Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa
File:                     3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa (raw, json)
Hash identifier:          BVdLozKzsYKUP0+Hg4CXrdvUeA5F3aWmbZaGR2Mg2G4=
Subject key identifier:   63:3F:22:76:00:06:53:25:78:33:82:A7:2A:35:62:A1:6F:4C:5E:5C
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       2A625BC3413EC4D8EEC409FA82D20D41BA96EBBA
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:17 +0000
ROA not before:           Thu 04 Apr 2024 19:38:17 +0000
ROA not after:            Thu 03 Apr 2025 19:43:17 +0000
asID:                     266142
IP address blocks:        186.65.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:62:5b:c3:41:3e:c4:d8:ee:c4:09:fa:82:d2:0d:41:ba:96:eb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:17 2024 GMT
            Not After : Apr  3 19:43:17 2025 GMT
        Subject: CN=633F227600065325783382A72A3562A16F4C5E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:9a:69:c0:b0:15:51:b0:50:42:41:88:89:
                    28:f5:5a:e1:53:b2:69:62:2e:55:84:07:50:fc:05:
                    15:eb:4e:df:14:af:6e:ab:fd:61:23:a4:7a:d9:83:
                    d1:27:9b:c2:8e:ae:85:db:49:1c:43:b4:c0:69:50:
                    b1:f8:5a:5f:9f:e8:3d:36:72:1e:40:0f:25:a8:2c:
                    af:8e:bf:e8:a6:82:69:a1:3e:88:ac:f3:9f:7a:05:
                    93:9a:a2:1f:67:39:dd:af:54:9b:e5:86:d7:2d:e0:
                    32:fe:d8:c5:2f:89:59:1a:96:a3:0f:ce:c1:0d:98:
                    63:84:f7:ad:bd:07:22:f3:dd:8c:9f:8e:83:a6:10:
                    c2:4a:ec:ed:2d:77:56:b2:df:92:d0:5c:0f:6d:30:
                    79:57:f3:44:18:87:fd:da:2f:f0:b1:2c:b3:c3:4b:
                    75:91:c1:0e:85:e6:26:4f:b9:4b:57:14:26:5e:e3:
                    4d:f7:53:12:bd:11:24:a2:17:8c:1f:a7:47:68:6d:
                    ae:04:2e:f8:25:7f:62:24:af:b8:57:26:be:a4:d0:
                    00:17:72:a4:93:49:57:dc:95:8b:a7:10:b9:13:13:
                    c1:75:2a:fe:f1:7b:8e:58:d9:5c:46:9c:e2:11:a6:
                    58:bb:7c:fe:7c:b0:fe:f6:50:7c:47:db:74:d6:4d:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:22:76:00:06:53:25:78:33:82:A7:2A:35:62:A1:6F:4C:5E:5C
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:84:02:b9:bc:13:4b:13:5c:80:cc:e1:a0:50:09:fc:9b:
         ff:6d:89:90:c0:42:31:6b:4d:07:44:af:a0:6b:5e:32:9c:6c:
         bd:12:57:3c:ba:53:c0:20:15:dd:c3:84:58:b8:17:ce:79:1e:
         0b:f3:dd:1b:16:93:fb:bd:00:1f:1e:5e:02:a8:1f:1a:61:4f:
         2c:4d:43:7c:30:59:8d:2b:6b:f7:db:99:4d:f9:02:2a:94:8b:
         76:e4:07:be:ea:44:17:48:fc:73:1d:57:ef:5b:f9:b2:39:28:
         a6:2e:06:92:eb:c1:0d:6d:3c:64:af:73:9d:05:d1:fa:9c:77:
         8f:8d:1e:c0:d6:77:32:a8:18:e0:4c:ac:06:0d:4f:cd:fc:34:
         3c:98:ca:9c:d4:37:60:32:c2:26:10:43:5c:58:11:1a:09:a5:
         f6:c9:48:0d:8d:17:84:6a:d4:e8:6b:4e:b8:25:5c:cb:4d:a8:
         26:36:15:0c:06:81:b8:55:d1:5f:9d:e2:1d:18:a2:bb:c2:ca:
         b6:bb:c7:84:b6:b8:73:12:29:20:58:a3:df:1a:e3:d4:f1:e5:
         19:a6:45:e2:40:6a:31:af:38:35:09:54:59:a2:f1:d9:b7:2f:
         32:1d:08:73:5d:ec:c9:73:2d:62:c9:4a:c2:d3:6f:22:56:26:
         9b:ee:26:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKmJbw0E+xNjuxAn6gtINQbqW67owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ3NzhCRjZCRjlENkEzRDFDRDA1MkRBMzM2NTczOTdD
QzU1NUU0MTAeFw0yNDA0MDQxOTM4MTdaFw0yNTA0MDMxOTQzMTdaMDMxMTAvBgNV
BAMTKDYzM0YyMjc2MDAwNjUzMjU3ODMzODJBNzJBMzU2MkExNkY0QzVFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg55ppwLAVUbBQQkGIiSj1WuFT
smliLlWEB1D8BRXrTt8Ur26r/WEjpHrZg9Enm8KOroXbSRxDtMBpULH4Wl+f6D02
ch5ADyWoLK+Ov+imgmmhPois8596BZOaoh9nOd2vVJvlhtct4DL+2MUviVkalqMP
zsENmGOE9629ByLz3YyfjoOmEMJK7O0td1ay35LQXA9tMHlX80QYh/3aL/CxLLPD
S3WRwQ6F5iZPuUtXFCZe4033UxK9ESSiF4wfp0doba4ELvglf2Ikr7hXJr6k0AAX
cqSTSVfclYunELkTE8F1Kv7xe45Y2VxGnOIRpli7fP58sP72UHxH23TWTSrTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYz8idgAGUyV4M4KnKjVioW9MXlwwHwYDVR0j
BBgwFoAUBHeL9r+daj0c0FLaM2Vzl8xVXkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRCTWJIRHJ5Z2JVVjZaeE05bXFwNnAySFJuQktHYWZDNDVORldZVlV6
V0MvMS8wNDc3OEJGNkJGOUQ2QTNEMUNEMDUyREEzMzY1NzM5N0NDNTU1RTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Nzc4QkY2QkY5RDZBM0Qx
Q0QwNTJEQTMzNjU3Mzk3Q0M1NTVFNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0Qk1iSERyeWdiVVY2WnhNOW1xcDZwMkhSbkJLR2FmQzQ1TkZXWVZVeldDLzEv
MzEzODM2MmUzNjM1MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6QWgwDQYJKoZIhvcNAQELBQADggEBAF89hAK5
vBNLE1yAzOGgUAn8m/9tiZDAQjFrTQdEr6BrXjKcbL0SVzy6U8AgFd3DhFi4F855
Hgvz3RsWk/u9AB8eXgKoHxphTyxNQ3wwWY0ra/fbmU35AiqUi3bkB77qRBdI/HMd
V+9b+bI5KKYuBpLrwQ1tPGSvc50F0fqcd4+NHsDWdzKoGOBMrAYNT838NDyYypzU
N2AywiYQQ1xYERoJpfbJSA2NF4Rq1OhrTrglXMtNqCY2FQwGgbhV0V+d4h0YorvC
yra7x4S2uHMSKSBYo98a49Tx5RmmReJAajGvODUJVFmi8dm3LzIdCHNd7MlzLWLJ
SsLTbyJWJpvuJks=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org