Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235332e302f32342d3234203d3e203532393033.roa
File:                     3138372e36322e3235332e302f32342d3234203d3e203532393033.roa (raw, json)
Hash identifier:          5/njtuv7LqeJYYbj9FZkskvwDgf58dhxzFxsQGl7cEU=
Subject key identifier:   27:CE:2B:FF:CF:17:FC:21:98:5D:A2:04:53:98:E9:D0:94:B7:E4:27
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       78F4D72558825DA5D769382DDF04FBFA84E8AE3D
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235332e302f32342d3234203d3e203532393033.roa
Signing time:             Thu 06 Mar 2025 03:16:52 +0000
ROA not before:           Thu 06 Mar 2025 03:11:52 +0000
ROA not after:            Thu 05 Mar 2026 03:16:52 +0000
asID:                     52903
IP address blocks:        187.62.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f4:d7:25:58:82:5d:a5:d7:69:38:2d:df:04:fb:fa:84:e8:ae:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:11:52 2025 GMT
            Not After : Mar  5 03:16:52 2026 GMT
        Subject: CN=27CE2BFFCF17FC21985DA2045398E9D094B7E427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e0:73:27:05:30:dd:96:2c:77:6a:5f:d0:82:
                    a7:0c:6c:8f:fe:11:ad:e6:62:d2:7c:85:b9:bd:93:
                    4a:29:53:07:c8:94:a6:0b:cf:6a:47:76:6e:be:28:
                    f5:c0:58:de:85:6e:09:d9:23:03:3f:1c:1f:9b:3c:
                    2f:83:9e:2b:88:91:d1:ba:b9:fc:e7:c3:25:e4:e7:
                    a6:72:5c:74:b8:77:36:72:72:3c:f0:81:f2:9a:96:
                    58:75:74:ff:66:f7:76:9d:49:0f:3e:b7:6b:93:0c:
                    f2:86:8e:88:e5:db:43:f0:ef:30:82:5b:48:08:8e:
                    e5:c0:e2:ec:69:00:44:91:6c:10:4c:e4:dd:d2:f0:
                    a8:94:cf:8b:44:51:47:fd:b6:16:8b:54:9b:92:a1:
                    ef:e3:76:3d:46:5c:2b:96:56:88:30:f8:5c:06:b5:
                    3b:40:19:01:f4:45:8d:16:f3:ad:c7:41:9e:60:be:
                    6a:f5:a8:8d:e1:7c:88:3c:13:43:18:0a:67:ca:67:
                    87:55:de:bd:5b:8b:1c:fe:38:f8:bb:d3:f8:c9:3f:
                    59:bb:5f:76:81:92:0b:34:fb:e7:4e:b4:e1:84:14:
                    2b:f3:40:32:44:ac:45:9d:b0:ad:c3:e0:1b:a2:5f:
                    43:f8:08:65:0f:17:a1:ea:09:cf:15:74:92:d1:08:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CE:2B:FF:CF:17:FC:21:98:5D:A2:04:53:98:E9:D0:94:B7:E4:27
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235332e302f32342d3234203d3e203532393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:89:b7:59:c6:ac:a8:b6:eb:f3:5d:0c:f0:26:80:86:7b:f5:
         f4:46:51:a6:45:29:b3:7f:23:5c:f5:17:08:49:4b:ef:f0:3e:
         0a:c3:08:2f:cc:cf:ec:a6:d7:0c:92:95:7a:e5:a4:e9:c7:ab:
         44:08:06:99:e2:7b:fd:37:50:21:00:6e:7c:ec:2b:03:df:8a:
         c1:ff:8b:34:57:be:c4:2d:a5:14:c8:6a:1b:2d:52:29:6f:4f:
         73:24:a4:fa:16:b0:a4:fe:e6:69:0e:56:cb:42:4d:ab:3d:1c:
         88:a7:79:0d:eb:eb:de:c7:5e:88:f9:30:eb:75:e8:c7:c4:4e:
         c5:45:79:06:32:8c:5f:81:db:55:15:5b:ce:c5:71:ae:04:06:
         e0:75:61:70:88:c4:8b:8a:00:8a:3d:70:8b:31:78:fb:cd:bf:
         59:12:21:68:a2:a2:c2:91:c4:e1:03:7e:6b:5e:bc:d1:e1:35:
         6e:16:fe:78:80:4c:36:86:d9:3c:27:96:04:f5:77:6f:1d:64:
         33:1a:9e:a3:25:68:4a:42:a7:37:d9:8a:59:d4:50:c8:32:12:
         39:22:b6:e7:7e:2d:80:61:a8:de:18:78:61:d5:f9:dc:2b:89:
         7d:ce:08:26:3f:5b:6f:b2:df:bc:e7:a7:f0:15:30:39:3d:44:
         70:c2:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client on console.sobornost.net