Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa
File:                     3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa (raw, json)
Hash identifier:          foZekCJjYwvRflvvImk9D15bPjzpjlKouaLRYJ1FOPg=
Subject key identifier:   88:E5:8D:6E:F1:21:A3:CC:64:2F:69:78:FA:B7:BD:0C:70:9E:2B:86
Certificate issuer:       /CN=04C4B46503207481A5E29CE8E450E83C917B2F22
Certificate serial:       79F45E6D555FAF23AEAEA7D6645FEE2CBBECDFCC
Authority key identifier: 04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa
Signing time:             Thu 04 Apr 2024 10:47:49 +0000
ROA not before:           Thu 04 Apr 2024 10:42:49 +0000
ROA not after:            Thu 03 Apr 2025 10:47:49 +0000
asID:                     262401
IP address blocks:        177.36.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl
                          rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f4:5e:6d:55:5f:af:23:ae:ae:a7:d6:64:5f:ee:2c:bb:ec:df:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C4B46503207481A5E29CE8E450E83C917B2F22
        Validity
            Not Before: Apr  4 10:42:49 2024 GMT
            Not After : Apr  3 10:47:49 2025 GMT
        Subject: CN=88E58D6EF121A3CC642F6978FAB7BD0C709E2B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:fd:31:f1:1e:f9:f0:e2:ce:c8:98:1a:a3:
                    9c:1a:db:da:63:e0:b8:04:c6:df:6a:14:73:d8:fe:
                    66:b3:16:7c:5e:92:2a:ce:7d:93:63:74:16:89:05:
                    78:23:b2:21:e6:f7:46:21:87:7a:95:b1:80:77:b5:
                    03:a1:86:0d:5c:d8:71:b7:4a:8e:f2:4c:fb:ac:7c:
                    d7:74:86:29:07:54:3b:0f:4d:de:93:50:a9:37:a5:
                    1b:99:b6:d4:ee:c0:62:af:8e:b1:1e:d4:40:fd:1e:
                    15:b4:6d:f6:b8:6d:5d:1a:3e:f7:cb:b4:65:f6:93:
                    07:a1:85:7d:9d:fb:8d:fe:05:a8:a7:a9:78:e1:c1:
                    9d:b7:d5:d5:1e:61:41:78:07:51:a8:4a:65:8d:67:
                    f4:1f:45:de:99:ef:ec:64:24:95:91:6e:e2:47:df:
                    48:3c:d4:5e:af:6e:ae:39:32:e0:91:02:00:e3:ff:
                    6a:bc:6b:b0:92:a2:9d:e9:2f:6b:c1:06:47:7d:d8:
                    9d:70:c8:58:5a:91:84:89:af:d9:34:4f:92:c8:c6:
                    6e:e4:27:eb:33:83:77:0e:f2:07:27:da:f6:af:79:
                    b6:39:be:c6:6b:8d:7d:51:cf:be:8c:e4:e0:d3:ff:
                    08:fd:08:e2:3a:47:9d:25:18:a5:18:e0:34:fc:f3:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:8D:6E:F1:21:A3:CC:64:2F:69:78:FA:B7:BD:0C:70:9E:2B:86
            X509v3 Authority Key Identifier:
                keyid:04:C4:B4:65:03:20:74:81:A5:E2:9C:E8:E4:50:E8:3C:91:7B:2F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/04C4B46503207481A5E29CE8E450E83C917B2F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04C4B46503207481A5E29CE8E450E83C917B2F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CBkf4rHLX1rWqXcgt5sHj57NtN7NYzoc6CjY32YajXv/1/3137372e33362e3135382e302f32342d3234203d3e20323632343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:16:d3:d2:0c:6a:f7:94:fa:66:90:59:ea:26:34:ed:92:9d:
         32:4d:ad:e6:91:4c:3f:1e:35:cf:8f:59:5b:fe:3f:02:42:0e:
         71:95:c0:9d:aa:fd:0d:0c:18:7f:02:1d:6b:b6:37:d1:da:d1:
         2a:2c:5d:6f:e5:c0:e4:2f:40:c5:47:2c:6d:c2:80:65:b9:61:
         8e:0c:e7:07:5e:d3:70:60:83:5f:7b:e1:73:85:4f:f9:d9:8c:
         7f:41:e7:98:0e:8f:bc:9b:53:e6:67:e8:9e:e6:8b:35:3b:95:
         d6:e1:3b:fa:1c:91:ff:b3:2c:66:ae:f1:b9:62:d9:31:10:f5:
         6d:50:db:c7:6b:12:d6:73:7c:de:53:4c:30:e0:56:09:05:52:
         6d:4e:95:d9:29:80:d7:6f:cc:6a:39:24:e1:ed:e7:ee:48:d6:
         13:b7:a2:85:44:b6:7f:2d:5f:c2:42:ae:2f:ac:b4:b5:1b:5b:
         75:c8:e2:59:88:00:83:7e:9d:de:74:9b:16:40:f6:2e:be:8a:
         b7:da:e4:81:8e:31:7b:12:18:af:03:16:d8:b7:03:01:a1:2e:
         37:aa:f0:5c:76:2e:2e:ec:6d:87:18:13:4e:93:8d:2b:25:37:
         97:03:81:4d:7c:fe:77:15:9a:e9:f6:2b:bd:9a:8e:0a:ec:1c:
         c6:42:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:53 2024 by rpki-client on console-ams.rpki-client.org