Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa
File:                     3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa (raw, json)
Hash identifier:          Kj98ruEKNk1xr2py7iIrANzUejpMXbqjJ17P4dN7oHc=
Subject key identifier:   4F:6E:FC:06:82:C7:A7:74:33:3B:D6:56:5C:8C:87:6E:47:6B:F3:D7
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       371C6B7EDA2221EC2985F9B16DD39831506BD0C1
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:16 +0000
ROA not before:           Thu 06 Mar 2025 20:07:16 +0000
ROA not after:            Thu 05 Mar 2026 20:12:16 +0000
asID:                     266142
IP address blocks:        186.65.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1c:6b:7e:da:22:21:ec:29:85:f9:b1:6d:d3:98:31:50:6b:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:16 2025 GMT
            Not After : Mar  5 20:12:16 2026 GMT
        Subject: CN=4F6EFC0682C7A774333BD6565C8C876E476BF3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:37:c5:86:fe:9c:5b:e1:a5:c4:df:95:a6:
                    ad:c9:54:c6:68:75:e1:6c:ec:88:66:8f:8a:90:5c:
                    7b:71:d0:bc:08:8e:c0:21:82:96:1c:01:6f:0a:e8:
                    f3:69:21:d9:c2:12:56:b8:5f:f7:8d:d6:0f:1d:1a:
                    82:f6:c2:73:1e:bf:bc:4b:15:6d:41:ee:c2:f3:c6:
                    ab:39:5c:6f:d8:56:56:40:b2:b8:6b:f4:68:bc:a6:
                    5e:4f:84:b3:a4:a3:e1:20:f3:82:8d:d3:61:62:2a:
                    d4:3c:60:4d:04:4b:55:ce:f0:e8:5c:a0:b0:5d:86:
                    39:6e:ef:17:b4:f6:82:a1:ce:fd:4f:d3:22:c3:6a:
                    03:2d:82:09:27:43:6b:e8:6a:f7:ff:7a:40:06:c0:
                    5c:3d:e1:1c:3c:8f:3f:9d:dd:57:37:f8:93:ce:47:
                    e7:7c:a5:fe:f0:ca:dc:c0:5b:63:28:96:fc:03:98:
                    9b:f8:4c:47:dd:66:40:3f:59:fa:df:38:1d:50:7e:
                    ef:95:75:14:c5:eb:71:ac:dd:5c:77:3c:59:ed:f2:
                    99:d4:fe:8f:f5:97:34:ab:23:73:75:b2:84:36:ec:
                    ab:12:fa:0a:30:22:c3:3c:2b:ec:ab:df:af:fc:75:
                    a6:48:d4:c1:eb:4a:0b:85:23:36:ab:cb:04:ed:fe:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6E:FC:06:82:C7:A7:74:33:3B:D6:56:5C:8C:87:6E:47:6B:F3:D7
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32322d3232203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:20:78:bb:5d:8c:a0:6e:70:ac:4d:d4:11:db:7d:9b:52:7b:
         71:e5:7e:ef:96:f3:3c:39:30:e2:2b:b6:b1:3c:4b:50:02:af:
         1a:98:38:32:24:26:55:d5:ab:d8:02:bf:db:c4:9b:5f:6e:eb:
         a8:e7:c7:38:1e:9b:88:6b:fa:fd:d4:39:cf:50:b5:ca:3c:71:
         9a:d2:9a:42:e6:6a:39:d8:8e:c5:9a:04:98:78:db:64:2f:ec:
         eb:02:cd:ce:75:3e:06:21:46:98:db:f6:78:57:71:33:56:74:
         01:eb:98:e7:69:68:97:d2:6c:d5:f7:87:8b:d4:59:5c:3d:b9:
         45:c1:ae:9a:03:91:17:d9:98:5b:20:c2:5a:73:fc:60:de:8c:
         8d:0f:91:4b:71:86:4a:3a:fe:5e:f4:ae:a3:56:ec:b9:48:25:
         c0:07:a9:1b:55:7a:17:cd:f5:fc:8a:cc:24:05:a8:a3:9f:6a:
         e2:ee:30:5f:0e:e5:09:2f:fd:84:3f:ae:c6:ca:c5:99:f9:72:
         9d:72:77:95:b4:d3:43:62:92:cb:55:25:0c:07:25:70:ab:7b:
         cb:bb:16:d8:50:27:f4:c4:78:2f:a5:4f:9c:33:80:c4:b2:60:
         d6:07:2d:08:38:55:6f:2a:3d:17:99:4a:e1:ee:eb:92:d8:b7:
         96:3e:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:47 2025 by rpki-client