Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3134342e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          NVTsKoyOk1rCDspNiSxjiLSekRWweK+qB2UQ2XUWJPQ=
Subject key identifier:   8B:1F:8D:77:2B:B8:D9:C7:60:97:9C:DA:87:FE:17:F8:85:20:1F:3B
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       737AD0EBB81BDF4D1FDC79A36755A912AC18480F
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:40 +0000
ROA not before:           Thu 04 Apr 2024 10:42:40 +0000
ROA not after:            Thu 03 Apr 2025 10:47:40 +0000
asID:                     262401
IP address blocks:        177.36.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:d0:eb:b8:1b:df:4d:1f:dc:79:a3:67:55:a9:12:ac:18:48:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:40 2024 GMT
            Not After : Apr  3 10:47:40 2025 GMT
        Subject: CN=8B1F8D772BB8D9C760979CDA87FE17F885201F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:da:28:37:61:2e:a9:08:98:ee:e7:85:84:
                    ec:56:00:e6:4d:80:0b:e8:72:35:38:fd:43:9c:3b:
                    38:68:23:72:b0:6d:e7:b5:fd:4e:37:f6:c0:1f:71:
                    de:6c:1b:dd:c1:7a:05:58:bb:7b:65:2b:fb:ea:e8:
                    21:ac:be:5c:28:4f:4b:48:df:2e:a4:6a:17:02:fd:
                    b4:3e:5e:a1:6f:c2:95:fc:d5:8a:5c:c2:78:62:79:
                    fc:4e:3f:ae:22:ef:22:d8:f1:9d:3b:c4:39:bf:8b:
                    d8:c4:41:88:ac:8c:2f:40:cc:71:ef:7f:be:7b:65:
                    36:f2:d5:81:a7:ef:78:d4:3a:e1:7f:39:46:71:15:
                    f0:0f:15:26:5c:e0:1e:38:67:a2:50:74:e5:f1:d4:
                    8a:d2:71:36:b7:74:22:3c:b2:e9:32:65:98:f1:f5:
                    23:05:39:b6:63:ad:b7:90:0f:ed:d4:5a:89:3e:e5:
                    d6:02:72:54:7b:72:3e:c0:dc:ae:56:15:8f:2d:ae:
                    bc:6c:62:4b:9d:6f:52:70:5a:3b:33:38:31:cd:23:
                    be:93:71:34:b2:9a:b3:b3:2c:7b:b1:15:7f:16:48:
                    99:90:a9:03:81:2b:d8:f0:2b:fe:0f:05:12:4a:4b:
                    2e:c8:7d:83:33:32:8f:b6:ad:be:fa:94:d0:e6:2e:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1F:8D:77:2B:B8:D9:C7:60:97:9C:DA:87:FE:17:F8:85:20:1F:3B
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134342e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:da:86:f9:9f:7e:db:08:5f:46:8d:e5:55:d1:e9:c5:c7:ed:
         be:af:2d:3d:01:83:34:27:ba:9b:44:75:2f:cc:a6:ce:1b:8e:
         30:9d:4d:64:0f:1f:e0:29:a7:cf:36:95:c8:95:a5:84:c4:19:
         47:86:c6:f5:72:0b:e5:ec:f8:b9:13:4b:a0:14:4a:71:c3:5b:
         e9:3b:e9:4e:7b:be:4a:62:6d:3d:b6:15:e2:d5:16:36:40:38:
         20:8e:33:ff:ee:9e:64:c2:68:3e:f7:97:ad:a0:e7:c9:48:05:
         52:98:f8:a4:ca:96:e2:89:7b:6e:7a:a4:14:73:39:19:ed:57:
         ff:b8:95:de:b5:ca:bc:e9:70:1f:2b:83:a9:33:8c:da:1c:18:
         03:e3:06:87:8c:92:24:65:67:54:72:aa:a5:94:16:0c:e1:db:
         53:33:59:4f:eb:9d:cd:66:ef:86:d5:be:9f:73:15:79:46:19:
         90:32:7b:08:c4:e5:33:d5:11:38:8f:88:d2:89:46:27:01:36:
         d8:51:f5:fe:c4:c5:98:e2:d9:55:ac:8b:8a:e2:56:43:ee:48:
         6d:43:86:a2:54:1d:83:f9:37:16:e0:8a:fc:09:90:ab:1c:e9:
         cc:89:e3:5f:c1:12:71:8a:83:74:c9:a4:ce:fd:5d:1a:76:ce:
         13:97:85:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc3rQ67gb300f3HmjZ1WpEqwYSA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDNEI0NjUwMzIwNzQ4MUE1RTI5Q0U4RTQ1MEU4M0M5
MTdCMkYyMjAeFw0yNDA0MDQxMDQyNDBaFw0yNTA0MDMxMDQ3NDBaMDMxMTAvBgNV
BAMTKDhCMUY4RDc3MkJCOEQ5Qzc2MDk3OUNEQTg3RkUxN0Y4ODUyMDFGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YNooN2EuqQiY7ueFhOxWAOZN
gAvocjU4/UOcOzhoI3Kwbee1/U439sAfcd5sG93BegVYu3tlK/vq6CGsvlwoT0tI
3y6kahcC/bQ+XqFvwpX81YpcwnhiefxOP64i7yLY8Z07xDm/i9jEQYisjC9AzHHv
f757ZTby1YGn73jUOuF/OUZxFfAPFSZc4B44Z6JQdOXx1IrScTa3dCI8sukyZZjx
9SMFObZjrbeQD+3UWok+5dYCclR7cj7A3K5WFY8trrxsYkudb1JwWjszODHNI76T
cTSymrOzLHuxFX8WSJmQqQOBK9jwK/4PBRJKSy7IfYMzMo+2rb76lNDmLplDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUix+Ndyu42cdgl5zah/4X+IUgHzswHwYDVR0j
BBgwFoAUBMS0ZQMgdIGl4pzo5FDoPJF7LyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMS8wNEM0QjQ2NTAzMjA3NDgxQTVFMjlDRThFNDUwRTgzQzkxN0IyRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QzRCNDY1MDMyMDc0ODFB
NUUyOUNFOEU0NTBFODNDOTE3QjJGMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzEv
MzEzNzM3MmUzMzM2MmUzMTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJAwDQYJKoZIhvcNAQELBQADggEBADjahvmf
ftsIX0aN5VXR6cXH7b6vLT0BgzQnuptEdS/Mps4bjjCdTWQPH+App882lciVpYTE
GUeGxvVyC+Xs+LkTS6AUSnHDW+k76U57vkpibT22FeLVFjZAOCCOM//unmTCaD73
l62g58lIBVKY+KTKluKJe256pBRzORntV/+4ld61yrzpcB8rg6kzjNocGAPjBoeM
kiRlZ1RyqqWUFgzh21MzWU/rnc1m74bVvp9zFXlGGZAyewjE5TPVETiPiNKJRicB
NthR9f7ExZji2VWsi4riVkPuSG1DhqJUHYP5NxbgivwJkKsc6cyJ41/BEnGKg3TJ
pM79XRp2zhOXhcE=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:10:57 2024 by rpki-client on console-fra.rpki-client.org