Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa
File:                     3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa (raw, json)
Hash identifier:          eBYW+zfC6zG+Xxqt4pBRaM2Eo9MPVp+pKRnlN5rmAMI=
Subject key identifier:   F4:D8:39:5B:36:F8:0D:57:E4:10:91:CA:2C:6E:25:0C:AB:AC:F9:20
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       22232EF5971F72DF3F870BE65C8E9CBFF9514E63
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:16 +0000
ROA not before:           Thu 06 Mar 2025 20:07:16 +0000
ROA not after:            Thu 05 Mar 2026 20:12:16 +0000
asID:                     266142
IP address blocks:        186.65.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:23:2e:f5:97:1f:72:df:3f:87:0b:e6:5c:8e:9c:bf:f9:51:4e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:16 2025 GMT
            Not After : Mar  5 20:12:16 2026 GMT
        Subject: CN=F4D8395B36F80D57E41091CA2C6E250CABACF920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:da:5f:ca:98:11:09:55:b3:af:5e:9d:e1:
                    ec:eb:62:37:5e:61:83:7c:82:31:19:05:90:65:3b:
                    4e:84:d1:ef:7b:9b:1a:65:79:85:09:ee:99:51:1d:
                    8b:48:ff:56:3d:46:69:81:3f:5d:d0:b7:43:e0:a0:
                    13:53:9a:be:fe:5e:79:a8:c1:0c:dd:28:60:e4:e3:
                    9e:62:d5:73:76:f9:2f:37:d5:0d:91:c3:cc:a3:97:
                    16:a2:51:12:f2:2a:f6:5d:3a:ef:86:22:c7:12:1c:
                    3c:fe:c3:4f:48:8e:6d:bf:6a:ce:a4:26:67:c5:00:
                    f4:a9:1b:55:4f:66:0a:13:a2:ea:54:21:c8:0a:3e:
                    13:ff:c6:e6:c8:83:0a:81:76:4d:9a:88:5d:f3:d7:
                    dd:1c:43:09:81:e7:a9:e0:27:ad:7f:46:bf:33:d6:
                    e6:0b:c4:61:c2:b9:d3:cb:8c:c1:fc:e1:3f:72:5d:
                    c5:8f:48:8a:3d:ed:62:d5:0c:46:f2:ff:1c:c7:2f:
                    75:fa:0c:d6:b5:d6:d9:c8:ff:c5:23:44:cd:b0:d4:
                    4b:ae:48:44:d1:c7:34:c0:3d:d8:4f:58:5d:52:2b:
                    1c:b2:c4:c4:8d:3c:b0:bf:37:14:66:6e:32:ed:a6:
                    e7:e1:e9:b6:12:5c:06:0e:61:ed:1a:57:1d:ec:81:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:39:5B:36:F8:0D:57:E4:10:91:CA:2C:6E:25:0C:AB:AC:F9:20
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:69:01:6d:67:dd:4d:2d:59:a2:03:aa:43:57:aa:49:92:47:
         d6:2d:b5:cf:d7:69:61:c7:be:01:b0:a2:b2:f8:7f:74:f2:e0:
         4f:38:20:47:ef:77:00:9d:7d:08:97:f8:56:f5:5e:f0:64:68:
         97:b9:e3:be:79:9b:3a:16:94:b3:bb:7a:e8:f1:a7:42:ac:6d:
         64:db:91:ea:32:d9:48:69:e5:d5:a6:9a:de:94:15:68:d8:9b:
         42:14:ad:29:07:69:11:1f:4c:f7:d9:43:cf:63:f4:f4:b7:56:
         31:3a:4a:39:30:04:6e:93:4d:4d:07:1b:f4:fa:85:74:b3:c5:
         d8:ec:6e:a9:b5:6e:f0:3c:e0:05:e7:b2:49:47:34:f6:16:dc:
         99:b0:98:e1:34:c9:9e:6a:09:20:43:68:ff:cb:f4:79:19:63:
         24:41:4d:8c:34:df:e7:ba:80:91:d8:ca:b7:10:4e:7d:7b:fc:
         ed:3c:29:5f:c6:24:0d:83:83:42:eb:4c:44:af:92:b5:4b:1c:
         9e:71:3c:99:7f:29:35:84:9e:80:8f:2a:8d:be:ad:78:6b:2f:
         41:dc:8e:1e:1b:86:90:33:b7:58:16:3b:8b:1e:ec:26:1f:18:
         6a:ec:69:5f:26:35:74:f3:48:9a:a6:8b:76:b5:e7:9a:5d:bd:
         7b:fc:85:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIiMu9Zcfct8/hwvmXI6cv/lRTmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ3NzhCRjZCRjlENkEzRDFDRDA1MkRBMzM2NTczOTdD
QzU1NUU0MTAeFw0yNTAzMDYyMDA3MTZaFw0yNjAzMDUyMDEyMTZaMDMxMTAvBgNV
BAMTKEY0RDgzOTVCMzZGODBENTdFNDEwOTFDQTJDNkUyNTBDQUJBQ0Y5MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMtpfypgRCVWzr16d4ezrYjde
YYN8gjEZBZBlO06E0e97mxpleYUJ7plRHYtI/1Y9RmmBP13Qt0PgoBNTmr7+Xnmo
wQzdKGDk455i1XN2+S831Q2Rw8yjlxaiURLyKvZdOu+GIscSHDz+w09Ijm2/as6k
JmfFAPSpG1VPZgoToupUIcgKPhP/xubIgwqBdk2aiF3z190cQwmB56ngJ61/Rr8z
1uYLxGHCudPLjMH84T9yXcWPSIo97WLVDEby/xzHL3X6DNa11tnI/8UjRM2w1Euu
SETRxzTAPdhPWF1SKxyyxMSNPLC/NxRmbjLtpufh6bYSXAYOYe0aVx3sgUhtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9Ng5Wzb4DVfkEJHKLG4lDKus+SAwHwYDVR0j
BBgwFoAUBHeL9r+daj0c0FLaM2Vzl8xVXkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRCTWJIRHJ5Z2JVVjZaeE05bXFwNnAySFJuQktHYWZDNDVORldZVlV6
V0MvMS8wNDc3OEJGNkJGOUQ2QTNEMUNEMDUyREEzMzY1NzM5N0NDNTU1RTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Nzc4QkY2QkY5RDZBM0Qx
Q0QwNTJEQTMzNjU3Mzk3Q0M1NTVFNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0Qk1iSERyeWdiVVY2WnhNOW1xcDZwMkhSbkJLR2FmQzQ1TkZXWVZVeldDLzEv
MzEzODM2MmUzNjM1MmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6QWgwDQYJKoZIhvcNAQELBQADggEBAN1pAW1n
3U0tWaIDqkNXqkmSR9Yttc/XaWHHvgGworL4f3Ty4E84IEfvdwCdfQiX+Fb1XvBk
aJe54755mzoWlLO7eujxp0KsbWTbkeoy2Uhp5dWmmt6UFWjYm0IUrSkHaREfTPfZ
Q89j9PS3VjE6SjkwBG6TTU0HG/T6hXSzxdjsbqm1bvA84AXnsklHNPYW3JmwmOE0
yZ5qCSBDaP/L9HkZYyRBTYw03+e6gJHYyrcQTn17/O08KV/GJA2Dg0LrTESvkrVL
HJ5xPJl/KTWEnoCPKo2+rXhrL0Hcjh4bhpAzt1gWO4se7CYfGGrsaV8mNXTzSJqm
i3a155pdvXv8hag=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:14 2025 by rpki-client