Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          kBEiCRD6RWhaEUC9Eh1lpDCcAjgvWTGc5Vbw4sbc6A8=
Subject key identifier:   B7:27:06:06:D4:04:89:D2:D1:D9:C4:CC:8C:67:19:10:78:84:52:49
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       1139D92BC39885E1FA5B775F8352DDBA4A13C30F
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:42 +0000
ROA not before:           Thu 06 Mar 2025 11:24:42 +0000
ROA not after:            Thu 05 Mar 2026 11:29:42 +0000
asID:                     262401
IP address blocks:        177.36.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:d9:2b:c3:98:85:e1:fa:5b:77:5f:83:52:dd:ba:4a:13:c3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:42 2025 GMT
            Not After : Mar  5 11:29:42 2026 GMT
        Subject: CN=B7270606D40489D2D1D9C4CC8C67191078845249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:42:3b:92:49:eb:0e:9c:22:93:f5:4f:b7:
                    35:b8:d6:43:ae:da:af:b5:0c:6d:47:98:f3:06:ad:
                    44:74:03:ce:ed:71:bd:b8:33:e6:a9:0e:46:9e:82:
                    df:32:0a:72:2f:93:41:11:0a:49:f9:a3:7c:ab:24:
                    ab:61:18:51:a1:7f:85:94:7c:75:49:69:36:0e:af:
                    42:20:3e:68:6e:a7:f9:a4:fe:d1:68:50:e0:b5:4a:
                    f2:4c:35:39:b5:ce:9f:7e:1e:aa:1f:a4:4e:52:4c:
                    20:ac:bc:3f:2c:cb:dc:7a:9d:ad:4d:81:63:15:89:
                    5a:ec:bc:08:94:b6:2c:48:6a:00:aa:f9:55:11:c8:
                    99:c4:b3:e0:3a:29:7b:5f:4f:49:e6:be:e2:64:ff:
                    9d:17:16:8b:04:e4:32:42:ef:97:c9:82:55:06:f9:
                    64:49:a0:ac:b5:77:d3:11:01:0a:c0:0b:60:13:71:
                    7a:9c:b2:d0:8b:fd:e0:2b:0b:28:13:e4:8c:7c:c1:
                    8a:c3:58:53:64:80:51:e7:30:d8:57:24:8d:0b:f0:
                    e4:8b:d8:d6:84:b6:51:67:ab:12:8f:3f:cd:d7:68:
                    fd:42:ae:23:5d:3c:99:51:3b:10:46:07:7d:03:8d:
                    b9:f7:13:b9:14:85:00:95:82:17:7e:27:c2:f6:ca:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:27:06:06:D4:04:89:D2:D1:D9:C4:CC:8C:67:19:10:78:84:52:49
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:e8:49:ca:1d:f5:92:23:67:8a:34:85:11:6f:97:de:81:
         93:ec:46:e9:ad:f3:9c:04:66:f1:65:f1:5f:8f:67:2a:e6:76:
         8a:74:31:c4:35:79:21:4c:f6:a7:b2:8d:50:bd:90:83:e6:9d:
         a8:39:31:6e:73:f9:4c:06:6a:b6:73:dd:fc:11:63:44:4b:45:
         84:a0:a1:8e:cb:35:71:a0:16:ba:44:a3:a4:63:2e:9a:03:ef:
         ec:c7:7a:a9:f1:d0:25:da:49:77:2f:c0:80:ff:c3:14:ad:ba:
         6c:d8:22:11:5c:df:11:a4:be:38:14:b7:6b:b3:89:1a:12:8a:
         e2:e8:a8:79:75:84:2b:c8:be:c2:72:37:cc:45:40:e6:f8:35:
         c6:13:4f:56:be:76:82:7b:71:ed:5a:a2:91:56:6a:e8:a0:26:
         13:cb:b2:87:ea:43:19:98:40:9c:45:e9:93:b0:af:ad:77:2e:
         a6:cb:e4:2e:54:be:45:5a:be:fb:70:21:66:9e:2e:7a:76:eb:
         48:ce:74:a8:2b:ed:32:e3:59:f3:65:d1:c9:52:3e:29:06:93:
         df:93:5b:6a:e1:a1:4b:5e:a5:09:df:83:b5:d7:c8:a9:c5:e6:
         78:99:f4:7f:f8:6d:96:07:0e:39:c7:9d:68:f0:95:cb:6b:2a:
         b8:8a:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:28:21 2025 by rpki-client