Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          I9aygNyry1xO10RivN4+flXBmN8RbBZzWssU+ChPzBk=
Subject key identifier:   44:A3:FB:A3:70:A0:9D:B6:B5:7F:AC:DA:0A:FF:D0:1A:7C:9C:2C:82
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       4E5219B0A14C62484ACE8C0FE3E0C30C7C883A95
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:46 +0000
ROA not before:           Thu 04 Apr 2024 10:42:46 +0000
ROA not after:            Thu 03 Apr 2025 10:47:46 +0000
asID:                     262401
IP address blocks:        177.36.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:52:19:b0:a1:4c:62:48:4a:ce:8c:0f:e3:e0:c3:0c:7c:88:3a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:46 2024 GMT
            Not After : Apr  3 10:47:46 2025 GMT
        Subject: CN=44A3FBA370A09DB6B57FACDA0AFFD01A7C9C2C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:12:42:5c:e1:5e:b3:f7:85:45:8f:15:11:
                    1f:f4:0e:a2:25:c5:48:dd:98:88:a6:73:c6:16:a0:
                    dc:6b:32:df:0c:b5:aa:25:8c:f0:9a:da:22:59:bb:
                    4d:40:5a:ed:53:11:60:83:fa:9b:8b:a3:f0:7c:78:
                    fc:cf:65:6a:84:cf:90:28:68:d1:b5:2a:f3:10:38:
                    39:b1:46:f2:e7:f7:8e:88:8b:24:d9:e6:1d:be:26:
                    53:02:19:30:49:fd:a6:58:9e:9e:45:0b:ae:d3:aa:
                    18:7e:88:09:5f:8f:00:87:ef:43:a0:1e:57:e6:ce:
                    64:bc:9d:67:76:ef:f7:b0:3d:f4:7a:82:76:d5:ee:
                    ea:99:15:36:08:ec:f5:bc:04:5d:b6:83:f7:db:a7:
                    a9:7d:b7:38:bb:84:d6:57:3a:3c:8b:80:97:0e:c7:
                    c9:e2:c4:d6:47:94:cc:a6:d5:a4:0e:71:90:17:87:
                    87:f1:5a:cf:ff:77:00:82:ef:c4:33:f1:58:c0:04:
                    03:4b:79:33:06:28:23:95:36:77:35:13:c6:b7:fd:
                    23:68:13:1a:e6:f9:42:a9:09:26:57:90:c1:43:fb:
                    d2:3c:93:2b:84:e6:f0:f1:09:fb:19:44:e8:f4:82:
                    55:42:cb:ed:76:d5:a3:ad:2b:27:21:6d:c5:36:fa:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A3:FB:A3:70:A0:9D:B6:B5:7F:AC:DA:0A:FF:D0:1A:7C:9C:2C:82
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:db:47:09:8e:3e:8b:60:ca:87:e2:e9:6b:31:de:20:59:
         3a:7c:96:b7:94:5b:ca:92:69:59:b0:78:30:82:54:d1:87:f1:
         04:30:36:d6:ec:e3:ed:4c:5c:68:56:cf:a0:8c:65:85:2f:20:
         07:45:d1:1f:26:19:7b:c8:58:b7:0a:4b:d8:83:5a:39:35:79:
         2b:b5:f7:77:57:26:1b:1f:d1:95:ff:bf:75:cd:07:24:59:1d:
         73:81:cc:5c:3d:8e:17:05:71:c6:73:32:3f:a9:f8:ee:3f:1f:
         0d:80:7b:d2:aa:e7:89:6d:13:88:0a:79:53:5c:a9:08:68:cb:
         b8:d5:3d:06:6b:b6:f1:1d:c4:a6:85:9e:35:d1:ff:e2:2a:85:
         e5:64:46:d0:ec:88:da:1c:d5:21:c2:a5:60:f7:d1:82:09:15:
         64:94:bd:56:03:54:8c:84:ee:4a:22:92:54:0e:6f:ec:d6:11:
         f5:d4:fb:bf:6c:3c:3d:c9:52:7e:3d:c7:10:c1:7c:88:15:36:
         1e:a9:a8:0c:ec:00:2d:28:15:d6:c4:22:54:a3:e4:4c:39:54:
         1a:d7:20:d8:3e:42:a3:b6:1b:3e:6b:ed:69:7c:f5:86:69:bb:
         b1:82:3d:b3:7c:ef:84:a9:15:24:42:c8:9b:a0:92:d9:14:a6:
         be:f6:c6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org