Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa (raw, json)
Hash identifier:          mSLymmfdvkXEM4nUKkp2Vi8LhJ/Gx8MZeM5/rYZ9HXk=
Subject key identifier:   CB:E1:03:7A:EC:42:CC:34:C1:19:46:97:59:B3:3B:BB:84:12:96:A2
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       01B1E9198344C9FD02FCB9AFAA3AF42287A7B958
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:41 +0000
ROA not before:           Thu 04 Apr 2024 10:42:41 +0000
ROA not after:            Thu 03 Apr 2025 10:47:41 +0000
asID:                     262401
IP address blocks:        177.36.128.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b1:e9:19:83:44:c9:fd:02:fc:b9:af:aa:3a:f4:22:87:a7:b9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:41 2024 GMT
            Not After : Apr  3 10:47:41 2025 GMT
        Subject: CN=CBE1037AEC42CC34C119469759B33BBB841296A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:7a:53:35:97:08:a4:c0:3d:7a:4c:2d:3c:
                    28:f5:69:39:b6:2a:63:c1:bc:00:b1:51:32:58:f3:
                    ac:05:4b:1c:d7:24:44:12:87:7a:52:5d:06:34:0a:
                    95:61:c0:15:1f:72:d3:47:53:46:54:5d:89:3a:a9:
                    80:89:52:29:ae:38:8d:ad:a9:f7:68:83:51:c4:e6:
                    7e:7c:77:91:2b:c6:6e:66:70:aa:4d:2e:14:74:06:
                    fe:2e:03:32:09:6e:32:85:91:95:0d:97:4a:6b:1f:
                    3e:02:71:aa:e0:5f:e5:fb:db:c2:1b:24:aa:da:50:
                    d5:0a:39:8f:27:2a:e1:88:a1:a1:96:a8:89:04:f7:
                    7a:da:f8:7a:31:b7:e0:37:61:25:af:f1:fb:1e:50:
                    ad:ef:86:64:53:57:1a:aa:b7:f0:87:57:f9:32:cf:
                    c3:8a:ee:7c:19:2f:40:d4:eb:fd:77:d8:7d:12:e6:
                    4f:ee:ef:01:1e:50:1a:83:dc:a9:f1:d3:84:10:da:
                    e9:6d:18:56:e2:1d:bc:4e:1b:19:f1:57:2c:c2:ec:
                    d7:1d:a0:57:57:2e:75:3e:15:cc:1e:dc:a4:2f:c9:
                    07:e1:04:6d:a9:b2:27:91:09:66:bc:c1:e0:76:33:
                    a4:54:6f:10:24:00:cd:6c:1f:79:61:d5:24:ac:d6:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E1:03:7A:EC:42:CC:34:C1:19:46:97:59:B3:3B:BB:84:12:96:A2
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f31392d3332203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:79:c2:43:73:a7:46:3b:72:05:ca:54:9a:33:43:4e:2b:fb:
         b4:7a:86:58:b0:2a:df:fc:54:74:f6:3d:49:74:10:27:20:d6:
         58:30:97:40:2f:54:fc:e4:b2:b9:31:9a:8a:21:e5:11:39:4d:
         f7:86:a3:e1:f0:d9:e7:90:1f:8d:5a:30:cb:fc:15:3f:6a:65:
         49:0e:31:eb:da:bf:21:00:6a:00:9e:04:5d:7e:56:03:8b:1e:
         af:0c:95:44:9f:d4:48:27:40:46:51:c2:9f:ac:bb:ea:6c:d4:
         42:d0:0a:1f:16:b2:f7:6c:46:4e:59:45:d7:e5:de:bf:c7:b2:
         3c:da:14:26:fc:64:bf:4a:b0:71:b4:c3:48:84:4c:3e:4f:4b:
         82:bb:f8:1b:d0:85:6a:4d:3f:c5:0e:49:db:8b:2b:5a:e0:77:
         e8:e6:dc:28:a0:28:e2:54:03:d4:75:76:ef:e7:2d:85:be:a9:
         ee:3c:e3:db:b1:5d:e0:a1:ec:e8:7a:19:91:73:2a:7f:81:a1:
         0d:22:63:71:fd:f0:1b:07:25:89:08:2b:5b:e2:c2:da:fe:05:
         9a:67:39:d7:a0:bf:04:6a:40:67:60:73:b0:2d:43:2c:22:4e:
         42:9b:1c:06:80:5f:97:50:58:40:ad:40:6a:39:94:11:d2:7e:
         8b:07:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:44 2024 by rpki-client on console-ams.rpki-client.org