Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134352e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3134352e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          RXh/20xomuJVuRGVOwcENvdNyhJnV1ebJ23m+D6j5O8=
Subject key identifier:   A4:F4:81:59:CE:2C:6F:FA:47:EB:31:BD:6F:0A:6E:00:E0:19:2D:30
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       3B1371371169C7C145B61562330A92E8BC3EB4D9
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134352e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:42 +0000
ROA not before:           Thu 06 Mar 2025 11:24:42 +0000
ROA not after:            Thu 05 Mar 2026 11:29:42 +0000
asID:                     262401
IP address blocks:        177.36.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:13:71:37:11:69:c7:c1:45:b6:15:62:33:0a:92:e8:bc:3e:b4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:42 2025 GMT
            Not After : Mar  5 11:29:42 2026 GMT
        Subject: CN=A4F48159CE2C6FFA47EB31BD6F0A6E00E0192D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:4b:7f:b9:e2:37:aa:fd:d7:4b:85:65:93:
                    a1:47:c9:32:ab:0f:fd:c7:9b:47:9f:c7:1a:6b:d4:
                    46:4d:a4:a5:a9:c2:d5:cb:ad:aa:72:e9:73:bc:cc:
                    b7:06:f9:bc:28:b2:02:98:ce:47:20:95:a5:c5:ae:
                    03:a4:68:a0:8c:26:42:79:2f:2d:ca:36:49:1e:76:
                    7b:21:66:ea:62:4d:a3:a4:54:ed:6b:a2:ec:16:8c:
                    72:b7:36:a2:96:87:66:81:d8:5e:0e:b5:bd:7d:e8:
                    82:ab:9f:2a:87:02:66:56:a6:49:89:fc:0a:6d:e8:
                    3b:e0:df:a9:50:b8:94:fc:ad:4f:4a:12:fb:82:06:
                    0a:c0:71:25:43:86:fa:03:37:b8:ef:6c:98:03:f4:
                    52:66:26:00:d5:2d:07:a2:34:ff:95:fd:0e:32:2d:
                    1a:35:34:3b:0d:63:74:34:e4:e2:07:87:43:a4:92:
                    08:c6:8f:d3:06:da:b9:aa:b0:22:62:80:0e:c2:11:
                    49:d7:55:ca:d3:2f:66:37:f8:b2:d8:fb:b7:d6:ff:
                    ec:e2:6b:55:77:59:56:27:52:98:77:ab:5c:02:69:
                    41:d2:db:05:a8:ec:36:01:f5:db:e0:72:7c:17:45:
                    39:28:11:a4:23:00:37:88:bf:18:f9:92:70:bd:db:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F4:81:59:CE:2C:6F:FA:47:EB:31:BD:6F:0A:6E:00:E0:19:2D:30
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134352e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:e2:2e:08:cc:08:6f:c6:03:82:ae:0d:d4:c3:f4:12:56:
         0a:f2:ed:e0:bf:50:fb:db:cc:24:af:c6:47:85:95:5d:0f:b8:
         82:15:53:11:fc:73:c5:00:0d:fd:8d:cf:e2:d0:68:37:f7:b0:
         30:b7:88:74:ab:f3:1a:e6:70:c9:bc:57:a3:84:93:74:09:57:
         15:8d:54:c3:ab:1f:6e:8b:6d:5f:9d:16:fe:81:81:26:58:d0:
         ae:dd:22:bd:09:94:6a:4e:05:79:17:f7:78:63:f9:17:23:25:
         c7:63:12:77:8d:4c:d3:4b:2f:41:36:56:f6:dc:95:07:a8:58:
         b6:3d:ce:86:a9:fd:4c:e0:98:88:be:3b:48:a2:fd:24:19:1f:
         95:db:c3:76:23:84:37:9c:66:3b:09:c6:9b:9a:f0:3a:ad:a9:
         dd:1d:af:a9:99:23:02:ea:82:ec:f7:17:e5:8a:9c:71:9e:75:
         82:6a:9c:c4:9a:04:94:c2:a3:06:ae:35:1f:83:4c:77:74:b8:
         e0:c0:8c:e9:8c:79:c2:72:85:af:94:11:57:be:26:5e:f0:d1:
         c7:a1:1f:7d:cf:f4:0b:58:32:b4:c8:6e:0d:9d:d0:90:4c:fe:
         a2:9d:ff:af:74:21:da:8b:0f:42:d0:7e:c3:b3:8c:4f:6f:48:
         4c:c1:c1:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOxNxNxFpx8FFthViMwqS6Lw+tNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDNEI0NjUwMzIwNzQ4MUE1RTI5Q0U4RTQ1MEU4M0M5
MTdCMkYyMjAeFw0yNTAzMDYxMTI0NDJaFw0yNjAzMDUxMTI5NDJaMDMxMTAvBgNV
BAMTKEE0RjQ4MTU5Q0UyQzZGRkE0N0VCMzFCRDZGMEE2RTAwRTAxOTJEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ7Ut/ueI3qv3XS4Vlk6FHyTKr
D/3Hm0efxxpr1EZNpKWpwtXLrapy6XO8zLcG+bwosgKYzkcglaXFrgOkaKCMJkJ5
Ly3KNkkednshZupiTaOkVO1rouwWjHK3NqKWh2aB2F4Otb196IKrnyqHAmZWpkmJ
/Apt6Dvg36lQuJT8rU9KEvuCBgrAcSVDhvoDN7jvbJgD9FJmJgDVLQeiNP+V/Q4y
LRo1NDsNY3Q05OIHh0OkkgjGj9MG2rmqsCJigA7CEUnXVcrTL2Y3+LLY+7fW/+zi
a1V3WVYnUph3q1wCaUHS2wWo7DYB9dvgcnwXRTkoEaQjADeIvxj5knC920l9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpPSBWc4sb/pH6zG9bwpuAOAZLTAwHwYDVR0j
BBgwFoAUBMS0ZQMgdIGl4pzo5FDoPJF7LyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMS8wNEM0QjQ2NTAzMjA3NDgxQTVFMjlDRThFNDUwRTgzQzkxN0IyRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QzRCNDY1MDMyMDc0ODFB
NUUyOUNFOEU0NTBFODNDOTE3QjJGMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzEv
MzEzNzM3MmUzMzM2MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJEwDQYJKoZIhvcNAQELBQADggEBAJ/+4i4I
zAhvxgOCrg3Uw/QSVgry7eC/UPvbzCSvxkeFlV0PuIIVUxH8c8UADf2Nz+LQaDf3
sDC3iHSr8xrmcMm8V6OEk3QJVxWNVMOrH26LbV+dFv6BgSZY0K7dIr0JlGpOBXkX
93hj+RcjJcdjEneNTNNLL0E2VvbclQeoWLY9zoap/UzgmIi+O0ii/SQZH5Xbw3Yj
hDecZjsJxpua8Dqtqd0dr6mZIwLqguz3F+WKnHGedYJqnMSaBJTCowauNR+DTHd0
uODAjOmMecJyha+UEVe+Jl7w0cehH33P9AtYMrTIbg2d0JBM/qKd/690IdqLD0LQ
fsOzjE9vSEzBwQE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:56 2025 by rpki-client