Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          EhvCCeZV7hOIJ3Vf9ezkPR9gEh8o+xsCoDY3hoxJfEU=
Subject key identifier:   13:F6:97:65:72:5A:1B:36:12:A7:26:C0:54:7E:B5:67:45:FD:01:68
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       456FC5116C515828CFD1CA0DC0B43056D9B107C3
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:42 +0000
ROA not before:           Thu 04 Apr 2024 10:42:42 +0000
ROA not after:            Thu 03 Apr 2025 10:47:42 +0000
asID:                     262401
IP address blocks:        177.36.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6f:c5:11:6c:51:58:28:cf:d1:ca:0d:c0:b4:30:56:d9:b1:07:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:42 2024 GMT
            Not After : Apr  3 10:47:42 2025 GMT
        Subject: CN=13F69765725A1B3612A726C0547EB56745FD0168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:1f:2d:5e:17:0f:15:8d:60:19:71:fd:e2:
                    07:9f:5b:60:a0:16:2d:a4:e0:22:24:bf:54:3d:5d:
                    f0:71:7a:8e:c4:61:bd:eb:6d:de:2c:72:09:43:57:
                    84:a1:14:e7:72:eb:37:3b:0a:81:03:64:33:df:ed:
                    1b:cd:aa:ac:10:7f:c5:bb:06:f6:49:87:d3:f7:58:
                    62:e7:87:ba:f7:51:7b:58:f5:72:49:2f:92:29:5e:
                    36:a4:bf:df:6c:76:bf:49:d4:5a:d4:b1:5c:e3:1d:
                    51:40:8f:3a:26:c8:e2:52:3e:7e:72:f4:1f:c1:18:
                    e4:36:f1:06:ff:f9:e3:26:0d:1c:53:ad:c6:f6:55:
                    1c:18:eb:13:6e:54:92:6e:ff:26:83:b7:3b:ea:1c:
                    cb:cc:df:6d:f9:53:93:96:92:9d:bd:c4:88:35:16:
                    27:cd:68:83:b1:2c:5f:b5:a2:0f:8d:78:fe:1c:49:
                    37:fc:bb:e0:d6:9d:60:44:3b:2c:cb:f9:e3:7c:4e:
                    ea:c5:21:db:de:8c:9d:c3:8a:06:39:c3:44:d2:e6:
                    ee:9a:25:1e:5c:cb:89:ea:7f:48:3f:5a:c0:84:3e:
                    76:e7:54:9d:90:be:61:63:b9:89:99:99:67:ad:91:
                    6c:74:49:fc:ff:6e:33:90:6f:8c:17:37:b3:0c:60:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:97:65:72:5A:1B:36:12:A7:26:C0:54:7E:B5:67:45:FD:01:68
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135352e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3e:44:e8:81:b7:80:2a:a6:c8:7d:0b:c5:07:7a:1e:89:7a:
         70:4d:88:8c:ca:30:5d:b4:b8:82:98:2a:c6:4d:1a:c6:50:0e:
         3e:fa:97:21:b2:45:55:7d:79:e1:5a:f7:b7:c9:cf:d2:4e:a2:
         22:ea:b0:f3:55:f0:3e:7d:de:eb:92:30:00:fb:0e:cf:83:92:
         72:ab:80:fc:39:da:53:56:a1:48:b9:01:9e:6a:63:4c:b1:f7:
         74:e0:84:b0:47:3c:fc:4c:c0:75:67:0d:0a:eb:9e:5c:ad:74:
         ab:d8:a0:f2:44:38:14:95:31:e9:92:fd:53:47:b9:a1:24:f0:
         07:7c:78:a8:43:c0:8b:3c:90:2c:46:fa:c1:e8:c5:11:17:61:
         01:bc:f3:85:76:e9:7b:e3:56:fb:ca:3b:70:c3:b0:5c:b7:8e:
         93:de:32:6e:40:bf:56:ea:9f:89:f8:6e:c1:7f:e4:af:f2:fe:
         27:4c:ea:21:d0:eb:e7:99:e2:cf:9f:d3:99:02:ad:dd:16:dd:
         57:4b:66:3b:62:6a:09:d1:34:a0:91:73:3d:01:76:b4:11:6b:
         a2:6e:11:a9:4b:07:21:96:ed:06:6c:83:21:01:bc:f3:71:7d:
         12:4b:7a:09:51:ec:ae:50:05:e3:76:c8:3a:62:88:9b:5f:c7:
         55:6f:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:44 2024 by rpki-client on console-ams.rpki-client.org