Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          xMQm+V6YgDocgd/Yi6jakrxJgaRhaqb1Cze009iiDdk=
Subject key identifier:   76:5D:63:FB:81:6A:85:7E:51:CD:C6:52:28:F3:25:F4:70:07:4D:17
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       6229994F3D904101F86B95B954543B982FFBD6A3
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:45 +0000
ROA not before:           Thu 04 Apr 2024 10:42:45 +0000
ROA not after:            Thu 03 Apr 2025 10:47:45 +0000
asID:                     262401
IP address blocks:        177.36.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:29:99:4f:3d:90:41:01:f8:6b:95:b9:54:54:3b:98:2f:fb:d6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:45 2024 GMT
            Not After : Apr  3 10:47:45 2025 GMT
        Subject: CN=765D63FB816A857E51CDC65228F325F470074D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:b2:fb:fb:87:44:e6:6e:86:d1:27:ed:41:
                    72:27:b7:45:3c:ff:06:fb:32:1b:f1:67:30:5d:23:
                    15:df:4a:6c:22:8a:c1:53:1a:06:4f:ce:d5:84:1f:
                    c7:4a:33:b4:fd:b5:4e:f9:b8:6c:9e:80:3c:0c:29:
                    9e:5a:1d:8c:61:63:a8:22:9f:e4:7b:71:35:9d:14:
                    f3:c9:12:b9:d6:20:ef:e2:b1:e3:7d:be:ec:5d:37:
                    3d:5b:9d:59:2e:a7:64:cb:4d:c7:eb:53:23:16:b0:
                    92:f0:fa:a2:23:6e:e3:48:f8:3b:d8:a5:2e:31:36:
                    62:75:9c:a8:6b:1a:cb:1c:ad:f7:97:cc:f3:d3:aa:
                    1d:9c:0a:d0:57:af:33:1d:37:0f:f8:77:84:d4:cd:
                    4f:a9:85:18:19:fb:bd:05:cd:73:79:c8:fc:e1:8f:
                    73:f7:ea:c1:c9:d8:e8:50:93:3e:a5:3b:39:2f:33:
                    10:87:f6:80:50:25:b1:56:f3:ae:f3:f9:14:6d:1a:
                    60:58:14:9f:b2:2d:c5:f4:ef:c5:0f:a2:07:74:b7:
                    f2:e7:13:0b:2f:c3:c7:15:79:39:39:45:7a:f6:39:
                    78:12:7d:a1:af:32:11:82:4e:65:98:3e:e2:28:2f:
                    3f:45:cf:79:0e:d3:39:2f:05:ed:33:08:93:de:62:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5D:63:FB:81:6A:85:7E:51:CD:C6:52:28:F3:25:F4:70:07:4D:17
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3133382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:13:9f:2a:e7:03:f6:f0:5d:ab:30:fa:78:22:d3:40:c5:
         3d:5f:b8:74:b6:dd:00:76:47:64:92:e1:dc:92:6d:ff:c8:70:
         94:94:37:3a:85:68:01:ea:45:98:69:18:37:89:4b:1e:6a:81:
         50:af:b9:87:c7:b1:f0:07:a8:44:e0:70:43:0c:a8:19:e2:de:
         3f:d4:b6:a5:2d:67:f3:cc:41:b8:3c:8d:4a:5a:68:09:54:ec:
         cf:7b:13:14:70:7e:d6:90:b9:3a:35:d3:89:79:e5:fe:26:52:
         99:7c:cc:8a:be:af:38:1d:d1:f9:d9:4a:df:1c:35:33:22:39:
         79:93:90:1e:18:00:4e:b4:10:23:59:f1:1c:35:35:39:ea:a9:
         7d:b4:1f:3c:e4:09:25:0f:ca:b1:92:3a:8f:5a:e5:84:50:57:
         69:5c:22:f1:23:49:6d:e8:d1:31:20:98:19:f3:4f:09:ab:1c:
         41:7e:64:f1:ea:51:91:f2:db:57:7f:ab:a5:6a:85:df:b7:21:
         13:d5:df:d9:d1:61:14:5d:53:fa:f1:bc:86:b8:b5:61:c0:9c:
         25:55:93:78:d1:66:82:c5:30:07:e9:37:a5:c8:9c:7c:ee:cd:
         c0:59:a7:4d:da:ca:9c:10:1c:2b:cc:41:60:e2:8c:b4:1d:f5:
         8d:bc:58:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org