Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa
File:                     3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa (raw, json)
Hash identifier:          uLkxtXZLmLvlIXqGhqZ/ugx8YyJqD035a/TsaYt4198=
Subject key identifier:   74:D4:D4:80:8B:A5:F3:9C:78:F8:8D:83:09:ED:F4:F4:3A:FC:62:D9
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       081047E0640D47DE9E4D97E28515E939655DBCB5
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:17 +0000
ROA not before:           Thu 04 Apr 2024 19:38:17 +0000
ROA not after:            Thu 03 Apr 2025 19:43:17 +0000
asID:                     266142
IP address blocks:        186.65.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:10:47:e0:64:0d:47:de:9e:4d:97:e2:85:15:e9:39:65:5d:bc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:17 2024 GMT
            Not After : Apr  3 19:43:17 2025 GMT
        Subject: CN=74D4D4808BA5F39C78F88D8309EDF4F43AFC62D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:0f:9f:e7:97:16:12:fc:e0:67:f3:7c:01:
                    38:2c:d4:41:0a:0b:3f:21:9b:cd:c3:3a:ec:d1:b1:
                    7a:8a:7e:d6:2d:b0:b4:ad:e7:74:f5:52:ea:fb:2d:
                    34:28:e3:86:64:05:e8:37:b1:18:70:fe:06:ef:9e:
                    73:73:02:fc:99:ac:1a:d9:0c:bf:e6:81:97:9e:76:
                    9d:5d:51:94:f7:3c:6f:ef:cc:4d:9a:d5:8f:24:ed:
                    7a:5c:00:5d:a3:9c:b6:ff:53:81:04:8b:95:04:25:
                    97:c3:b4:46:10:ec:fa:e5:83:ce:83:24:25:66:57:
                    15:cf:cd:ac:2c:05:48:04:1a:f3:95:d7:d8:5a:89:
                    c8:a8:6e:09:fa:b3:44:f0:a4:73:17:9b:e5:cb:39:
                    a5:4b:b3:5a:ab:05:06:3b:0c:e5:1f:0a:e2:6c:8b:
                    9e:cf:4d:12:93:35:f5:75:6e:84:79:ae:ae:19:bf:
                    eb:ca:10:60:da:7f:41:fa:aa:7a:85:58:23:1b:24:
                    54:52:c1:d2:e9:7c:dd:0e:b4:bc:e9:03:74:1b:1d:
                    23:7e:0a:4b:e5:31:59:63:a2:ff:de:ee:66:ff:ff:
                    f3:b3:1d:e4:ef:94:36:07:21:fb:bb:09:3a:42:7f:
                    1f:ec:d1:8d:fc:6f:e0:19:ee:18:f3:6b:55:09:a5:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:D4:80:8B:A5:F3:9C:78:F8:8D:83:09:ED:F4:F4:3A:FC:62:D9
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:36:28:b5:e3:3d:f4:2b:90:0c:44:2d:ba:bc:4d:4c:4c:d8:
         b7:5b:e5:2f:c1:50:65:f7:ca:ff:35:59:e9:4a:4b:9e:50:cf:
         2e:c4:11:f5:f4:fa:06:f4:e4:72:0d:1a:97:82:44:dc:b7:79:
         21:0f:48:7f:59:b8:aa:64:9d:dd:cf:25:55:a0:b8:9d:2e:45:
         19:7f:3b:6d:11:ec:70:53:4e:16:92:94:23:26:a9:86:a6:58:
         65:ee:66:92:75:ba:e5:93:15:ff:c5:eb:ad:d5:f6:1e:ca:bc:
         08:3b:e2:14:65:a3:de:a9:8f:8d:2f:cb:c8:02:e6:f6:12:c1:
         cc:6b:fa:81:83:ab:de:15:11:e3:ab:68:c7:6d:79:77:47:7c:
         41:1d:9b:b3:59:d0:78:2e:53:cc:44:cd:19:9a:2b:81:22:95:
         c8:be:d8:c3:69:f7:83:bb:83:49:aa:8c:7e:0a:df:61:7e:5b:
         0c:52:7a:df:4e:72:73:36:0e:22:fb:37:7c:13:d9:de:38:b4:
         12:46:6f:52:70:63:80:b0:05:8a:02:12:11:8e:d7:fa:96:14:
         1c:5e:1e:55:26:0e:57:ac:b0:b0:41:d1:a5:ee:8f:b6:d9:3f:
         cf:b0:c4:cf:a1:52:7b:a8:b7:16:ec:9c:f8:10:61:e8:c9:6d:
         9c:6b:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org