Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          ue+pL4r2HAEbbE0xkKjKtrgYI/VkIVp9uj2VaD8N2LU=
Subject key identifier:   E7:0F:00:09:55:C3:BA:D7:47:45:B6:EB:9A:A8:76:C0:FF:A4:DB:CA
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       4BDB4BFF3FF44307B65DB4CC9D34C6C2019B310B
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:41 +0000
ROA not before:           Thu 04 Apr 2024 10:42:41 +0000
ROA not after:            Thu 03 Apr 2025 10:47:41 +0000
asID:                     262401
IP address blocks:        177.36.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:4b:ff:3f:f4:43:07:b6:5d:b4:cc:9d:34:c6:c2:01:9b:31:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:41 2024 GMT
            Not After : Apr  3 10:47:41 2025 GMT
        Subject: CN=E70F000955C3BAD74745B6EB9AA876C0FFA4DBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:e1:73:db:54:d6:e2:e1:04:d1:19:99:89:
                    5d:8d:94:a4:53:fb:a9:0a:c6:19:3b:72:68:de:dc:
                    a4:17:48:e9:61:95:76:92:33:55:79:d0:79:21:2b:
                    48:a3:07:2c:98:98:7a:2a:76:1c:46:1a:7b:e0:0b:
                    b6:60:f3:8c:6c:b8:de:dd:ac:94:1d:9d:8d:82:de:
                    e3:06:fd:a1:b7:10:b7:1b:c5:86:ae:75:10:27:bf:
                    d5:17:e4:a1:b1:eb:b6:91:9a:f9:ad:ad:50:41:cf:
                    44:4d:00:eb:84:be:a9:5f:38:0c:f4:4b:c7:6a:9f:
                    80:03:07:07:f7:35:3a:83:5b:5b:ed:67:5e:14:99:
                    84:0e:93:a9:86:73:c2:dd:d8:59:5f:fd:50:c1:4b:
                    7b:fc:4c:40:4b:3b:8a:4d:43:85:48:d1:ea:3b:a5:
                    ba:cd:43:f6:70:7d:52:3e:b5:c4:32:a7:4b:89:c6:
                    36:d0:c8:a7:90:62:aa:bc:2c:ac:33:4c:73:68:bc:
                    55:60:43:22:5e:73:5a:1b:51:7a:b3:f8:73:72:33:
                    b5:cd:3b:06:d1:53:5c:99:b1:a5:ab:92:c6:bf:bd:
                    9b:8a:7c:1f:b4:1c:c8:48:c4:66:41:05:ed:34:e6:
                    35:97:65:9b:ab:89:fb:66:3a:de:fd:41:6d:96:7d:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0F:00:09:55:C3:BA:D7:47:45:B6:EB:9A:A8:76:C0:FF:A4:DB:CA
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133352e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:5f:87:c8:82:da:04:78:9a:d8:96:2b:56:73:4c:6f:a8:
         31:8a:cb:05:e5:03:8c:5a:43:63:1c:f0:82:6a:d5:f1:85:66:
         01:d7:c5:5c:2c:e4:b1:92:2f:79:b1:51:2a:f6:c4:d3:22:b1:
         66:54:e6:bf:32:ce:4f:17:c8:68:bf:3a:b0:10:02:ba:f7:fd:
         06:29:85:17:df:f4:1c:9d:b0:e5:b3:a8:8f:4b:f0:c8:2d:a0:
         7e:04:1e:aa:f9:6b:89:17:7c:2b:86:52:ed:f4:d4:41:3a:21:
         ff:31:db:03:47:d3:d6:8b:af:e2:61:f1:d7:7b:69:b7:1a:79:
         5a:89:d7:c7:2c:5c:1a:87:f1:8f:f2:2b:83:5f:8d:a3:f2:0c:
         eb:11:9d:12:2d:9d:71:33:a9:01:90:9d:ef:06:eb:e3:6b:62:
         27:1c:1a:c1:eb:fc:38:71:d3:78:02:7a:7f:05:e8:0f:47:2b:
         55:cd:3d:c6:0f:67:46:59:30:70:1f:54:d6:51:d3:c1:d3:a1:
         a1:b2:be:4c:73:98:a1:33:21:3c:2f:9e:10:c8:3b:7a:40:ba:
         3e:35:d9:3d:d5:6b:de:f2:e5:a1:5b:72:2c:28:b8:cc:7f:3d:
         85:75:09:ec:9e:71:59:81:b2:0d:58:eb:ae:51:63:17:ad:8c:
         90:40:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org