Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233372e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          RRL3vfGttGY6NFmpVxROcm+JaSvjo8vgvwX7EpeO28U=
Subject key identifier:   F9:7D:C6:A1:9F:E4:22:D1:BF:4F:67:B0:94:28:E3:48:0A:FE:FA:A5
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       7981EF8A134A1322D5DEB49672535C44EF742B44
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:08 +0000
ROA not before:           Thu 06 Mar 2025 03:12:08 +0000
ROA not after:            Thu 05 Mar 2026 03:17:08 +0000
asID:                     262663
IP address blocks:        187.62.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:81:ef:8a:13:4a:13:22:d5:de:b4:96:72:53:5c:44:ef:74:2b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:08 2025 GMT
            Not After : Mar  5 03:17:08 2026 GMT
        Subject: CN=F97DC6A19FE422D1BF4F67B09428E3480AFEFAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:50:a0:ed:86:15:88:6f:ae:6a:d1:63:3b:
                    f6:c4:08:b7:55:32:dd:e4:c1:ee:6d:0b:6d:87:b9:
                    3a:f1:f6:c7:12:81:01:aa:f7:c0:1d:ce:11:cd:08:
                    eb:82:63:6d:8a:12:d5:12:01:15:ee:35:57:59:1e:
                    b1:dc:8f:ab:3a:cd:c8:92:a2:9c:e5:8b:1f:ee:64:
                    80:46:c4:b3:57:ac:e0:bf:51:4b:77:03:d8:61:60:
                    7b:39:24:1e:fb:1f:e9:b7:d9:c0:d9:6e:7f:41:a5:
                    db:da:03:63:2f:9a:03:bd:e4:6f:44:b8:cc:90:83:
                    51:ad:cd:32:8e:ca:98:1d:9f:1e:3d:0c:a2:41:32:
                    4b:f4:ec:51:6d:43:ff:28:8c:39:bf:5b:0f:9c:c1:
                    4a:bd:9a:1f:de:6a:77:f8:96:0f:86:e2:39:5f:dd:
                    23:01:5a:42:18:9a:63:c6:b8:b7:00:44:5a:69:57:
                    62:20:a9:ca:a6:02:dd:a1:84:49:46:98:ec:71:7b:
                    50:f9:17:c8:42:30:17:b7:ac:47:6f:af:82:6f:d3:
                    27:0c:ea:29:86:66:4f:12:7b:ce:3a:0c:82:10:14:
                    79:78:63:08:3f:ac:94:fe:82:48:c1:4a:f3:00:f8:
                    cc:ca:9f:51:fa:29:37:a7:c2:09:2a:7a:f7:f2:13:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7D:C6:A1:9F:E4:22:D1:BF:4F:67:B0:94:28:E3:48:0A:FE:FA:A5
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3233372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:65:46:a3:82:66:7c:68:a9:6d:af:d4:73:13:1b:19:49:
         3b:21:9a:78:7e:50:bf:2f:03:10:77:38:a2:7c:a8:13:74:15:
         96:32:7e:17:d4:7d:20:ec:b2:ac:43:6a:0a:96:51:4e:65:bd:
         7b:c2:ac:86:a4:f9:3c:b9:c2:c3:23:0c:6a:04:1c:4f:ae:15:
         a6:38:ae:05:1d:c3:5b:08:fe:08:e7:f0:04:a1:89:7e:01:64:
         91:61:be:e9:1d:0d:b8:e9:38:9d:b7:94:9d:0c:c6:43:7f:d9:
         f5:25:a7:3f:40:69:5a:60:0b:d5:86:d9:97:d4:e1:4e:3a:b3:
         49:6c:cc:4c:d2:2d:17:3c:06:f6:fa:9e:e9:b8:9f:c4:d4:c1:
         b6:63:31:bf:55:37:7f:41:1d:0a:f1:da:9f:12:40:e9:20:df:
         ae:29:62:97:d2:83:0f:b6:42:b6:c2:b8:d4:36:3c:39:d9:b5:
         b9:7e:85:be:57:61:06:b2:77:1b:e5:80:24:14:7e:09:a7:49:
         9d:56:fb:39:75:d5:ae:90:86:94:99:ea:25:5f:4f:a8:fd:87:
         40:90:3a:79:6f:c7:f4:42:35:dd:94:5b:6a:8c:4d:3c:47:b6:
         f4:55:1a:c4:e3:40:08:02:1c:16:03:58:bb:57:e6:69:e0:c6:
         79:94:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net