Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          sE4yqwl63tzpPq1xvop6Mm22v+5cYf+//q+y1tCFIqQ=
Subject key identifier:   65:DD:13:FB:33:CF:90:6A:36:73:C0:9C:B5:27:39:A2:33:0A:FE:1C
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       38E44250B7F1D507519A3C04BF1E434B2006C813
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:46 +0000
ROA not before:           Thu 04 Apr 2024 10:42:46 +0000
ROA not after:            Thu 03 Apr 2025 10:47:46 +0000
asID:                     262401
IP address blocks:        177.36.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e4:42:50:b7:f1:d5:07:51:9a:3c:04:bf:1e:43:4b:20:06:c8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:46 2024 GMT
            Not After : Apr  3 10:47:46 2025 GMT
        Subject: CN=65DD13FB33CF906A3673C09CB52739A2330AFE1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:20:a8:fb:90:36:75:4a:4f:0f:48:f9:b7:
                    26:aa:b8:d3:ba:68:8a:95:4a:c7:24:17:eb:49:6b:
                    f3:f2:f0:f6:cc:7c:93:05:9f:6f:3d:a9:6e:c8:33:
                    ff:57:0d:d9:d0:1f:9f:9a:d8:f1:4c:f8:dd:b9:22:
                    dc:f7:d4:4e:36:e4:5e:63:13:46:26:6f:92:00:63:
                    3e:c2:b5:df:c6:63:62:a0:5a:e2:a7:d0:a3:77:7e:
                    1d:38:be:56:a7:94:c6:14:9d:0f:f6:04:e0:4b:6c:
                    8e:e1:b9:3b:7a:e7:1d:3c:99:9d:1f:99:79:a0:6b:
                    ca:9a:29:f7:25:a5:8e:f3:67:71:27:b2:9f:1b:99:
                    ef:09:ad:54:c6:45:35:a0:84:3f:e3:9d:29:76:39:
                    8b:3e:03:40:b6:bb:0b:09:72:8a:42:ee:46:df:5f:
                    40:ab:78:9b:6f:5e:c7:a2:15:4c:b8:5e:bc:d3:7a:
                    76:94:4a:26:79:02:0d:fb:4d:fa:d7:c6:b1:2d:e0:
                    e7:4f:87:42:44:50:ec:f8:21:75:70:a9:73:60:96:
                    64:e0:52:d6:5e:3a:49:55:25:ff:f7:c3:f0:60:d5:
                    96:6c:af:56:13:3c:d0:74:0a:70:6c:19:31:fa:8b:
                    f0:d5:6c:d9:7a:e9:78:81:44:1f:8a:5c:3e:2e:4b:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:13:FB:33:CF:90:6A:36:73:C0:9C:B5:27:39:A2:33:0A:FE:1C
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134382e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:02:af:81:db:0f:a6:1a:77:5a:20:18:45:90:82:a0:c6:
         a2:f4:7c:69:05:84:f1:9f:9a:45:73:49:58:c9:5f:90:fb:cd:
         4d:a9:9b:c3:bb:d3:f7:cf:5b:06:75:00:52:da:9b:44:40:74:
         34:d4:62:ff:a5:46:8d:76:dc:7e:c4:63:dd:17:df:bd:8f:1a:
         da:13:f1:8c:8d:f3:4f:88:bd:db:7e:6b:7e:b3:b5:da:5e:f1:
         8b:c5:18:7f:a4:d1:0f:3a:42:95:09:35:94:c8:4f:d5:6f:d5:
         a5:13:73:92:01:a1:62:09:38:63:ac:7f:be:5d:6c:94:65:47:
         20:70:0e:58:50:5c:18:c6:ce:b8:c2:4f:2e:44:be:2a:9e:99:
         84:db:23:8d:1f:af:40:92:b5:66:b3:d5:3a:92:ac:3e:44:32:
         89:97:d2:ca:8d:4b:14:75:0f:f2:a7:17:87:94:79:e3:cd:79:
         cb:33:9f:e1:8d:f4:80:a6:a1:2c:82:f5:c0:c8:e6:16:3f:78:
         b6:59:3f:0b:0d:cf:d4:80:a2:3d:13:5b:4c:14:77:1e:74:db:
         c4:c9:0e:6b:9b:74:5a:78:db:c3:ab:e0:21:56:66:64:a7:46:
         f5:59:8a:29:f8:8b:26:77:f9:87:e2:95:fc:28:db:95:92:5c:
         28:3a:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:28 2024 by rpki-client on console-fra.rpki-client.org