yMie+KKlULfxN2dLYEYrexJ4RUh61QWGl18GAD9si83fByvbBYJ
4UaN7lShcuSo7GcvqZuwZQrA2pUXpi3SS1gcpV18l/D93jU8X0njPj9QfvORVZon
Eb9RTCOJBSUlKmkhHRJKr6DA38kQS69U/ahC/zkOUAwIZfpPkSjFIzco5GJZ7V7q
CEIE/8Vg9kH74yb2TJ7alAdtpPDFJzGsvSPlN2XHFn6mPRPAo1UVSk6I1m5XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa1P4HxYp7rlvRB1Cso++Hf35x0UwHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM3MmUzNjMyMmUzMjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PuowDQYJKoZIhvcNAQELBQADggEBAB+MDoYW
TBt0XWvDX4e1l2WDUMjHFtlurfKznBySTBkWCprwiBXrdeUdf3J7EQh1sOxmJg59
V7VGgjAelZCOi9nEFBrFEI1bpVSzTx7QmI8jXCrey+2RTpaayHmz5GKz4yPQtzDJ
0zqvMsgjsB8YqOp2FhbN6rydAVCUNEXYHd78N82wySAPJr1oehtfTfoQHHz1z4f1
o0rMydRHMtbEWDGCSiO27aycvOURd9cs4d4tInCh2icOvdrMGI4IAKmR2hzW74ho
+xaYiUqt5cn/Fd2aWOm6UW4O9kvG7UWWx5fk54kLsE6fS4EWLqgRI3aIF1SRtIbX
JK3NziATHORb5Kg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net