Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa (raw, json)
Hash identifier:          KgzGbzRJgXL0OqSXuFUmqjHdufoyOs5nw9Ke4pSif+k=
Subject key identifier:   84:C1:67:F5:AD:A5:15:39:FA:88:35:B8:33:04:CA:18:77:71:90:38
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       517099A758827719FD954FF1986AEFCC369B3D9A
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:43 +0000
ROA not before:           Thu 06 Mar 2025 11:24:43 +0000
ROA not after:            Thu 05 Mar 2026 11:29:43 +0000
asID:                     262401
IP address blocks:        177.36.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:70:99:a7:58:82:77:19:fd:95:4f:f1:98:6a:ef:cc:36:9b:3d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:43 2025 GMT
            Not After : Mar  5 11:29:43 2026 GMT
        Subject: CN=84C167F5ADA51539FA8835B83304CA1877719038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:9c:76:fb:80:51:40:0b:07:70:2f:1d:66:
                    6a:38:37:05:74:86:11:0c:dc:44:6f:cc:4b:ca:4e:
                    fb:c7:e0:f6:66:a8:53:a6:57:5a:7f:49:f6:37:1d:
                    79:54:89:11:1d:d9:85:c6:e6:50:a9:ce:b1:83:1a:
                    9b:78:0d:0d:72:65:43:14:92:d5:6d:29:c9:1b:71:
                    25:f2:d1:98:d4:4a:9a:e6:d0:94:60:df:c6:82:c2:
                    b9:5c:4b:7b:15:c6:96:29:d7:89:12:7e:59:4b:04:
                    6b:ad:39:47:90:a9:2a:e7:90:e7:41:24:50:94:95:
                    ac:ff:47:2f:8d:6b:b9:35:ef:87:a5:24:0d:a6:6a:
                    61:a2:37:ef:bc:16:89:db:e9:28:64:47:b0:b1:e8:
                    e7:a8:2c:8d:c6:a2:4f:84:3a:18:89:9d:23:97:8a:
                    5e:7b:4a:3d:13:1f:d3:c2:71:f6:b7:72:41:28:47:
                    4c:47:ea:48:34:85:5e:45:0b:90:da:72:77:96:d9:
                    d3:55:af:13:08:77:7c:92:ba:d5:48:c3:9a:7c:0f:
                    f4:2e:6a:0b:63:df:c2:d5:bb:52:95:c4:7e:a9:eb:
                    d6:77:dc:49:65:4d:5d:d6:d3:99:df:39:bf:6a:e0:
                    a5:09:dc:2b:6b:68:eb:9a:50:cf:9c:73:f4:8a:ff:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:67:F5:AD:A5:15:39:FA:88:35:B8:33:04:CA:18:77:71:90:38
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32302d3230203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:71:0f:32:4b:82:4a:53:88:93:f6:f7:d7:60:48:2f:be:
         75:30:36:84:c6:df:11:af:5d:5f:9b:23:c2:77:a8:66:15:32:
         dc:86:f1:cd:c4:25:f4:fd:ae:47:6e:a5:55:39:49:68:7d:fc:
         9e:bd:97:8e:59:dc:cc:0e:69:e8:f2:5a:1a:e3:e3:0d:6c:dc:
         69:2a:46:69:f3:5e:50:bc:ec:22:fa:18:82:df:23:e8:53:14:
         7e:dd:5a:1d:77:ee:1f:ab:4b:70:1c:cb:6b:59:64:0b:60:4f:
         ef:fe:e7:8d:34:00:98:4b:c5:2f:eb:93:2e:14:07:b2:e2:21:
         6c:20:ed:08:3c:4e:2b:70:37:3d:92:4f:e6:9a:eb:a7:0a:27:
         41:0a:72:4f:45:7f:b4:72:bd:5a:be:fe:3f:57:66:7b:f8:57:
         ef:09:c5:83:04:64:9d:a0:77:dc:ce:0f:9e:c2:b0:1e:d2:e0:
         ae:64:f6:4d:e6:56:b0:c9:65:3e:30:92:1a:97:6c:45:b7:4d:
         1d:54:36:44:ee:3d:45:c4:1f:09:2d:a3:f9:55:f4:56:65:b0:
         e4:cc:c4:d2:9b:60:26:74:11:f4:22:d8:0c:a7:c6:5a:3d:f1:
         ce:fa:07:77:55:2c:e3:98:0a:19:b4:bb:59:0c:30:c8:68:4b:
         d9:7d:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:34:51 2025 by rpki-client