Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          WG85zMxqu28x2BZOgxVELgViNfsi/rjJpe2wrRdSZbY=
Subject key identifier:   89:E1:23:DC:00:36:F1:34:50:6A:02:A9:FC:63:43:34:AC:DE:73:D2
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       5796D6BAA60ADC1FA9B4E95F2847C3491C312924
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:47 +0000
ROA not before:           Thu 04 Apr 2024 10:42:47 +0000
ROA not after:            Thu 03 Apr 2025 10:47:47 +0000
asID:                     262401
IP address blocks:        177.36.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:96:d6:ba:a6:0a:dc:1f:a9:b4:e9:5f:28:47:c3:49:1c:31:29:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:47 2024 GMT
            Not After : Apr  3 10:47:47 2025 GMT
        Subject: CN=89E123DC0036F134506A02A9FC634334ACDE73D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:a4:cb:ed:6d:1f:7e:43:04:b9:89:b4:c7:
                    a8:ca:09:5f:f2:c9:5c:d6:85:a3:ab:16:25:53:a9:
                    b4:08:21:7d:73:ef:f0:1c:7b:88:aa:ac:76:74:fe:
                    1e:34:19:84:03:f4:18:0a:31:e5:7e:38:16:71:6e:
                    48:bf:22:8a:27:ad:8b:a4:53:62:4b:0a:98:3d:07:
                    83:d5:95:3f:28:e3:b0:d2:76:69:f2:88:c7:fd:8f:
                    c6:e8:83:d2:6c:90:5c:58:8a:63:38:99:46:c9:8c:
                    e7:83:c5:5d:a3:f3:c8:98:0a:72:55:2a:14:8b:b0:
                    85:90:9a:c0:e4:c4:77:f5:60:08:ae:1d:e6:22:14:
                    a2:00:29:cb:8a:b1:00:8c:f9:52:06:36:1e:c6:0e:
                    49:b0:44:de:25:50:8c:8e:14:d5:56:64:1e:55:f0:
                    5e:49:6b:af:85:5b:16:d9:9e:fa:80:97:b9:58:73:
                    dd:dd:93:cf:0d:7f:b7:0b:7b:27:1f:5b:a6:c6:54:
                    b7:b5:b4:99:e1:81:fc:91:86:09:bb:06:9f:b8:da:
                    70:c2:67:67:be:f6:f0:17:bf:99:76:1c:31:81:10:
                    76:71:7e:1e:6f:7d:c3:6f:3d:ae:e6:1f:f9:77:16:
                    35:2c:c4:ab:8d:6b:74:86:91:d6:90:60:a1:ff:10:
                    22:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E1:23:DC:00:36:F1:34:50:6A:02:A9:FC:63:43:34:AC:DE:73:D2
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135332e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:23:90:a0:e3:99:63:d0:96:6e:3e:d4:76:4b:2f:a0:91:d3:
         b5:6c:f7:cb:37:75:bd:78:92:36:bb:3e:93:c7:c2:c9:3d:22:
         aa:ab:56:3d:95:a6:41:c1:29:b3:3f:d0:55:39:a9:55:eb:07:
         2e:40:23:a5:5b:ef:c9:ee:48:be:d7:d8:49:37:67:78:4b:ed:
         67:48:b9:15:c7:03:f9:78:f2:a7:80:df:bf:e2:7b:d1:8c:85:
         cf:e5:e9:32:8b:fc:da:26:c7:66:5b:de:af:08:f4:ad:5d:39:
         bb:75:90:fd:c3:a3:28:17:30:85:44:51:e9:a6:ed:a1:71:a5:
         d6:7b:12:f4:c7:84:ba:fb:98:4c:e5:11:29:54:92:15:77:13:
         93:00:c8:f1:25:74:43:c8:9a:82:c3:e5:8e:a7:03:56:b2:a3:
         6d:cf:28:3e:c1:ba:05:d2:ff:9e:4c:68:08:fb:2e:ea:ba:42:
         3c:50:89:36:dc:ca:27:f8:9c:d2:29:7a:15:68:70:89:9d:59:
         00:ab:3d:41:bc:14:97:6d:5c:9f:bb:b3:be:65:1c:e6:68:98:
         5f:c9:67:83:f3:ae:b8:e9:6e:4a:fd:71:fe:d3:5c:7d:08:a5:
         05:41:4c:09:8d:71:e7:38:4e:52:b0:87:53:4f:28:b0:18:ac:
         02:00:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:05 2024 by rpki-client on console-fra.rpki-client.org