Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234392e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234392e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          Gbwfn0UvBa4JjUy5aDYFM0v/xOrYOPF/gX978Fs27ys=
Subject key identifier:   0D:7F:DA:63:F9:9A:FB:F0:EB:13:C5:A4:D6:83:31:25:65:0C:D2:1D
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       1869EE04E648E9ADE2AE279AA0CD254203E1D55B
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234392e302f32342d3234203d3e20323632363633.roa
Signing time:             Wed 02 Jul 2025 13:36:43 +0000
ROA not before:           Wed 02 Jul 2025 13:31:43 +0000
ROA not after:            Wed 01 Jul 2026 13:36:43 +0000
asID:                     262663
IP address blocks:        187.62.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 16:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:69:ee:04:e6:48:e9:ad:e2:ae:27:9a:a0:cd:25:42:03:e1:d5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Jul  2 13:31:43 2025 GMT
            Not After : Jul  1 13:36:43 2026 GMT
        Subject: CN=0D7FDA63F99AFBF0EB13C5A4D6833125650CD21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:14:bc:69:00:84:3e:d6:ad:28:e0:cc:f7:
                    7c:e5:6e:ad:ab:47:2a:f3:2c:3f:fc:3b:d1:2d:95:
                    7a:1a:dd:07:6d:24:e1:ad:ec:31:52:aa:98:3c:29:
                    eb:a3:16:bb:c2:51:fe:f7:78:85:1c:59:9c:e4:e9:
                    33:cf:66:c8:97:90:46:55:67:30:5c:23:e8:99:14:
                    c5:8a:93:17:61:1d:f0:01:9f:69:ac:26:40:bd:b2:
                    67:7f:79:4d:6e:3d:5f:0d:d9:29:61:a3:f2:a5:24:
                    45:36:00:79:73:ef:74:67:d0:a7:ce:a0:4d:f9:6d:
                    5b:59:84:39:82:a2:64:f0:08:44:6c:25:ae:fe:59:
                    27:e8:69:74:d1:82:94:20:63:1b:89:b7:79:f1:7a:
                    97:6f:64:fd:e4:d6:46:11:4b:e9:81:12:42:f5:25:
                    15:4c:66:4f:dd:63:a5:91:a2:af:1b:15:b4:fd:45:
                    31:37:80:e0:6f:84:c6:b0:3f:78:c1:e2:74:d2:79:
                    53:05:b7:e8:e7:8b:3f:73:8c:13:d1:eb:4f:e9:02:
                    d6:32:16:10:6b:af:ba:8c:75:e6:c5:b2:ec:61:f5:
                    90:8b:2e:88:4d:18:84:56:e4:9c:c1:5d:c8:d5:66:
                    2e:e7:61:b6:a9:58:ac:a3:5b:54:a6:f2:5f:b8:8b:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7F:DA:63:F9:9A:FB:F0:EB:13:C5:A4:D6:83:31:25:65:0C:D2:1D
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234392e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f4:ce:ff:dd:3e:dd:60:28:28:44:47:42:e1:d5:64:1b:b3:a2:
         b6:82:e4:2c:eb:dc:ed:60:3e:12:d8:cc:db:05:29:aa:e9:55:
         b9:f9:e3:ee:1f:fe:65:16:d9:8b:26:fc:f8:a4:ff:4b:a4:53:
         d6:60:5c:37:d6:29:eb:02:26:91:39:94:be:24:65:9e:2e:e3:
         2b:d2:bd:6e:1c:ff:78:5f:ac:57:4d:5a:f1:85:e7:a0:57:ab:
         1b:4b:c0:3b:ef:fd:05:b6:b4:1f:8d:c2:54:7d:62:e1:69:42:
         2b:9f:34:bf:31:ea:b4:19:bb:1f:76:d9:1b:f0:11:fb:73:53:
         46:e5:65:94:1c:9e:ba:1a:0b:44:1c:56:41:a5:a3:8a:aa:61:
         50:26:c8:83:29:4b:05:0b:4f:e7:9d:7a:59:d1:1f:bb:3f:3b:
         97:b8:9f:e4:40:55:84:fa:43:7b:68:b9:10:08:b3:05:d4:ed:
         71:9e:d6:c9:0b:f8:12:c0:05:fd:f9:1f:9f:11:d6:4e:4f:6f:
         d8:29:91:16:06:8b:48:e2:a1:a2:72:32:f2:80:51:3a:ac:42:
         fc:b2:1e:c1:b7:84:c1:44:13:b4:ac:f3:ac:9e:34:6a:0c:03:
         4e:09:b3:98:0b:26:99:ab:c2:7c:3c:0e:72:6f:da:ca:74:3e:
         57:77:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:20:50 2025 by rpki-client