Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133302e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133302e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          mxKvHJBYYcWm4+hc938F5Epcgyd1QvYXhxTNhkDZT54=
Subject key identifier:   8D:CE:C5:99:79:5B:B8:D1:BE:40:A7:F2:73:3A:CF:C9:85:8C:B7:E7
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       0AE8727BB45F4AC51C5A919919EB5FDAFD6C576C
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133302e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:50 +0000
ROA not before:           Thu 04 Apr 2024 10:42:50 +0000
ROA not after:            Thu 03 Apr 2025 10:47:50 +0000
asID:                     262401
IP address blocks:        177.36.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e8:72:7b:b4:5f:4a:c5:1c:5a:91:99:19:eb:5f:da:fd:6c:57:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:50 2024 GMT
            Not After : Apr  3 10:47:50 2025 GMT
        Subject: CN=8DCEC599795BB8D1BE40A7F2733ACFC9858CB7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:a8:90:e2:8f:19:95:a4:e7:39:df:07:cc:
                    86:07:fb:9e:6d:ff:ea:6a:88:72:03:6b:55:8d:2c:
                    2a:1d:63:2d:40:b9:62:93:28:ae:69:c7:b4:d9:fb:
                    13:d4:19:8d:75:96:51:42:f1:6a:d8:97:14:64:be:
                    11:a3:9c:a1:fe:bb:91:62:23:0b:af:c5:d8:06:e2:
                    79:4b:a6:2d:84:c3:85:c5:91:db:71:59:8d:20:25:
                    85:98:eb:ba:37:2b:6f:29:64:8f:e4:3b:31:c5:6c:
                    be:d6:cf:74:bf:f7:71:24:ba:71:cf:4b:57:c1:8f:
                    f3:f7:5a:9c:b8:28:74:0d:b4:33:1c:cb:d2:4a:49:
                    6c:3c:19:b9:3f:f1:9f:ca:68:71:6c:9e:ef:90:45:
                    27:14:f2:32:37:e9:92:ef:01:84:8f:72:54:c6:f7:
                    63:cc:eb:47:01:d8:f7:0c:71:61:10:e5:c0:5f:e6:
                    ab:4f:43:bd:1a:d3:61:1a:68:1b:4a:f9:b3:d4:3a:
                    4a:1b:93:9b:9b:83:66:f2:5f:2d:b2:b0:41:72:8f:
                    fa:a7:6c:95:22:a4:55:9b:ee:24:51:b1:ec:99:8f:
                    f1:cf:3c:db:ab:43:09:b3:67:e2:1b:f8:fa:6f:45:
                    f3:20:9e:db:de:53:c9:bf:04:cc:ad:53:f6:d9:4f:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CE:C5:99:79:5B:B8:D1:BE:40:A7:F2:73:3A:CF:C9:85:8C:B7:E7
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133302e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:34:89:56:63:0f:11:48:b0:ee:1d:9b:4f:7a:f5:4c:31:98:
         af:43:3a:0e:0f:23:32:22:8c:7f:bf:af:9a:78:4e:2e:fe:67:
         d4:22:76:5e:6c:ac:55:03:77:19:65:f0:9d:aa:fe:9b:c0:96:
         42:af:f1:b6:10:7f:b2:f0:75:39:39:69:a9:71:7f:87:af:d9:
         f4:d1:d1:8e:a4:85:49:25:44:36:73:dc:8c:35:c6:c2:95:b6:
         be:b8:de:ef:0d:d1:8b:d0:34:8f:49:9b:87:2c:7d:64:6f:f8:
         a8:9b:42:3e:f8:39:6c:44:42:63:e7:90:2e:49:7c:3d:67:e1:
         d6:bd:b1:83:ef:56:93:a3:b8:0b:1e:18:3d:74:b5:67:4f:40:
         27:d3:c7:ed:e5:7e:a9:01:8e:b1:0f:2d:f7:9d:ec:cb:35:a5:
         34:13:c7:bb:5c:19:cc:a7:e9:83:39:64:06:55:72:f0:6a:f0:
         84:20:0f:d7:33:6d:46:16:ea:6c:f1:35:1f:52:74:93:6a:78:
         a8:8c:f3:19:92:c8:7d:cc:37:65:45:6b:1d:3b:5b:d9:8b:cc:
         fa:0a:23:e1:a0:b3:00:05:06:cf:4a:7d:0f:c3:25:cc:99:9c:
         64:db:60:72:04:2f:ab:d3:57:92:66:f2:88:44:86:0e:ab:b5:
         71:52:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:47 2024 by rpki-client on console-ams.rpki-client.org