Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          Lcr38spVes4dm5evaVYgyQMlq6GV7M8GKO+QFfYeBGs=
Subject key identifier:   44:1B:91:FE:6B:27:77:A4:5D:C2:BC:04:CF:F6:C6:06:59:41:A0:30
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       6765D37CA75705F5FE80151C5F89A551769BDEEC
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:48 +0000
ROA not before:           Thu 04 Apr 2024 10:42:48 +0000
ROA not after:            Thu 03 Apr 2025 10:47:48 +0000
asID:                     262401
IP address blocks:        177.36.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:d3:7c:a7:57:05:f5:fe:80:15:1c:5f:89:a5:51:76:9b:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:48 2024 GMT
            Not After : Apr  3 10:47:48 2025 GMT
        Subject: CN=441B91FE6B2777A45DC2BC04CFF6C6065941A030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:8a:a8:94:c4:bd:93:33:6b:9e:1c:14:83:
                    94:ca:c4:f8:24:c0:c8:3a:36:e0:68:39:f1:98:1d:
                    7c:71:4b:16:34:40:ce:7f:94:ee:77:47:9a:43:b0:
                    3b:62:24:1c:de:af:25:0c:32:4f:b4:e7:23:be:1e:
                    6e:5d:57:37:61:67:b6:d0:f0:80:e9:7f:fe:75:1a:
                    1d:17:8a:a1:a4:f8:5c:9f:5f:ab:4e:29:67:4d:c4:
                    35:b0:a5:df:91:f8:ed:dc:af:96:b3:68:a4:ab:a1:
                    73:32:32:b0:ce:54:30:a6:f4:36:91:17:7f:81:f8:
                    98:08:09:9e:b3:cc:d0:cc:dd:cf:04:26:44:84:05:
                    a3:26:d2:6e:83:5e:48:56:8b:5d:d9:5f:b1:7d:ef:
                    28:22:7a:c3:f5:33:93:51:16:a1:ad:d9:39:b7:c9:
                    3b:ba:1c:e5:e1:db:ab:af:64:c9:2f:b2:04:58:47:
                    a2:fa:8f:e3:13:07:14:c1:4f:ac:b2:eb:fd:15:a9:
                    b2:45:3e:77:b5:ae:20:d4:5f:fb:de:f9:00:97:e5:
                    3a:a0:2e:a1:3f:4f:6e:ab:71:c3:bf:2a:cc:29:07:
                    f9:31:88:d5:34:0a:f6:17:db:79:9b:01:17:8e:73:
                    cc:0d:a5:b3:65:80:d4:fd:ea:67:fe:71:34:cf:e9:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1B:91:FE:6B:27:77:A4:5D:C2:BC:04:CF:F6:C6:06:59:41:A0:30
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:49:ce:e8:5f:94:46:d8:13:02:3d:bd:1e:b1:1b:21:3f:99:
         9c:01:49:fd:6b:91:29:25:06:1f:61:a7:32:e0:3d:a4:65:2f:
         15:bf:1e:21:63:fb:a5:13:18:08:be:61:fc:61:67:e4:c0:61:
         c1:49:94:3d:c4:2f:09:93:9b:1f:f1:dc:20:f7:94:f2:70:72:
         ec:55:67:a9:a8:c7:fa:1a:ed:09:3d:00:dc:6c:ba:24:da:ab:
         79:f2:0d:d7:78:cf:bd:5b:9d:64:8f:7d:ff:1f:85:64:27:de:
         e6:fb:80:4c:2b:d4:cb:85:06:b2:c8:55:4f:61:af:50:84:87:
         b9:fa:8a:16:53:72:3c:88:96:53:3b:91:62:3a:2b:18:0f:d5:
         45:32:11:f2:3b:9e:84:fc:0d:7e:1e:a6:a4:a1:70:71:26:91:
         f3:25:2c:c7:7a:6c:6c:a6:d9:54:09:f8:39:73:2f:fe:76:14:
         c6:60:00:24:f8:e7:8e:9d:e8:c8:46:bf:9b:11:43:b5:6f:6d:
         e1:2c:be:11:ef:4a:69:b8:1d:0f:b5:73:6c:66:35:10:a5:7e:
         4c:7a:42:a1:24:e8:48:be:84:74:09:68:32:a8:d8:7d:d8:10:
         ee:95:92:57:d4:07:fa:1a:3d:66:58:c1:bf:82:15:06:c3:52:
         f6:0c:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org