Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
File:                     3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa (raw, json)
Hash identifier:          2N+0UUKw2WP4zC9jIWFLD3pc5qDKXQzOcEnZVInvRCE=
Subject key identifier:   C4:EE:98:74:C6:CD:F3:BB:E5:CC:E4:26:F5:54:ED:DA:44:B4:84:4C
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       39E54C90080F99BFE9B7E737D6A1262CD7B73F98
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:51 +0000
ROA not before:           Thu 04 Apr 2024 10:42:51 +0000
ROA not after:            Thu 03 Apr 2025 10:47:51 +0000
asID:                     262401
IP address blocks:        177.36.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:4c:90:08:0f:99:bf:e9:b7:e7:37:d6:a1:26:2c:d7:b7:3f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:51 2024 GMT
            Not After : Apr  3 10:47:51 2025 GMT
        Subject: CN=C4EE9874C6CDF3BBE5CCE426F554EDDA44B4844C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:9e:42:d9:2d:8b:03:ed:e3:2d:5e:97:03:
                    a9:e9:96:2f:f2:51:f4:19:cf:2e:c8:e0:30:b5:bc:
                    a6:b1:9c:cd:fb:15:29:fd:aa:bb:23:47:f0:93:89:
                    e5:85:28:45:54:df:cc:09:94:f2:3b:26:a4:08:39:
                    30:59:08:06:e3:7b:24:70:cf:50:24:fc:b4:ec:3b:
                    79:81:9c:8a:d9:b0:7c:f2:52:2f:c0:56:a0:91:b0:
                    e5:d2:bd:cb:ca:72:08:e2:09:ea:8a:78:6b:d6:d7:
                    3e:81:73:cf:7e:1a:65:d1:f3:a8:76:f7:07:72:cf:
                    1c:83:bd:f2:1e:cf:ab:5e:fd:f0:74:f4:25:30:13:
                    18:f7:a1:76:bb:29:8e:4a:59:93:47:f3:32:c7:22:
                    98:f1:14:75:42:34:c2:16:fb:91:32:fb:b2:1e:61:
                    56:9f:88:08:93:f5:fd:25:26:ef:d2:96:f1:16:64:
                    83:3a:b0:73:b2:f7:da:94:d9:bc:a0:39:0c:93:9f:
                    81:28:f7:5b:b5:4b:d8:65:d8:35:e9:fc:be:cf:44:
                    25:7b:ed:3c:05:84:3b:87:56:1f:80:b0:de:1a:94:
                    c6:9f:3a:77:55:af:6a:a2:42:47:b4:4f:81:f2:cb:
                    82:6e:30:55:bf:6f:68:aa:29:33:9d:12:46:9d:6e:
                    3e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:98:74:C6:CD:F3:BB:E5:CC:E4:26:F5:54:ED:DA:44:B4:84:4C
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32302d3230203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:9c:0a:9d:0f:17:21:a6:f4:bf:73:d9:8f:b0:fb:e5:39:
         a5:84:b6:bc:11:79:4f:38:60:e9:b1:c0:19:23:9e:72:5b:0a:
         52:b8:39:e8:ab:d3:09:70:1e:fd:eb:0c:83:47:bb:0c:c3:f6:
         fd:cc:69:f2:2e:28:b9:98:ba:ca:7e:36:1f:fa:b7:3d:9d:a4:
         91:31:28:3c:c3:f2:0b:98:40:7b:50:ca:60:32:a7:a7:91:6d:
         59:7a:bc:a7:a1:34:0f:d2:00:ce:6d:75:82:fe:7b:1f:62:d4:
         51:59:ab:95:66:08:2e:e4:1b:ad:06:80:6e:c4:d6:1c:27:be:
         d9:76:17:50:3d:0b:38:0d:94:8b:e8:7a:f6:66:bf:6c:07:c7:
         a4:e1:df:5e:ef:0a:00:ca:13:df:dc:68:fb:1f:0d:ff:98:ad:
         54:af:54:19:f8:6d:9e:82:0c:7e:18:1e:ae:3f:0a:fb:5f:da:
         5e:14:2b:b6:86:51:26:60:bb:83:12:e2:93:d8:07:e6:c2:46:
         4b:fb:93:72:9c:67:6b:7a:56:75:c5:e1:81:ed:5a:2f:f1:8c:
         80:4f:93:f8:98:73:dc:f5:7a:d4:f1:3e:1c:a4:0f:76:79:4d:
         14:2f:ab:a0:b7:8c:2d:48:0e:ec:af:14:13:bf:a0:18:af:d5:
         f4:83:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org