Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          xZp4mTlwDQvfob6cgYvqwpAmeVzHXNL7BPtGNENen/w=
Subject key identifier:   B0:66:74:A2:84:39:58:6C:13:07:D9:C4:6F:28:29:24:CE:BD:EE:BA
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       51072EFB2191D89489FB42800C44C4B3DD2EE58A
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:47 +0000
ROA not before:           Thu 04 Apr 2024 10:42:47 +0000
ROA not after:            Thu 03 Apr 2025 10:47:47 +0000
asID:                     262401
IP address blocks:        177.36.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:07:2e:fb:21:91:d8:94:89:fb:42:80:0c:44:c4:b3:dd:2e:e5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:47 2024 GMT
            Not After : Apr  3 10:47:47 2025 GMT
        Subject: CN=B06674A28439586C1307D9C46F282924CEBDEEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:1e:53:ad:90:09:3b:bf:a9:cb:4e:02:71:
                    42:12:33:58:91:34:af:f5:2b:58:26:70:e5:b4:84:
                    6e:bc:77:51:87:f1:e9:36:44:47:c5:24:12:56:6f:
                    a2:f3:ef:07:11:98:c1:78:10:89:07:99:99:fc:5f:
                    31:e3:5a:24:ec:96:07:a1:7d:7e:fc:41:e9:09:1b:
                    74:8e:14:0a:30:58:e9:e5:54:f7:c2:0c:e2:68:b2:
                    cb:31:be:a4:53:ad:9d:03:e5:e8:72:3b:db:6e:22:
                    37:3b:ff:03:a2:df:0f:9b:a0:d0:9a:67:f3:c7:ce:
                    4a:ae:87:8c:b5:ac:ad:71:c3:62:0b:eb:2d:9a:bf:
                    09:36:8c:00:ee:00:e5:30:24:9f:57:20:06:39:94:
                    5f:9e:50:cc:d8:44:57:7b:9f:be:0f:d1:c6:fa:a6:
                    42:56:c8:ad:44:0e:f3:05:8e:dc:1a:bd:f2:2c:73:
                    ab:e4:78:3c:d9:0e:ef:49:82:65:27:f4:ae:02:fc:
                    27:51:79:d8:19:f8:c3:1f:fb:db:33:4c:63:88:69:
                    b7:be:61:cb:e7:7c:57:1d:23:03:11:bc:57:83:27:
                    d4:dd:30:6b:f7:45:48:6a:d3:f3:9a:47:21:57:93:
                    4d:58:bc:70:1b:42:62:2d:5f:a4:7e:49:d4:51:9f:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:74:A2:84:39:58:6C:13:07:D9:C4:6F:28:29:24:CE:BD:EE:BA
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135322e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:59:63:31:9a:1a:10:2c:f5:e4:86:30:40:88:ab:1d:d2:78:
         6d:da:04:ce:c2:02:0a:f6:f0:9f:62:58:91:26:51:30:6e:98:
         6c:05:6c:0d:66:84:a6:63:19:be:b4:97:e9:5a:4e:a7:7f:da:
         14:78:1e:28:e2:b3:fd:59:31:60:2b:55:98:db:29:d5:05:d5:
         cf:a8:09:8f:16:99:67:ec:6e:92:9d:e4:1c:e5:95:99:97:a5:
         8d:e5:23:a1:eb:aa:0b:d8:a7:37:c2:09:60:70:c1:8f:29:b5:
         bc:a1:69:16:1c:02:b5:21:d0:28:a5:d1:4c:70:fd:57:f5:ef:
         9f:1c:c4:6e:9c:e6:e7:d3:63:fa:5e:8c:e9:71:a8:d2:0e:ff:
         0a:fe:ad:09:9f:0e:c7:9a:12:f5:e6:5f:2a:a8:c6:85:53:de:
         2a:e1:28:f9:15:5c:d0:8d:52:2f:13:63:22:fd:20:73:94:6e:
         60:cb:8a:3d:f7:2c:d6:00:b0:37:56:01:d5:3b:1e:26:95:0d:
         75:7d:78:b5:03:87:1b:cc:74:a2:ff:ec:ff:5d:00:13:20:9e:
         81:da:39:55:62:bc:c4:67:1b:76:ae:94:0e:1f:b8:10:b2:51:
         56:94:a0:4d:12:75:40:4e:bc:0b:e3:cd:1a:2b:9c:71:60:19:
         db:4b:b9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:28 2024 by rpki-client on console-fra.rpki-client.org