Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133362e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          BzRnGYuy11hWY4pyq1yMXzb9N2Ie7ogsfRBwO6CU4Cc=
Subject key identifier:   AB:0A:69:D1:EF:1A:BD:C7:07:3B:9A:1C:29:0E:B2:B5:54:AE:C9:2A
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       3C6CF6702A7E42EB731EDD291055AF866142B036
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:47 +0000
ROA not before:           Thu 04 Apr 2024 10:42:47 +0000
ROA not after:            Thu 03 Apr 2025 10:47:47 +0000
asID:                     262401
IP address blocks:        177.36.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:f6:70:2a:7e:42:eb:73:1e:dd:29:10:55:af:86:61:42:b0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:47 2024 GMT
            Not After : Apr  3 10:47:47 2025 GMT
        Subject: CN=AB0A69D1EF1ABDC7073B9A1C290EB2B554AEC92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:ff:12:4d:57:f3:ee:04:01:0b:17:68:ab:
                    86:93:29:87:1e:88:3a:87:94:99:f4:80:ee:7e:8e:
                    72:e8:38:a3:1a:45:5b:cd:eb:89:c3:73:d2:1f:2c:
                    4a:a4:fb:e0:b1:e4:68:5f:cc:c1:6d:b5:e0:13:6e:
                    a8:de:0f:91:fe:7e:e9:14:17:e2:34:a0:bd:56:db:
                    30:f0:87:7e:0e:dd:81:fd:a4:bf:fb:7f:47:64:90:
                    83:26:85:a2:19:21:e0:3d:99:77:9e:bf:a9:76:57:
                    25:df:8a:3e:20:76:97:40:d3:4f:6f:0e:3f:50:b3:
                    5f:aa:0f:1b:e2:69:19:03:70:ac:15:7e:4f:cd:0a:
                    b6:97:e2:5b:00:c7:f8:fc:80:19:13:06:e2:ef:20:
                    cc:6f:73:6c:28:52:0e:83:05:59:37:67:c3:1f:fb:
                    4d:d2:66:5e:1e:87:53:0a:18:dc:f4:ac:d3:31:25:
                    fc:f8:12:76:87:60:70:b3:7c:c6:a3:81:00:c0:98:
                    c4:f2:02:50:61:6d:3d:bb:c8:7c:38:ed:21:7d:21:
                    63:8d:53:ba:cd:0e:04:35:62:e9:d1:33:98:a8:78:
                    2a:37:7e:03:35:7d:4a:42:af:94:ff:55:e5:ea:2a:
                    b6:cf:9f:0e:0b:40:81:bc:1e:f6:69:3e:fc:23:25:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0A:69:D1:EF:1A:BD:C7:07:3B:9A:1C:29:0E:B2:B5:54:AE:C9:2A
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133362e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:36:16:d0:5b:89:ea:f0:f9:dd:35:c4:c7:2d:93:ce:9d:8a:
         37:86:47:81:99:79:6c:30:19:f9:99:81:22:a6:db:e3:2f:64:
         9c:4c:28:7e:32:cb:77:ed:c3:fd:c7:3a:19:f6:42:c6:d9:d1:
         82:c7:3e:53:2d:f3:1d:b0:b3:f8:b7:48:ef:aa:00:03:d7:a3:
         4c:39:e6:44:43:6c:16:a6:cf:56:d4:ab:49:20:1f:33:b5:06:
         ea:0a:14:ba:db:af:d5:50:32:52:27:53:72:ce:49:77:23:83:
         28:2d:43:9b:47:bd:46:59:d1:ec:88:aa:d0:bb:6e:c8:40:c5:
         80:d7:ce:77:0b:43:cd:9e:83:fe:4a:9c:86:2b:60:88:62:a0:
         1f:c8:36:89:06:ac:21:e7:bc:f2:d4:83:38:0f:58:c6:0a:b3:
         81:ea:e6:89:18:fd:48:e6:d2:11:c5:13:03:e7:36:84:15:27:
         a7:14:4f:f7:91:83:b0:c9:88:fb:40:53:aa:e7:ce:9b:9a:6a:
         be:67:b9:e7:c3:a8:4f:d6:4f:b0:b8:b2:eb:ca:22:9b:d0:37:
         9d:2f:f2:65:ab:57:a9:7e:24:59:b4:03:bf:3c:c1:79:6b:c3:
         3c:ff:e7:af:70:29:45:45:da:64:c8:51:92:52:52:01:e5:4f:
         8f:ac:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org