Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa
File:                     3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa (raw, json)
Hash identifier:          aW1I8z1N/KDvWUvEBDm3FRlPqEsbq4hNxW+1q48aU/Y=
Subject key identifier:   FE:3D:27:34:85:64:3F:B4:25:1D:8F:90:7A:D3:32:DC:B4:FF:51:25
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       5A5752BCE8EBEE962BEF7E4ED68C56803C5254EA
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:17 +0000
ROA not before:           Thu 06 Mar 2025 20:07:17 +0000
ROA not after:            Thu 05 Mar 2026 20:12:17 +0000
asID:                     266142
IP address blocks:        186.65.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:57:52:bc:e8:eb:ee:96:2b:ef:7e:4e:d6:8c:56:80:3c:52:54:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:17 2025 GMT
            Not After : Mar  5 20:12:17 2026 GMT
        Subject: CN=FE3D273485643FB4251D8F907AD332DCB4FF5125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:d5:f4:92:f4:dd:11:7c:62:ef:98:6d:a4:
                    81:61:9f:72:04:96:7a:4f:d5:23:b3:a9:95:24:92:
                    84:59:d4:fd:8a:09:16:b4:b1:0f:88:8b:4a:a6:13:
                    16:84:12:3e:1d:15:54:18:50:60:91:06:2f:bc:cd:
                    41:db:1d:4c:9a:03:f8:68:25:c0:00:26:c6:5d:5e:
                    c9:4a:04:64:eb:2f:d7:5b:28:78:a5:69:4c:03:20:
                    d0:72:fd:63:84:63:5d:52:23:b2:9e:e8:1b:9d:3c:
                    41:db:3b:69:03:7a:de:b4:74:f8:70:50:31:81:4a:
                    e7:b3:53:41:f8:03:16:4c:5b:18:ba:d0:41:98:4f:
                    4b:d8:4a:b7:41:dd:80:47:81:c4:06:21:64:89:d2:
                    da:dd:ac:3c:08:69:fc:58:8f:82:a1:bf:72:f5:47:
                    e4:f1:ae:15:8d:f1:60:d1:e2:06:04:68:2b:54:e3:
                    d4:6a:ea:ee:ac:c1:8d:45:d0:20:a5:22:b8:1e:07:
                    fd:31:b4:75:09:d0:9d:d6:ff:27:8a:e1:8d:6a:2b:
                    2a:cb:ec:f3:80:1f:bb:af:3b:f5:f4:a5:e6:a6:7e:
                    34:b6:0c:46:75:7c:89:cd:bb:52:e1:ec:95:45:1e:
                    56:a9:cc:34:b5:fd:3a:ca:92:b2:ef:2a:bf:02:cf:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:27:34:85:64:3F:B4:25:1D:8F:90:7A:D3:32:DC:B4:FF:51:25
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:1a:71:bb:eb:51:d3:85:e1:ef:8a:4e:d0:dc:2e:98:a2:
         30:cf:ed:23:57:4f:60:f3:44:84:b7:4d:be:21:0d:95:5c:d3:
         a8:29:74:11:b9:78:a9:d1:b2:72:81:a0:9b:37:2e:e6:ee:e0:
         02:ce:ac:cc:2e:fa:b9:9e:c7:d3:87:14:35:60:ee:5d:cc:a8:
         23:d1:dc:7a:f7:bf:99:a0:2d:2d:da:c3:08:cd:56:7c:74:1d:
         a9:09:48:a4:e9:09:fd:b0:e3:f6:cc:58:c0:63:74:8e:7a:38:
         d3:47:24:e1:ed:4c:b6:c5:59:38:8f:c4:0a:c6:f8:df:78:79:
         92:c7:74:a9:63:8d:7d:56:6f:1a:85:68:01:13:eb:34:55:08:
         39:d0:c8:b9:9f:07:fe:0e:50:97:da:fc:9b:e0:13:6c:7c:00:
         8e:c3:24:c7:ca:56:2f:eb:75:3c:0e:ce:de:b9:7d:2c:89:fb:
         3d:5a:b7:7d:0a:ef:7b:df:0a:96:4d:61:df:cf:ec:8e:bb:6c:
         0d:eb:b5:88:38:5c:b2:0f:aa:eb:ba:2d:ad:f6:29:49:3b:69:
         4a:95:05:f7:88:46:2f:23:fa:d6:aa:3e:ce:fb:c5:51:41:f4:
         e6:3d:fe:53:d5:fc:1c:4a:67:15:99:6c:df:07:de:72:30:c3:
         e6:47:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:13 2025 by rpki-client