Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          50s7XmHZ9+6t0s4uTU1PsBd1WXQV6yHPDh9376AGSh0=
Subject key identifier:   E7:B6:91:64:68:FC:2B:4C:72:9A:A8:71:84:13:18:4F:5B:FF:73:E2
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       363488F7EF44DBD51691E510000A08C93042E9DD
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:50 +0000
ROA not before:           Thu 04 Apr 2024 10:42:50 +0000
ROA not after:            Thu 03 Apr 2025 10:47:50 +0000
asID:                     262401
IP address blocks:        177.36.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:34:88:f7:ef:44:db:d5:16:91:e5:10:00:0a:08:c9:30:42:e9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:50 2024 GMT
            Not After : Apr  3 10:47:50 2025 GMT
        Subject: CN=E7B6916468FC2B4C729AA8718413184F5BFF73E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:f9:9a:c7:5a:06:39:dd:33:83:b0:4f:5e:
                    40:11:e7:b9:40:c5:47:c3:fb:80:6b:42:a8:91:74:
                    11:f1:d4:1f:18:43:3c:e0:aa:59:d4:c9:ee:37:1b:
                    c9:a8:06:c9:5a:ac:c5:2d:d1:c6:7f:74:1b:cd:eb:
                    75:b5:a7:d3:cc:d0:d9:68:0d:7a:94:38:aa:7b:24:
                    7a:ad:39:0e:60:58:dc:e5:99:48:3c:79:5c:80:19:
                    fc:de:ff:16:80:b2:d1:3c:ac:20:9a:6d:dc:4c:31:
                    2a:ff:63:89:eb:5e:a1:5c:75:c6:3b:9d:7c:e4:d7:
                    a6:f1:70:bf:9b:df:09:eb:eb:79:33:7c:a9:75:06:
                    be:cb:38:21:a3:6c:bf:34:4f:7d:0e:f7:08:8c:48:
                    ed:a6:23:70:5e:49:57:51:87:71:67:98:83:c9:16:
                    9e:be:12:df:e4:e4:65:2c:6b:88:88:b1:f0:d7:88:
                    22:50:43:a8:c1:21:bc:63:d2:39:7d:02:b8:7d:85:
                    c5:ab:dd:0f:77:3f:4a:bd:07:68:8c:8b:0f:c3:50:
                    6a:a5:f1:2a:ba:e2:6e:f5:e6:c7:94:df:a7:0b:44:
                    4e:6b:5f:2d:0d:15:ae:1e:a5:d7:a4:70:d7:90:1f:
                    27:99:37:0a:8b:1d:12:84:93:4c:3a:aa:0b:63:7f:
                    84:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:91:64:68:FC:2B:4C:72:9A:A8:71:84:13:18:4F:5B:FF:73:E2
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135362e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:aa:35:00:0a:6c:21:17:b4:7c:cc:6b:b5:c3:90:8a:65:
         1d:a5:0e:d3:72:06:14:b4:ea:dd:17:88:75:90:96:2f:ce:04:
         12:ca:87:43:2a:57:d9:02:cd:1d:9a:a8:60:6c:f3:c4:b0:21:
         c4:a7:66:ad:be:63:6f:6a:60:55:77:30:28:0d:ca:a8:be:8d:
         71:1e:e9:f0:8b:f3:ca:9c:85:12:31:45:32:48:41:83:37:07:
         de:81:08:0e:bd:04:5c:2a:9c:48:ec:6a:72:7d:21:8b:0a:0e:
         45:22:43:d6:33:a0:f6:b7:6d:88:d7:f6:98:80:76:a5:76:21:
         b4:62:6c:6e:b8:82:01:f7:3a:be:5c:76:c3:b9:ea:6f:df:ad:
         13:c4:88:ce:cf:e1:13:76:59:17:3f:56:19:d1:fa:2d:c4:f9:
         e1:49:11:4c:b2:01:a5:2f:24:a4:9b:e2:58:ea:0f:46:d5:5a:
         0a:dd:7e:f9:46:a2:9d:07:98:88:37:c9:b8:33:2f:1a:5c:9c:
         3c:b9:dc:87:27:fb:d0:dc:93:6d:96:31:f3:82:46:a0:6e:fa:
         ab:2e:91:6b:36:2e:78:99:24:fa:4a:cd:9d:03:d4:56:3e:87:
         36:08:7e:f6:a5:8e:29:b3:a9:21:0f:57:a1:ab:49:bd:5f:63:
         7a:f3:ac:7e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNjSI9+9E29UWkeUQAAoIyTBC6d0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDNEI0NjUwMzIwNzQ4MUE1RTI5Q0U4RTQ1MEU4M0M5
MTdCMkYyMjAeFw0yNDA0MDQxMDQyNTBaFw0yNTA0MDMxMDQ3NTBaMDMxMTAvBgNV
BAMTKEU3QjY5MTY0NjhGQzJCNEM3MjlBQTg3MTg0MTMxODRGNUJGRjczRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEPmax1oGOd0zg7BPXkAR57lA
xUfD+4BrQqiRdBHx1B8YQzzgqlnUye43G8moBslarMUt0cZ/dBvN63W1p9PM0Nlo
DXqUOKp7JHqtOQ5gWNzlmUg8eVyAGfze/xaAstE8rCCabdxMMSr/Y4nrXqFcdcY7
nXzk16bxcL+b3wnr63kzfKl1Br7LOCGjbL80T30O9wiMSO2mI3BeSVdRh3FnmIPJ
Fp6+Et/k5GUsa4iIsfDXiCJQQ6jBIbxj0jl9Arh9hcWr3Q93P0q9B2iMiw/DUGql
8Sq64m715seU36cLRE5rXy0NFa4epdekcNeQHyeZNwqLHRKEk0w6qgtjf4QFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU57aRZGj8K0xymqhxhBMYT1v/c+IwHwYDVR0j
BBgwFoAUBMS0ZQMgdIGl4pzo5FDoPJF7LyIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NCa2Y0ckhMWDFyV3FYY2d0NXNIajU3TnRON05Zem9jNkNqWTMyWWFq
WHYvMS8wNEM0QjQ2NTAzMjA3NDgxQTVFMjlDRThFNDUwRTgzQzkxN0IyRjIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0QzRCNDY1MDMyMDc0ODFB
NUUyOUNFOEU0NTBFODNDOTE3QjJGMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDQmtmNHJITFgxcldxWGNndDVzSGo1N050TjdOWXpvYzZDalkzMllhalh2LzEv
MzEzNzM3MmUzMzM2MmUzMTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxJJwwDQYJKoZIhvcNAQELBQADggEBAEfnqjUA
CmwhF7R8zGu1w5CKZR2lDtNyBhS06t0XiHWQli/OBBLKh0MqV9kCzR2aqGBs88Sw
IcSnZq2+Y29qYFV3MCgNyqi+jXEe6fCL88qchRIxRTJIQYM3B96BCA69BFwqnEjs
anJ9IYsKDkUiQ9YzoPa3bYjX9piAdqV2IbRibG64ggH3Or5cdsO56m/frRPEiM7P
4RN2WRc/VhnR+i3E+eFJEUyyAaUvJKSb4ljqD0bVWgrdfvlGop0HmIg3ybgzLxpc
nDy53Icn+9Dck22WMfOCRqBu+qsukWs2LniZJPpKzZ0D1FY+hzYIfvaljimzqSEP
V6GrSb1fY3rzrH4=
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:28 2024 by rpki-client on console-fra.rpki-client.org