Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135342e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135342e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          YSzoCmUIbXpgAz6xXLrTS1HakS4MIutTxyHFaOuenng=
Subject key identifier:   7D:C0:31:79:88:81:5D:0D:86:38:9E:B9:1E:72:6A:66:1B:B3:50:C0
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       2AE6BFF20BBAB252C75231DE018EBB60FE432C27
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135342e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:42 +0000
ROA not before:           Thu 06 Mar 2025 11:24:42 +0000
ROA not after:            Thu 05 Mar 2026 11:29:42 +0000
asID:                     262401
IP address blocks:        177.36.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e6:bf:f2:0b:ba:b2:52:c7:52:31:de:01:8e:bb:60:fe:43:2c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:42 2025 GMT
            Not After : Mar  5 11:29:42 2026 GMT
        Subject: CN=7DC0317988815D0D86389EB91E726A661BB350C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:af:c0:66:a5:0f:78:24:0a:7f:69:50:af:7c:
                    df:d3:58:76:be:80:db:4a:3a:ec:f6:31:10:ec:96:
                    83:eb:8b:d0:76:d3:3c:e8:c5:b2:93:90:50:e8:d0:
                    db:92:35:0f:af:be:2b:ef:1a:2d:70:5a:69:e2:cb:
                    8a:0b:f4:8e:d0:31:27:ce:9a:85:28:53:e0:62:cb:
                    27:19:39:1c:e1:d4:de:a6:8c:15:00:d5:40:b8:90:
                    53:d5:9a:d8:8d:85:47:b8:ae:04:76:66:c7:a1:27:
                    49:b7:da:51:dc:57:3e:9a:f0:2a:82:2f:85:3d:64:
                    b3:02:9b:be:5d:16:47:1d:dc:40:bf:b6:3b:44:5c:
                    cf:bf:ca:a0:f6:50:fe:7f:0c:d8:d1:25:51:6c:99:
                    40:8c:a8:7c:b6:6c:19:10:1d:7f:19:8b:5f:1d:5e:
                    21:57:40:53:be:f1:dd:2c:da:4a:50:cc:f8:98:c6:
                    e9:4a:53:f9:0d:0c:06:db:18:ad:17:b8:e4:5a:1e:
                    ec:84:3c:be:54:fe:7c:98:f8:f6:02:31:d3:70:69:
                    78:5e:f1:4a:e6:b5:6d:1d:79:97:83:61:78:1c:58:
                    40:9d:ad:7a:24:70:02:3b:46:86:2b:0b:94:e2:51:
                    68:0c:0e:be:20:83:6c:a8:b7:0f:8d:b6:1a:20:65:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C0:31:79:88:81:5D:0D:86:38:9E:B9:1E:72:6A:66:1B:B3:50:C0
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135342e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:b9:9f:b9:11:16:81:de:d2:5c:14:fa:95:87:6a:92:a5:2d:
         d6:b2:b4:95:ff:7b:55:a1:de:c0:f5:1d:43:a2:66:d7:c1:1c:
         76:c8:64:6c:27:4b:22:35:b7:d4:7e:22:cb:66:db:80:d1:a4:
         c5:ef:e5:31:b6:93:21:9e:f0:2d:d8:da:62:d5:b7:cf:21:be:
         73:d4:ed:56:02:60:36:cc:64:a9:52:48:fe:ac:2f:ae:28:43:
         c5:5e:e1:a1:a2:31:4e:6d:9d:cf:4c:66:ff:44:b7:66:39:de:
         57:98:5d:1d:13:5a:57:e8:16:8c:c4:88:8b:27:c6:ed:3e:da:
         cb:6c:2d:12:75:1c:a3:11:6e:18:73:6b:fd:fb:19:64:3a:a0:
         66:b7:61:bf:cd:c6:12:0e:be:9f:3f:87:ca:5e:43:06:e3:db:
         f1:37:1f:06:9b:36:fb:f8:3e:3c:51:b2:6c:fd:10:37:9b:78:
         e0:13:4a:9a:73:68:f0:7a:86:8f:c0:d5:98:ae:2d:b7:09:64:
         a7:33:d1:8a:b1:8d:18:8e:fa:7d:50:39:55:06:24:33:38:b5:
         72:77:e6:75:ce:90:8d:4c:08:3f:2d:cb:6b:94:e3:b6:96:2c:
         5b:74:46:c2:58:16:57:7b:4c:79:83:f1:d4:5c:48:6d:ab:e6:
         1f:d9:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:46:28 2025 by rpki-client