Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134392e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3134392e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          q5U9eNsowsVL0KMhB0OQtS1vAutSv4jp9ptfgcgfySA=
Subject key identifier:   41:DD:4E:AB:4C:23:D5:8A:5F:73:BE:92:B4:3D:CA:F7:F9:1F:3B:ED
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       77760E78AAE2F3487D94D01F29F0C05D11808C2A
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134392e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:49 +0000
ROA not before:           Thu 06 Mar 2025 11:24:49 +0000
ROA not after:            Thu 05 Mar 2026 11:29:49 +0000
asID:                     262401
IP address blocks:        177.36.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:0e:78:aa:e2:f3:48:7d:94:d0:1f:29:f0:c0:5d:11:80:8c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:49 2025 GMT
            Not After : Mar  5 11:29:49 2026 GMT
        Subject: CN=41DD4EAB4C23D58A5F73BE92B43DCAF7F91F3BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:08:02:ef:1b:35:a3:42:f4:e3:b2:2d:b1:
                    1d:47:66:75:15:d1:0d:69:ae:a4:71:d1:54:61:8d:
                    f7:52:42:e1:94:e2:7f:8d:1f:df:e8:d7:bb:99:d1:
                    69:d0:69:c0:72:53:23:9f:a5:45:08:23:23:97:2c:
                    ef:79:7e:b1:52:f2:68:93:34:80:c5:ba:d8:9b:2b:
                    e5:3b:61:aa:cb:1e:fc:5a:f0:90:4f:6c:b0:9a:5d:
                    09:11:70:4a:cb:cc:7a:26:a9:21:83:d3:7b:79:f4:
                    58:22:b9:73:eb:1f:59:3a:16:e5:28:34:3e:72:86:
                    a2:70:7b:e0:ff:55:a3:d3:89:a3:1e:a9:f0:bc:b0:
                    fd:0c:c7:d5:17:bb:a1:cb:c8:fb:84:16:37:b1:7c:
                    5b:b3:b1:82:e2:9d:6d:c8:37:ad:a4:ae:d3:fd:ec:
                    f6:bf:ca:ee:c6:d6:e8:e5:ee:86:ab:be:3b:93:e0:
                    30:30:6b:0b:b9:9d:0d:28:e8:d8:eb:d0:53:9b:1d:
                    5f:8f:e4:bc:14:5b:72:bc:3f:03:3d:d6:df:4f:b3:
                    24:fc:7f:aa:9e:07:ef:c3:e3:76:7e:49:84:eb:ad:
                    de:0c:e4:02:22:49:d8:66:f4:79:71:a9:81:4a:d5:
                    72:95:53:6a:48:45:bf:b5:8a:05:da:35:91:d2:fd:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DD:4E:AB:4C:23:D5:8A:5F:73:BE:92:B4:3D:CA:F7:F9:1F:3B:ED
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3134392e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:d9:9f:38:f8:86:02:97:e0:a8:e6:2c:9c:32:54:b7:8b:
         a4:d4:59:e9:fb:c6:a1:69:3b:cd:a0:84:18:5c:db:43:ae:3d:
         3b:e4:01:81:d2:80:6b:8b:8f:5c:52:63:6a:36:6f:97:bc:dc:
         73:13:be:25:33:e9:48:b9:a6:31:17:7d:c9:8b:8a:f9:14:da:
         9e:e6:27:29:2e:fa:70:fb:31:b7:ff:ce:8e:1e:49:dc:c0:bd:
         c3:4d:00:dd:6e:f8:41:7d:cd:62:b9:17:d8:40:a2:e6:3d:3d:
         32:db:67:56:2a:68:0c:d6:f8:3c:65:a6:07:5e:ec:58:97:0b:
         49:3b:ea:68:5b:64:20:1d:4c:33:5f:3c:27:2e:b9:37:55:32:
         28:9a:af:b1:bd:01:a2:7c:69:31:d7:38:35:ea:32:c0:be:db:
         89:88:a6:ab:2d:61:53:42:1b:e3:2b:c4:ec:aa:e2:18:26:c4:
         91:2c:46:3f:93:cf:52:6d:63:3d:0c:58:ce:27:a7:ec:22:12:
         13:90:3a:00:58:f1:34:6f:05:4f:a5:c3:ab:a0:07:ba:7b:1b:
         1a:37:bc:b6:d5:a6:23:04:ff:c2:72:36:db:94:35:39:c6:93:
         27:20:de:0a:1f:c3:ea:ee:36:8e:df:c3:a3:6c:96:00:1d:6c:
         17:40:5d:47
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd3YOeKri80h9lNAfKfDAXRGAjCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDNEI0NjUwMzIwNzQ4MUE1RTI5Q0U4RTQ1MEU4M0M5
MTdCMkYyMjAeFw0yNTAzMDYxMTI0NDlaFw0yNjAzMDUxMTI5NDlaMDMxMTAvBgNV
BAMTKDQxREQ0RUFCNEMyM0Q1OEE1RjczQkU5MkI0M0RDQUY3RjkxRjNCRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOQgC7xs1o0L047ItsR1HZnUV
0Q1prqRx0VRhjfdSQuGU4n+NH9/o17uZ0WnQacByUyOfpUUIIyOXLO95frFS8miT
NIDFutibK+U7YarLHvxa8JBPbLCaXQkRcErLzHomqSGD03t59FgiuXPrH1k6FuUo
ND5yhqJwe+D/VaPTiaMeqfC8sP0Mx9UXu6HLyPuEFjexfFuzsYLinW3IN62krtP9
7Pa/yu7G1ujl7oarvjuT4DAwawu5nQ0o6Njr0FObHV+P5LwUW3K8PwM91t9PsyT8
f6qeB+/D43Z+SYTrrd4M5AIiSdhm9HlxqYFK1XKVU2pIRb+1igXaNZHS/YdvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQd1Oq0wj1Ypfc76StD3K9/kfO+0wHwYDVR0j
BBgwFoAUBMS0ZQMgdIGl4pzo5FDoPJF7LyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMS8wNEM0QjQ2NTAzMjA3NDgxQTVFMjlDRThFNDUwRTgzQzkxN0IyRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QzRCNDY1MDMyMDc0ODFB
NUUyOUNFOEU0NTBFODNDOTE3QjJGMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzEv
MzEzNzM3MmUzMzM2MmUzMTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJUwDQYJKoZIhvcNAQELBQADggEBAF/32Z84
+IYCl+Co5iycMlS3i6TUWen7xqFpO82ghBhc20OuPTvkAYHSgGuLj1xSY2o2b5e8
3HMTviUz6Ui5pjEXfcmLivkU2p7mJyku+nD7Mbf/zo4eSdzAvcNNAN1u+EF9zWK5
F9hAouY9PTLbZ1YqaAzW+Dxlpgde7FiXC0k76mhbZCAdTDNfPCcuuTdVMiiar7G9
AaJ8aTHXODXqMsC+24mIpqstYVNCG+MrxOyq4hgmxJEsRj+Tz1JtYz0MWM4np+wi
EhOQOgBY8TRvBU+lw6ugB7p7Gxo3vLbVpiME/8JyNtuUNTnGkycg3gofw+ruNo7f
w6NslgAdbBdAXUc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:56 2025 by rpki-client