Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          zNvHtKKSGCy8VTMKECXbvH/jFQPEAES0+3og1Vn5vaE=
Subject key identifier:   ED:A1:65:DE:BF:F2:C1:A8:B6:20:97:AD:F9:B6:97:21:7F:0F:2C:F7
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       526C2A36D70DF20971AC36763A952C83BD0D4733
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:10 +0000
ROA not before:           Thu 06 Mar 2025 03:12:10 +0000
ROA not after:            Thu 05 Mar 2026 03:17:10 +0000
asID:                     262663
IP address blocks:        187.62.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6c:2a:36:d7:0d:f2:09:71:ac:36:76:3a:95:2c:83:bd:0d:47:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:10 2025 GMT
            Not After : Mar  5 03:17:10 2026 GMT
        Subject: CN=EDA165DEBFF2C1A8B62097ADF9B697217F0F2CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:6b:e0:f9:43:5d:26:55:30:5e:e8:b6:14:
                    6f:b3:ce:ce:6a:47:fd:2a:d1:4a:03:4a:93:61:09:
                    ea:2f:67:b7:09:f2:f7:45:d2:08:9b:29:b6:c8:c9:
                    b4:05:4b:88:c1:7b:1f:90:8c:07:2a:83:86:e0:1c:
                    79:05:fe:4a:14:14:77:e3:34:a2:6f:f0:ea:08:58:
                    6c:7f:ae:09:9f:cd:db:87:06:b5:c4:2d:59:56:93:
                    3a:f6:0a:22:a5:72:f6:ae:85:83:b4:7c:b0:87:6f:
                    29:8b:b6:f1:e6:f4:1b:44:52:21:4d:9f:51:8e:fb:
                    6a:94:48:73:ec:a8:2d:29:d1:cd:cc:54:29:d4:f1:
                    1c:13:ef:ce:90:0f:8c:30:87:3c:f1:ae:36:05:0b:
                    5d:ee:35:c2:0c:75:5b:cc:ec:26:21:ed:79:4a:ea:
                    15:6d:75:20:9b:dc:44:ca:73:18:14:e1:8b:ef:7c:
                    ef:07:8a:c7:0d:6e:1e:b2:df:c9:0e:ba:7b:de:17:
                    3c:df:db:55:2b:dc:a1:83:ac:c6:c8:22:ad:38:be:
                    2f:63:5a:ef:82:30:54:9f:b1:4d:a5:ef:68:c8:da:
                    75:5c:94:a3:28:dc:69:fd:e3:45:9d:23:8c:bb:19:
                    85:88:63:e0:95:02:19:4f:34:6b:2d:bf:fc:b3:09:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A1:65:DE:BF:F2:C1:A8:B6:20:97:AD:F9:B6:97:21:7F:0F:2C:F7
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:48:91:df:46:e2:aa:68:57:90:27:89:b5:5b:50:c2:dd:3d:
         8d:5d:c7:97:3c:47:55:da:15:fe:e4:7d:54:f6:be:fc:e6:a9:
         7e:b1:55:5d:21:f4:e4:f1:ab:f3:b6:4f:9d:cd:86:3b:48:80:
         2f:71:10:a1:19:fb:bd:9c:0b:53:23:7b:ab:65:92:3d:22:06:
         9d:f2:3e:d4:0a:52:47:b1:77:82:9e:31:1a:f6:bd:e0:1d:22:
         e5:64:e4:a8:51:92:67:98:05:ae:76:6e:33:43:10:86:39:70:
         c8:72:08:b4:ef:21:06:e9:bf:ce:4c:23:34:9a:14:86:10:d5:
         f8:19:8f:9b:fe:0b:eb:9a:30:53:e0:f3:95:0f:14:c0:55:70:
         74:13:1e:72:e0:a6:3f:f7:52:b6:3d:0d:70:a5:51:e2:fc:b4:
         e7:e9:43:00:1f:bc:8d:aa:f4:90:63:de:eb:ef:f6:cf:61:4c:
         01:b4:c8:7b:cc:db:15:9d:31:85:6f:a3:b8:c0:9f:5c:d6:e2:
         93:82:80:c7:a3:ae:32:af:6f:01:fd:94:6e:04:1f:7b:1d:db:
         9f:70:3e:db:45:b8:73:73:67:cc:ea:50:0b:59:52:98:c8:3a:
         45:c0:b9:00:13:63:18:d1:a5:67:d0:8c:20:6c:b6:f4:7c:e9:
         12:93:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client on console.sobornost.net