Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32342d3234203d3e20323731323136.roa
File:                     3137372e33362e37362e302f32342d3234203d3e20323731323136.roa (raw, json)
Hash identifier:          n9OyISjUtbt3ReUvZgO9VpsXflPjyKmtbq4+gNdjclc=
Subject key identifier:   4F:94:32:73:DA:84:8A:29:4A:A9:05:46:9A:A7:EE:9B:6B:29:93:4B
Certificate issuer:       /CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Certificate serial:       4D6F0744B49706FFE1DE25532738F215D89F42E8
Authority key identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32342d3234203d3e20323731323136.roa
Signing time:             Thu 02 Jan 2025 18:51:22 +0000
ROA not before:           Thu 02 Jan 2025 18:46:22 +0000
ROA not after:            Thu 01 Jan 2026 18:51:22 +0000
asID:                     271216
IP address blocks:        177.36.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 08:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6f:07:44:b4:97:06:ff:e1:de:25:53:27:38:f2:15:d8:9f:42:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
        Validity
            Not Before: Jan  2 18:46:22 2025 GMT
            Not After : Jan  1 18:51:22 2026 GMT
        Subject: CN=4F943273DA848A294AA905469AA7EE9B6B29934B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:fd:74:db:d7:bc:5f:7b:0a:41:bf:82:3a:
                    6a:8a:0d:c3:81:cb:b5:cb:de:60:8a:8f:e4:32:41:
                    a6:14:14:9e:2d:54:bf:c2:7a:b8:18:bd:5b:28:cc:
                    20:59:f3:44:43:bf:44:bc:2e:19:86:98:97:66:d2:
                    97:8a:38:ed:72:51:4a:30:91:6e:de:29:27:00:71:
                    9a:c3:48:57:74:fd:30:85:86:5b:1f:bb:b3:2c:89:
                    46:5c:f4:28:08:28:21:e0:3c:01:b7:14:c8:40:30:
                    80:c5:9a:94:96:19:6d:b2:42:cd:31:ae:e7:60:f4:
                    35:2b:fc:fe:c0:44:42:74:f0:5a:c7:f3:a2:ee:1a:
                    2f:d7:fa:33:55:ac:39:45:44:9f:c1:10:45:66:3f:
                    16:3b:78:c0:67:ad:5b:46:2d:e4:ef:27:94:5f:e8:
                    28:55:ac:82:87:a8:31:05:e3:d8:96:db:e2:72:a0:
                    ed:df:80:a2:fc:ff:7d:64:e0:4c:19:08:9d:43:3e:
                    94:27:74:e1:07:5d:f3:8e:d6:06:49:27:82:54:eb:
                    03:10:19:c8:c0:b7:70:1f:15:2f:84:63:a3:4e:45:
                    24:8c:27:64:f3:65:51:b7:76:ce:b6:ab:ef:7b:ae:
                    71:fc:ef:e6:98:68:21:66:9d:3f:cc:6a:4f:5c:0d:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:94:32:73:DA:84:8A:29:4A:A9:05:46:9A:A7:EE:9B:6B:29:93:4B
            X509v3 Authority Key Identifier:
                keyid:3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32342d3234203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:af:8e:b2:83:47:8b:98:9f:5b:71:07:f7:ea:b1:e7:b3:
         0e:1f:60:c7:b1:4f:36:23:cd:af:13:bf:32:8c:ea:33:55:f8:
         44:1f:78:d7:3a:bf:28:c0:d6:c9:cc:ca:e9:69:fb:cc:eb:cb:
         5e:32:5b:6a:73:2b:99:ca:e0:d5:94:25:44:ea:59:19:2f:8c:
         c3:87:c8:1a:6d:83:d7:a0:5e:f9:35:8c:af:d2:1e:ea:f5:0b:
         3a:b3:dd:b2:21:86:0f:ea:2f:bc:a7:18:1e:bc:cc:c2:82:03:
         37:14:80:a3:4f:53:20:ed:f7:dc:fb:c6:eb:c1:21:80:f1:49:
         6f:a7:8a:33:83:4f:c8:db:3e:ab:54:09:db:d9:47:5a:0e:a6:
         67:f4:cf:b4:3b:6c:7e:6d:0f:77:86:2a:cc:5c:9d:53:92:02:
         53:4e:96:d0:7c:32:10:78:da:82:29:03:b3:8d:5d:83:51:b6:
         84:a6:eb:81:14:50:d6:36:4c:d6:80:dc:24:3f:a2:ab:c7:72:
         01:63:dd:da:3d:55:02:83:4d:3c:00:3a:60:e5:dd:38:37:0d:
         b3:d1:29:5d:a6:e1:4b:2d:b7:b8:42:65:25:47:d2:8a:9e:ea:
         0b:6c:98:55:52:1b:23:cd:e1:30:ef:f2:41:55:01:94:f4:58:
         73:d7:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:40 2025 by rpki-client