Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135362e302f32322d3232203d3e20323632343031.roa
File:                     3137372e33362e3135362e302f32322d3232203d3e20323632343031.roa (raw, json)
Hash identifier:          mPz5BAyQX7D/mSAI9fOmKL/syzBbUnX1UGDEg7onylQ=
Subject key identifier:   1E:E8:49:30:9D:1A:60:07:6D:C0:92:83:16:A9:56:47:99:A7:41:C1
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       18D8237081C9F4C791187D82ED69F7430E460569
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135362e302f32322d3232203d3e20323632343031.roa
Signing time:             Thu 06 Mar 2025 11:29:46 +0000
ROA not before:           Thu 06 Mar 2025 11:24:46 +0000
ROA not after:            Thu 05 Mar 2026 11:29:46 +0000
asID:                     262401
IP address blocks:        177.36.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d8:23:70:81:c9:f4:c7:91:18:7d:82:ed:69:f7:43:0e:46:05:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Mar  6 11:24:46 2025 GMT
            Not After : Mar  5 11:29:46 2026 GMT
        Subject: CN=1EE849309D1A60076DC0928316A9564799A741C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:ca:aa:6c:fb:f0:92:5f:ca:da:4c:54:37:
                    44:9f:15:e3:5d:5f:6c:71:f8:15:c0:ce:09:f2:e4:
                    3c:60:c7:99:3a:95:3c:d7:99:35:31:7b:63:d0:f0:
                    23:84:bc:a4:37:29:e3:55:7a:76:02:b0:5a:65:72:
                    69:e8:ad:3d:1b:b2:1a:22:aa:7e:a2:51:6e:59:1e:
                    a3:f0:5a:0f:7e:7e:16:f1:5a:3d:4f:8c:f5:53:d4:
                    db:d4:17:58:f3:f7:89:84:14:d6:67:26:99:54:f5:
                    bd:3c:77:a3:45:00:a7:ed:fe:09:a4:37:f8:c8:0f:
                    db:bd:f4:fd:b7:21:70:aa:fa:f7:ad:52:f0:03:fd:
                    f7:69:80:3f:a1:a5:a9:6f:b6:3e:60:47:0d:f3:ce:
                    bd:08:30:01:01:3c:e7:a1:6b:75:26:5d:3d:94:6a:
                    c5:01:4f:7b:f3:2e:d0:d1:9b:5a:eb:6b:72:6c:3b:
                    44:f2:e4:e8:0d:73:f9:57:f7:17:91:08:04:3b:e0:
                    3b:63:a4:64:8d:1a:1c:09:51:f1:cb:16:f9:0b:a0:
                    a7:ea:cc:5b:a5:d9:a9:e0:ef:cd:17:37:70:2e:80:
                    98:77:ed:9e:c9:5c:b2:28:63:a0:39:12:d1:11:fb:
                    7a:6a:e7:df:e7:d9:5f:4b:a4:6d:3b:90:e0:04:bf:
                    6c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:49:30:9D:1A:60:07:6D:C0:92:83:16:A9:56:47:99:A7:41:C1
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135362e302f32322d3232203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:d5:99:fc:47:f2:e2:d4:67:6e:9d:7d:f5:42:33:29:83:5f:
         65:1e:48:8e:2e:41:7a:6b:0f:a5:bd:24:44:41:78:0e:62:59:
         a8:45:25:56:88:7f:92:5b:fa:31:34:cf:ad:ed:31:09:9d:14:
         6a:3d:fe:d4:df:fe:1a:06:3f:d0:3b:42:37:96:33:77:8c:75:
         79:35:5c:fc:57:f4:df:1a:e8:7e:c9:51:25:5b:83:b9:f5:4d:
         15:c3:64:b6:7c:16:c5:d9:1e:9d:c2:40:ff:f3:a5:f9:88:b2:
         9a:8e:15:67:92:34:5c:44:81:3a:ee:d7:cf:18:1f:96:4a:e5:
         cf:99:5f:4d:b0:1c:34:16:0a:f6:bc:f3:9f:b4:99:84:78:89:
         5f:8f:21:b4:c8:3f:ad:59:8a:90:dc:13:1d:00:43:60:ab:8d:
         ba:3d:e4:5b:fd:bd:26:53:14:fc:38:bc:2e:7d:fc:24:ac:ee:
         2b:3b:3e:bd:94:e1:f8:b1:07:89:b3:3c:e0:d6:35:fe:a9:dd:
         d7:f4:a1:2b:0e:b5:44:f7:ff:1b:2f:a2:45:7e:44:3c:f3:24:
         65:44:d3:13:d7:bf:ed:5f:51:d3:f3:33:cd:62:a7:2c:16:21:
         95:37:fa:83:57:98:de:00:a7:ce:0a:5f:0b:88:a0:f0:08:ea:
         3b:29:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:30:22 2025 by rpki-client