Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa (raw, json)
Hash identifier:          z/XFIrgcmgDzhyzzkNogcseaoLAxX0mVc9ndmwa04xg=
Subject key identifier:   48:DD:BF:87:8A:F6:87:80:12:83:03:BC:A7:09:0E:01:60:43:76:8F
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       207C1AA4E7D4A9F467B0237E64DA902F70167E8A
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:44 +0000
ROA not before:           Thu 04 Apr 2024 10:42:44 +0000
ROA not after:            Thu 03 Apr 2025 10:47:44 +0000
asID:                     262401
IP address blocks:        177.36.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7c:1a:a4:e7:d4:a9:f4:67:b0:23:7e:64:da:90:2f:70:16:7e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:44 2024 GMT
            Not After : Apr  3 10:47:44 2025 GMT
        Subject: CN=48DDBF878AF68780128303BCA7090E016043768F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:16:44:fe:89:79:a0:2d:3b:87:5f:90:52:
                    2d:7c:5d:62:5d:74:7e:c8:23:f8:11:88:5f:61:eb:
                    32:27:69:ee:d6:16:66:3f:2f:22:95:e0:1a:ce:9a:
                    24:4d:1c:52:44:f9:48:d1:37:97:ee:f5:98:b1:2f:
                    a3:61:78:7b:ea:7c:ed:7e:0e:1c:05:e0:d1:da:55:
                    15:71:1e:80:d7:db:c4:5f:40:40:8c:b3:2b:38:5a:
                    b7:bf:c1:99:b6:fa:90:da:e8:0a:d8:9d:1e:b2:03:
                    15:df:b9:79:e7:e4:7d:86:95:8c:21:86:4a:1f:bf:
                    70:79:eb:39:f4:2d:84:c4:88:e9:1f:d0:a8:aa:81:
                    a5:36:a9:e3:09:c6:a9:5e:b7:48:d4:df:6a:22:6c:
                    8b:4e:d6:af:b8:82:93:8c:88:87:ae:d1:ee:6f:17:
                    2b:c6:b7:03:73:08:6d:8f:01:5b:c5:84:c3:2d:29:
                    50:9f:ba:9b:9b:20:3a:03:81:b9:3e:a0:9d:55:2b:
                    57:fb:38:ed:7f:51:9f:d5:d2:d4:45:8c:56:02:67:
                    6f:4a:07:5d:e7:24:fe:2a:11:fd:57:11:b3:dd:20:
                    fd:5a:b8:15:74:76:6a:db:df:33:96:b2:ac:a2:37:
                    9e:f6:db:a9:cd:74:20:bd:89:5d:cc:31:65:fb:8b:
                    36:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:BF:87:8A:F6:87:80:12:83:03:BC:A7:09:0E:01:60:43:76:8F
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:44:1e:dd:ef:f9:19:f1:b4:c6:5e:ae:37:ca:52:a1:a7:5f:
         5b:8d:d3:c0:3a:21:24:77:c5:29:62:85:b1:62:e3:3e:38:5f:
         97:41:0b:46:c6:8f:eb:dc:86:7c:9f:7e:bf:a9:c0:38:ae:57:
         2e:b8:c9:24:53:5e:16:7e:23:83:c5:55:ed:e8:06:f9:f9:d3:
         be:d1:8a:a8:b3:21:94:d0:12:db:77:f4:d5:13:40:2d:2f:76:
         bf:ff:fc:da:02:28:c0:43:75:10:49:1f:d9:ff:3f:fc:98:6c:
         bf:44:00:84:91:46:9d:6f:4b:ea:f9:dc:3d:e9:4e:f7:c2:f2:
         71:2d:67:e2:82:ec:9d:26:7d:32:63:18:dd:33:59:7e:3b:f7:
         9f:0c:3a:36:68:a1:40:07:1f:05:cd:e7:bd:20:bf:94:9f:e8:
         55:63:8a:8c:04:a9:18:21:cb:2b:cd:2b:d8:a7:f2:65:3c:ee:
         d0:b4:5a:e8:21:46:0c:84:86:63:c5:56:73:e6:63:4f:b7:f6:
         44:7d:c0:ed:92:be:87:98:bb:5c:f6:11:26:08:0a:c9:f6:57:
         d4:b5:bb:66:ea:d3:57:48:5f:39:e1:85:41:0d:f1:33:f1:78:
         dd:f0:57:12:e0:4f:7c:a9:08:6c:9f:0f:60:06:32:38:60:d5:
         39:fc:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org