Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235342e302f32342d3234203d3e20323635313330.roa
File:                     3138372e36322e3235342e302f32342d3234203d3e20323635313330.roa (raw, json)
Hash identifier:          jL6AgR0jkb5wkGs+9Y3PJWSFP5AcpIqJEvXt8NYDU0U=
Subject key identifier:   CD:49:C9:DE:92:06:5B:82:A5:81:A7:36:E4:BA:65:91:AC:04:43:DA
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       32EEBF5BF70B79153B6E32CABFC4CAF7F4FBA076
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235342e302f32342d3234203d3e20323635313330.roa
Signing time:             Thu 06 Mar 2025 03:17:10 +0000
ROA not before:           Thu 06 Mar 2025 03:12:10 +0000
ROA not after:            Thu 05 Mar 2026 03:17:10 +0000
asID:                     265130
IP address blocks:        187.62.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ee:bf:5b:f7:0b:79:15:3b:6e:32:ca:bf:c4:ca:f7:f4:fb:a0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:10 2025 GMT
            Not After : Mar  5 03:17:10 2026 GMT
        Subject: CN=CD49C9DE92065B82A581A736E4BA6591AC0443DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:8f:9d:68:53:12:b6:37:95:98:67:c9:71:
                    a2:ab:1c:d4:35:0e:57:cd:d7:d0:de:bd:63:ae:7d:
                    ea:8c:f2:0e:55:27:01:69:f3:d3:80:d4:2f:7b:47:
                    f3:db:69:8b:15:cf:02:af:83:5f:c9:a5:2d:a3:f3:
                    41:b7:08:53:a9:c9:08:dc:11:9b:cf:9d:d1:82:8e:
                    56:be:a6:8a:cc:e6:dd:05:ba:20:2e:96:0b:19:35:
                    20:22:0a:de:a1:fc:f6:5f:88:9d:32:3f:3c:f3:75:
                    89:42:96:b0:57:a7:e2:6f:6e:ea:e9:05:74:c1:8f:
                    c9:b9:69:1c:c7:22:92:ed:ed:61:a8:ad:9f:fe:d0:
                    80:4e:ac:87:6b:ce:d4:aa:c4:54:f0:fc:54:ee:3b:
                    25:0f:7f:d1:96:08:46:dc:0f:c0:5e:7b:22:e9:b8:
                    13:c4:0c:56:1a:10:a1:73:ed:ed:73:79:be:9a:2d:
                    6c:af:f8:5b:68:d5:e9:7b:7e:15:34:82:00:90:4c:
                    41:2c:68:01:db:4a:c2:eb:00:aa:68:d2:c8:6a:7b:
                    09:94:1d:24:5b:24:39:38:c8:a4:13:6a:b6:0c:1c:
                    d0:b2:67:01:b0:bf:b0:7e:64:a9:c9:d3:66:00:9a:
                    d3:c8:6b:c3:7a:c3:60:4f:79:02:56:33:67:5c:f2:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:49:C9:DE:92:06:5B:82:A5:81:A7:36:E4:BA:65:91:AC:04:43:DA
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3235342e302f32342d3234203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:37:31:60:48:68:64:2e:da:de:5c:80:df:e4:8b:f4:e9:39:
         6b:92:f4:34:de:b4:14:06:aa:d0:aa:b5:85:af:23:c9:78:28:
         bd:f5:fe:26:96:e3:2b:dd:3d:95:ac:40:9e:4c:7a:a4:39:17:
         6c:6d:e1:5f:c2:e0:eb:8a:c7:79:32:de:77:cd:1d:e2:93:bb:
         27:72:07:9e:07:8c:a7:00:e9:50:68:c7:17:17:d4:9b:99:69:
         f7:5f:f6:70:17:5b:35:49:a0:7b:93:71:3c:ec:e5:73:8c:74:
         eb:af:37:be:5a:df:38:9e:24:16:e7:3f:68:fb:7e:be:47:4c:
         f2:42:76:d6:4b:79:f2:ef:6f:4d:48:47:56:b9:53:c4:12:94:
         13:dc:e0:7e:9b:1e:fb:42:0f:3c:09:b4:23:14:fe:35:df:a8:
         2d:20:e8:09:18:d8:ea:13:5e:ca:40:4a:d9:f6:e8:41:a1:ee:
         6f:96:ae:f2:2b:ce:bc:d8:53:ca:b2:2e:66:0d:84:7e:54:16:
         83:13:8a:9e:99:09:c5:ad:4d:eb:aa:e2:e5:80:a7:8f:44:22:
         38:bd:ae:0b:82:33:6e:4f:9c:03:cc:a6:17:98:4b:66:6f:72:
         a1:b6:47:f4:8c:3d:5c:d9:8c:dc:75:35:26:9f:a3:e1:72:45:
         df:db:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:23 2025 by rpki-client on console.sobornost.net