Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3134382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          cR5uyRKSFhnYNw+W/fVVdn3B4FqrFpdgUTrIC12dQEs=
Subject key identifier:   9A:AE:FC:3B:EF:D0:F3:5D:DB:CC:38:68:0C:AD:DB:6A:82:02:4A:8C
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       55EC51CD99A08714FFE6A850890541DAB4CD07A9
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134382e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:41 +0000
ROA not before:           Thu 06 Mar 2025 11:24:41 +0000
ROA not after:            Thu 05 Mar 2026 11:29:41 +0000
asID:                     262401
IP address blocks:        177.36.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 21:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ec:51:cd:99:a0:87:14:ff:e6:a8:50:89:05:41:da:b4:cd:07:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:41 2025 GMT
            Not After : Mar  5 11:29:41 2026 GMT
        Subject: CN=9AAEFC3BEFD0F35DDBCC38680CADDB6A82024A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:87:3f:dd:4d:d6:43:54:7d:2a:f1:f1:16:
                    6a:84:e1:ab:44:76:99:6d:16:17:0b:5d:ad:40:be:
                    20:3e:71:e0:48:2b:b8:0f:a1:43:ea:88:bd:1f:3a:
                    a2:ae:e0:a5:e8:09:e3:7d:0c:09:e2:58:b6:05:9e:
                    ff:a0:01:38:e6:6a:dd:6e:97:25:00:72:22:4d:40:
                    bf:2a:9a:2f:b0:3d:bd:9b:39:35:64:fb:4b:ad:c7:
                    6a:71:39:96:d5:f0:3f:e3:05:a4:b2:54:69:d4:0a:
                    65:da:8a:34:41:b2:8c:fe:da:20:1d:9f:71:85:66:
                    80:67:6c:23:51:55:1c:e1:3f:47:40:ad:65:d7:a4:
                    35:83:f5:de:05:fa:c7:be:6a:fe:88:ad:ea:a3:da:
                    d0:f0:9e:53:f5:4f:0e:ad:45:99:55:98:54:30:f7:
                    f0:be:47:f8:61:f0:87:4f:6a:0f:3b:22:ce:da:ad:
                    21:3d:74:ea:08:6e:45:c1:ca:73:40:59:6c:b3:d7:
                    cb:66:20:ba:0d:0c:5a:b0:5f:fc:d9:9e:3d:bb:38:
                    91:b7:44:57:8c:de:c6:15:c3:05:14:a3:01:f8:d1:
                    c7:3e:37:ac:d3:fe:6b:82:5c:16:bc:e7:cb:73:b7:
                    9d:73:c3:b8:6c:a9:a7:b7:ec:cf:1d:4c:a9:0a:c5:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:FC:3B:EF:D0:F3:5D:DB:CC:38:68:0C:AD:DB:6A:82:02:4A:8C
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:bf:5d:21:6c:e6:c2:03:46:63:6c:86:9b:ed:16:ca:64:
         52:e0:0d:dd:28:85:ab:83:a9:c0:63:22:4a:0e:d1:ea:9f:8a:
         4c:d5:0e:bf:bc:26:1a:be:24:99:39:9b:03:32:ee:1d:4d:28:
         15:6e:50:0e:39:9d:13:da:e7:dd:79:f9:a3:7d:e2:c2:14:af:
         40:dc:43:a6:07:45:df:b8:39:81:42:6a:bf:3f:bc:f5:c0:4c:
         aa:76:5a:95:47:6a:07:0c:c6:f9:f9:56:73:75:57:fe:1d:c2:
         4d:0e:81:de:9c:fe:61:85:8a:08:da:a9:79:20:fb:02:e7:18:
         f0:dd:80:dc:cf:e1:a0:a2:65:89:df:b9:ab:ef:f1:6a:47:75:
         5e:60:df:96:f9:a4:15:75:cd:72:db:34:61:84:de:b4:b6:5c:
         c4:43:b2:13:6d:66:7a:8f:0c:59:cd:4f:a2:a1:92:97:e9:cc:
         c3:67:98:5c:5f:40:38:26:64:e5:ac:dd:7a:29:b6:aa:9e:08:
         7f:3e:b0:91:5e:b6:fa:18:d4:fe:3a:e6:e8:c6:97:13:f0:7f:
         53:89:44:c6:d8:74:3b:6f:24:8f:02:ff:a9:de:47:55:e5:dd:
         ef:25:01:96:25:5c:9f:43:28:9b:4e:9a:b0:48:8d:8f:91:bf:
         ba:be:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:03 2025 by rpki-client