Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          c4BhAOzGrOYOUnWsURDsh9Arf2bzmcyOJNWp0bta5UE=
Subject key identifier:   6B:24:67:D8:A7:A5:EF:71:88:E2:C5:86:B6:A1:26:33:DE:41:D7:2F
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       2858C7DDA64575E009DC0BD47B979AC387437C51
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:40 +0000
ROA not before:           Thu 04 Apr 2024 10:42:40 +0000
ROA not after:            Thu 03 Apr 2025 10:47:40 +0000
asID:                     262401
IP address blocks:        177.36.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:58:c7:dd:a6:45:75:e0:09:dc:0b:d4:7b:97:9a:c3:87:43:7c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:40 2024 GMT
            Not After : Apr  3 10:47:40 2025 GMT
        Subject: CN=6B2467D8A7A5EF7188E2C586B6A12633DE41D72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:74:20:d1:25:cf:1a:c1:eb:46:4a:ed:56:
                    3d:b6:1a:a7:91:30:80:c8:15:14:81:28:ff:42:1d:
                    8f:f5:af:b0:2d:db:61:d2:c3:af:cf:2d:b2:06:91:
                    f8:cf:9a:e2:ba:61:4b:92:1d:53:a0:0f:2c:17:f6:
                    11:95:71:1d:60:8c:52:5c:56:dc:96:3e:3c:f4:f0:
                    06:b5:87:94:ff:db:db:98:30:bc:b0:09:8f:7b:5b:
                    23:46:3c:ef:c0:99:cf:64:2e:46:d4:78:10:b9:f2:
                    dc:54:51:9f:e6:2a:76:7f:96:b0:e1:58:9b:d1:32:
                    1c:dd:93:2a:ba:3d:90:05:c9:0b:cc:d8:76:a4:73:
                    95:9d:cd:c9:e7:5f:c5:d7:53:fa:cd:e7:7a:82:49:
                    94:92:6a:dd:52:64:b3:de:17:8a:da:be:86:76:65:
                    e6:fe:0c:d2:7b:00:b6:55:e4:a3:72:38:e1:71:f0:
                    20:aa:8c:de:ef:de:d5:ea:75:1a:51:51:b0:03:0e:
                    97:8a:12:ba:d0:c8:22:42:dd:16:3a:59:06:20:2f:
                    6f:61:12:91:13:08:4b:d4:d9:6c:71:25:60:25:24:
                    6f:26:45:e5:41:00:68:15:20:b7:cb:ee:1c:77:10:
                    e4:dc:ae:16:b1:5b:bd:28:ec:3a:82:da:14:0d:ea:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:67:D8:A7:A5:EF:71:88:E2:C5:86:B6:A1:26:33:DE:41:D7:2F
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3132382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:42:61:75:49:b6:25:5d:5a:7c:2c:32:9d:e3:ed:0e:f4:
         bc:97:4e:ea:b6:a0:48:6c:0e:bb:45:fc:f9:63:20:3d:b8:e9:
         e9:d3:8b:d6:8d:26:e9:ff:60:e0:d1:5e:32:2e:d0:de:e5:aa:
         83:01:53:53:b9:43:92:4b:76:75:11:f6:8e:fa:f3:60:96:4e:
         75:c1:91:52:44:84:6a:03:c3:f9:5a:20:e1:b7:d0:9b:73:3c:
         1a:f2:83:96:3a:97:ba:5d:51:ea:80:13:24:0e:90:52:ac:04:
         dc:60:39:4b:15:3d:ae:ac:ed:68:69:36:45:dd:d6:ae:d2:eb:
         f8:13:c3:0b:74:d5:78:4b:a6:ad:e6:eb:30:97:9c:23:be:27:
         20:15:04:fe:18:bf:9e:21:75:dc:9c:1b:d7:2d:3e:e0:43:2a:
         c0:2b:52:ca:3c:a9:c6:86:04:75:73:2c:16:1a:f2:21:4d:2b:
         f8:ab:12:20:c6:82:46:6f:8b:97:eb:eb:c9:51:a0:0b:96:23:
         8c:1b:23:6e:04:c7:8c:02:8c:1f:31:ac:22:65:95:d6:08:5d:
         fb:f2:dc:03:8e:ad:f1:d6:e7:b3:32:75:71:2e:c2:f9:62:4d:
         54:69:aa:9d:ad:5d:f2:94:e9:bb:1e:ca:12:6c:46:15:8b:95:
         34:a9:1c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org