Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          gJokMMvTDGM1Xef3XNwVoIF8fM8g76w7G5M3njYdfyo=
Subject key identifier:   E0:34:8E:1D:F4:B3:1E:49:B8:E3:3C:16:92:57:25:18:29:41:58:62
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       3A05B8706ADADF96B78DDE91D2D4EC41D7D93E46
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:51 +0000
ROA not before:           Thu 06 Mar 2025 11:24:51 +0000
ROA not after:            Thu 05 Mar 2026 11:29:51 +0000
asID:                     262401
IP address blocks:        177.36.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 21:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:05:b8:70:6a:da:df:96:b7:8d:de:91:d2:d4:ec:41:d7:d9:3e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:51 2025 GMT
            Not After : Mar  5 11:29:51 2026 GMT
        Subject: CN=E0348E1DF4B31E49B8E33C169257251829415862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:44:d1:8e:f3:2b:57:48:05:00:e2:36:62:
                    8c:f5:18:b7:ab:11:2a:76:4d:9a:31:b8:ba:b9:c8:
                    55:0d:fb:81:e1:b2:a4:b1:9f:a2:c4:e3:c2:f2:cd:
                    cb:2d:86:f4:1c:38:2b:b2:aa:57:b6:17:dd:ba:a8:
                    b4:bd:5b:70:35:ec:2c:42:aa:0a:02:16:e1:4b:a1:
                    42:95:01:48:d3:c1:78:6a:ff:f7:4a:0a:cf:49:60:
                    84:5f:bf:c2:0a:fa:c7:33:ec:19:c7:dd:ae:f9:f0:
                    e4:4e:15:34:8c:32:f0:de:09:77:bf:3e:48:57:e7:
                    2e:0e:97:27:2a:35:9c:81:cd:d9:28:52:58:99:93:
                    ed:c6:db:25:bd:08:ec:89:2a:4e:08:47:f0:81:c8:
                    0e:d1:be:3f:d1:81:50:12:76:0c:d3:d4:24:c5:ba:
                    e1:fa:e5:b9:69:79:c8:84:22:23:74:47:46:24:80:
                    7a:7a:16:b6:81:3b:d6:04:47:2b:57:d0:02:6a:8f:
                    bc:c5:7a:87:61:9b:4a:27:07:9c:f4:24:ac:b3:fc:
                    b6:60:3c:bd:f7:b0:d0:d7:15:55:09:1d:2d:0f:bb:
                    02:bb:4f:69:c2:6d:ca:4d:d9:17:65:5c:d8:13:24:
                    35:a9:39:49:9c:e2:8b:9a:c5:31:65:98:13:56:e1:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:8E:1D:F4:B3:1E:49:B8:E3:3C:16:92:57:25:18:29:41:58:62
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135302e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:b3:93:1f:14:ef:48:b5:b2:01:fb:3e:6d:ce:d5:d8:7a:
         3a:88:90:57:ad:52:95:27:ab:03:21:89:22:39:ce:48:1f:d1:
         56:58:29:10:54:27:68:d6:87:f8:a3:c5:bb:e3:b1:14:a3:38:
         01:b9:d3:30:40:d7:a6:f3:68:b0:f4:1b:c7:fa:09:db:51:cb:
         b8:17:a6:48:dc:e4:95:f8:a6:a6:26:3d:aa:3c:70:68:7e:bb:
         e7:a8:8e:45:4f:6c:96:7a:ce:7e:70:5d:f2:ac:8c:80:04:11:
         e9:0b:6c:53:c7:a4:36:fa:be:1a:2f:ff:aa:88:5b:df:bf:b6:
         2f:63:39:80:53:d9:e8:82:b7:a0:14:a4:35:de:eb:f6:f8:27:
         69:0b:ea:93:8b:d9:da:1a:de:b9:98:a7:1d:6a:46:2f:50:8c:
         b2:8a:a2:8c:10:77:b6:ef:e4:75:f2:07:ba:4a:eb:b3:39:33:
         e6:9c:ea:9f:15:51:25:4b:6e:0e:f6:0d:f0:71:8b:f0:a0:44:
         3d:97:fc:49:c9:ee:da:cb:b9:ed:88:b1:a3:16:e1:0c:a1:b8:
         21:1e:56:68:06:ae:76:a0:3b:d2:2e:e5:c2:1d:6c:7e:08:7d:
         07:ef:0d:99:5f:50:20:ba:87:a2:a8:ed:1f:ee:87:34:85:86:
         c3:2a:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:58 2025 by rpki-client