Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3232352e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3232352e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          pPBq8v95EdSbS+DefhJcAKVSGVOBF55vN4UZWl6mw6Y=
Subject key identifier:   A9:23:AE:4F:30:D3:4F:3D:56:89:E0:CE:9D:28:9C:F9:49:1B:C6:AB
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       010489BC5B51344C400B6F79132105964EB20E93
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3232352e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 06 Mar 2025 03:17:00 +0000
ROA not before:           Thu 06 Mar 2025 03:12:00 +0000
ROA not after:            Thu 05 Mar 2026 03:17:00 +0000
asID:                     262663
IP address blocks:        187.62.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 11:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:04:89:bc:5b:51:34:4c:40:0b:6f:79:13:21:05:96:4e:b2:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Mar  6 03:12:00 2025 GMT
            Not After : Mar  5 03:17:00 2026 GMT
        Subject: CN=A923AE4F30D34F3D5689E0CE9D289CF9491BC6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:be:98:52:9a:60:e4:69:db:52:c6:c0:b1:78:
                    1c:fd:cf:42:47:63:7f:f1:af:8f:21:58:3d:a0:d0:
                    c8:c6:af:cc:85:27:57:dc:d3:da:a1:83:c3:16:cf:
                    3e:1b:76:73:fe:bf:a2:c3:9b:80:71:80:49:aa:e7:
                    5d:ca:94:fa:eb:b9:c2:0c:35:ab:dc:b4:1b:4a:d2:
                    e3:85:7c:b2:2a:01:11:c6:f2:76:a0:14:10:8e:ff:
                    38:57:15:5d:c8:fa:d0:ef:fa:47:54:27:d1:08:7b:
                    89:99:6b:9b:e0:57:14:72:2d:19:ab:15:18:ec:71:
                    3e:80:6f:fd:3d:ff:27:72:22:7d:72:1d:55:39:1f:
                    88:66:0f:1b:90:51:e1:5f:e8:d4:4f:d4:96:96:cb:
                    ee:a1:ab:9d:ea:b1:20:ac:09:56:ab:1e:d7:ea:18:
                    12:fa:c9:b9:0a:b1:2a:7d:1e:f6:96:54:9a:96:1e:
                    aa:50:64:de:a2:2a:61:58:35:17:c5:45:13:8e:c2:
                    2b:86:a2:b3:2d:ca:f4:6d:63:cc:ff:c5:0f:8c:cd:
                    39:18:93:2d:38:42:61:53:76:ed:ba:be:27:ed:5d:
                    51:63:24:93:88:04:cb:f3:14:20:45:75:50:66:dd:
                    bb:7d:b7:7d:d3:c4:96:a4:e6:34:66:11:0a:c5:4c:
                    03:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:23:AE:4F:30:D3:4F:3D:56:89:E0:CE:9D:28:9C:F9:49:1B:C6:AB
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3232352e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:68:72:3d:58:e0:03:94:2c:46:3d:cf:14:a6:c1:92:9f:81:
         7c:0a:30:a3:25:67:a4:de:f1:b0:c3:9f:35:df:22:92:c4:0d:
         d4:89:ea:8f:a0:e0:ec:c3:53:5c:42:95:e4:72:8c:c8:45:46:
         47:b1:e4:cc:91:51:a8:75:9f:57:02:29:32:59:f5:26:16:0f:
         e5:f2:e9:0e:b9:72:93:1f:27:9b:c5:dc:97:bb:96:e7:4c:1c:
         94:36:53:22:d4:aa:45:46:84:e8:64:60:46:e7:31:67:b5:2c:
         79:52:e8:8c:43:0a:dd:dd:21:b7:b3:63:46:b6:bf:ad:76:63:
         7d:33:0d:72:4d:e0:f8:01:22:ae:f2:14:10:2f:5d:3d:a3:47:
         e9:68:d9:75:23:c0:e6:59:f6:89:c4:11:8d:ab:0f:c0:39:e6:
         a3:d9:af:b9:fe:a9:e9:26:53:b1:33:da:ae:7c:c5:15:60:44:
         c5:dc:0a:ef:65:f1:bc:58:7b:16:10:f6:44:e8:7e:76:e5:87:
         6c:40:14:0e:eb:1d:ed:db:0e:f5:dc:61:3a:1b:03:6e:5e:d4:
         cb:3a:b1:98:5a:e9:8f:1d:f3:6d:35:7a:db:ab:c7:e4:ae:11:
         4a:7b:e5:8b:22:13:65:b7:01:81:9c:35:c4:09:bf:7b:83:56:
         1f:b0:35:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAQSJvFtRNExAC295EyEFlk6yDpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF
M0E2M0U5RTAeFw0yNTAzMDYwMzEyMDBaFw0yNjAzMDUwMzE3MDBaMDMxMTAvBgNV
BAMTKEE5MjNBRTRGMzBEMzRGM0Q1Njg5RTBDRTlEMjg5Q0Y5NDkxQkM2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtvphSmmDkadtSxsCxeBz9z0JH
Y3/xr48hWD2g0MjGr8yFJ1fc09qhg8MWzz4bdnP+v6LDm4BxgEmq513KlPrrucIM
NavctBtK0uOFfLIqARHG8nagFBCO/zhXFV3I+tDv+kdUJ9EIe4mZa5vgVxRyLRmr
FRjscT6Ab/09/ydyIn1yHVU5H4hmDxuQUeFf6NRP1JaWy+6hq53qsSCsCVarHtfq
GBL6ybkKsSp9HvaWVJqWHqpQZN6iKmFYNRfFRROOwiuGorMtyvRtY8z/xQ+MzTkY
ky04QmFTdu26viftXVFjJJOIBMvzFCBFdVBm3bt9t33TxJak5jRmEQrFTAP3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqSOuTzDTTz1WieDOnSic+UkbxqswHwYDVR0j
BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox
NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw
Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdEozUmNtZjRQODdUdjM5SjhCeXRONVBBbVhOVUg1TXA3NEpVYmFqMTZVLzEv
MzEzODM3MmUzNjMyMmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PuEwDQYJKoZIhvcNAQELBQADggEBAJ9ocj1Y
4AOULEY9zxSmwZKfgXwKMKMlZ6Te8bDDnzXfIpLEDdSJ6o+g4OzDU1xCleRyjMhF
Rkex5MyRUah1n1cCKTJZ9SYWD+Xy6Q65cpMfJ5vF3Je7ludMHJQ2UyLUqkVGhOhk
YEbnMWe1LHlS6IxDCt3dIbezY0a2v612Y30zDXJN4PgBIq7yFBAvXT2jR+lo2XUj
wOZZ9onEEY2rD8A55qPZr7n+qekmU7Ez2q58xRVgRMXcCu9l8bxYexYQ9kTofnbl
h2xAFA7rHe3bDvXcYTobA25e1Ms6sZha6Y8d8201eturx+SuEUp75YsiE2W3AYGc
NcQJv3uDVh+wNeo=
-----END CERTIFICATE-----
Generated at Tue May 13 19:22:48 2025 by rpki-client