Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135372e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135372e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          qxWfeQ1MMMjAs4+i0stN432MTXNESXMxNL4IftV4/6w=
Subject key identifier:   70:21:78:BC:FF:7D:DD:06:C7:20:B0:DC:CC:E5:E5:F1:0C:C3:5B:A7
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       2FB2FECE05AA341822A5ACC881C4B40DEF784262
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135372e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:42 +0000
ROA not before:           Thu 04 Apr 2024 10:42:42 +0000
ROA not after:            Thu 03 Apr 2025 10:47:42 +0000
asID:                     262401
IP address blocks:        177.36.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b2:fe:ce:05:aa:34:18:22:a5:ac:c8:81:c4:b4:0d:ef:78:42:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:42 2024 GMT
            Not After : Apr  3 10:47:42 2025 GMT
        Subject: CN=702178BCFF7DDD06C720B0DCCCE5E5F10CC35BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:9a:4c:35:d0:cb:64:1f:cc:8c:70:1b:f3:
                    53:01:a3:62:b3:88:c7:1f:35:5b:1d:19:ee:7f:f1:
                    2a:ce:ec:03:3f:58:98:e3:30:9d:6e:bf:86:48:d3:
                    c2:4e:01:10:2b:9b:ee:79:39:bb:cf:99:6f:af:10:
                    dc:76:39:2e:03:e4:05:70:92:cf:38:55:ce:6d:23:
                    c9:6d:f8:2b:94:e1:0a:2f:36:85:73:c2:89:76:e2:
                    ac:6c:ca:67:48:ba:e7:56:63:ab:61:72:cb:6a:b2:
                    3b:be:c8:4f:37:c1:8f:d5:83:49:85:f2:09:85:df:
                    ab:ac:24:9a:3f:38:99:29:0d:5f:11:6a:a6:f6:35:
                    d5:e9:97:29:88:c0:c1:37:c9:d7:75:0d:2b:00:5d:
                    57:66:e2:36:d3:fd:8d:28:8c:23:e5:67:d7:e6:93:
                    7b:42:a3:91:26:62:da:73:f8:0f:a3:e6:05:6d:ac:
                    b0:57:cc:9f:ef:d1:dd:41:5f:35:e4:b5:56:ff:4f:
                    10:55:93:3d:91:a7:18:eb:df:49:7f:f7:e2:06:c7:
                    4e:b7:b2:63:96:60:50:94:7d:fd:4d:51:06:b7:5c:
                    67:e1:d6:8b:88:0a:f5:cf:a8:ab:17:2a:d6:02:ae:
                    87:58:74:d5:e7:0a:cd:81:a8:f2:7c:46:2a:2b:fb:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:78:BC:FF:7D:DD:06:C7:20:B0:DC:CC:E5:E5:F1:0C:C3:5B:A7
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135372e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:cc:f5:fd:93:7a:a5:93:65:20:77:f4:37:f4:b5:f7:28:
         22:94:dd:ba:da:32:44:d4:4b:ef:64:a9:60:37:e9:fa:f6:e7:
         91:7b:20:41:7e:08:8e:41:f1:6e:f4:20:8f:0a:17:e9:a9:1a:
         cf:11:74:0e:c8:63:b8:dd:1c:71:32:2c:85:53:84:da:bc:cb:
         ec:8f:10:a3:93:80:5b:d3:19:9c:cb:37:51:48:e1:7c:2c:13:
         ef:ec:ad:7b:47:76:91:72:49:f4:35:b5:55:d0:89:e1:fb:ff:
         28:e7:38:42:42:c3:f7:2f:b7:3c:9c:a1:2e:6e:ec:2c:48:cc:
         43:84:a7:5b:ac:e7:29:46:d3:ab:a0:ac:a6:5a:93:63:23:e3:
         81:2e:14:9b:ce:b1:99:46:a6:55:df:2a:ce:1f:e3:48:e8:d4:
         6c:9a:08:a0:c4:f7:2b:14:c2:aa:29:d5:4e:29:45:09:c8:6f:
         27:db:6b:03:51:74:bc:b0:42:5d:ae:88:51:67:f1:b8:33:aa:
         50:a7:46:e2:74:e1:58:37:93:af:33:49:02:97:04:c3:25:d9:
         02:d4:1c:ed:59:9d:66:b6:0b:2f:dd:73:8a:99:b3:06:95:de:
         b8:f1:fa:04:2f:fe:98:68:6b:3a:fa:b7:12:b7:1a:db:48:a5:
         8e:0e:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:44 2024 by rpki-client on console-ams.rpki-client.org