Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa
File:                     3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa (raw, json)
Hash identifier:          UGAfC+kRW7z0PaMHjyva3Jmv66cgzYHG8wutM5eQLow=
Subject key identifier:   68:A7:7E:F6:71:5C:99:E8:41:DA:D0:F3:FE:CB:6D:46:03:52:BD:2D
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       6314ECA18E436C3A24DE61714548E59552ADA03E
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:17 +0000
ROA not before:           Thu 04 Apr 2024 19:38:17 +0000
ROA not after:            Thu 03 Apr 2025 19:43:17 +0000
asID:                     266142
IP address blocks:        186.65.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:14:ec:a1:8e:43:6c:3a:24:de:61:71:45:48:e5:95:52:ad:a0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:17 2024 GMT
            Not After : Apr  3 19:43:17 2025 GMT
        Subject: CN=68A77EF6715C99E841DAD0F3FECB6D460352BD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:d2:54:ea:dc:9d:18:23:7a:0b:97:c1:29:
                    a9:d4:ea:8b:96:3f:af:de:08:fa:75:4a:56:e9:0e:
                    95:e1:e2:4e:ab:de:1b:6a:46:0c:aa:cd:74:86:2b:
                    f6:67:27:bd:14:6f:e7:90:a8:e4:c1:2b:b0:17:2e:
                    c6:e8:25:6f:d1:e3:26:1f:b3:66:67:2a:9f:89:4a:
                    69:0d:5e:1d:ee:6c:83:5f:2d:36:6d:fb:4b:86:f6:
                    54:7c:e4:12:73:fd:d7:ba:a3:a3:95:45:9d:2f:d2:
                    83:4a:9f:5d:48:44:29:5e:b5:38:df:fc:8f:bc:04:
                    cc:4b:6a:a3:83:6e:b7:ad:c1:91:1a:69:39:2f:3b:
                    84:98:a0:e0:25:0b:66:d9:d0:38:52:3e:c6:05:f7:
                    83:78:a3:18:d4:47:d4:17:b3:ef:81:16:e5:40:fc:
                    b9:95:33:12:95:37:57:f2:6b:d1:0a:3c:c9:4c:72:
                    63:0c:65:66:d5:7a:b5:27:15:55:62:e3:23:85:29:
                    b3:b2:c7:3e:da:76:a5:1a:39:64:5c:f8:ea:14:ca:
                    e1:51:fb:85:61:86:44:3b:aa:e1:88:6c:89:ef:2b:
                    ed:b9:32:8d:eb:d5:6a:48:4a:db:d4:b6:1b:0f:1c:
                    8c:94:7b:15:94:7a:e5:7c:d3:db:47:69:08:64:bd:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:7E:F6:71:5C:99:E8:41:DA:D0:F3:FE:CB:6D:46:03:52:BD:2D
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/3138362e36352e3130362e302f32332d3233203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:a2:f4:b3:fc:db:e4:b1:2d:6a:bc:07:27:90:62:53:31:03:
         58:24:3a:be:bb:e9:53:9b:ae:a3:e6:d9:2b:34:cc:6c:d5:9b:
         68:30:5e:15:9a:f7:b3:ee:02:23:32:9d:93:11:e1:4e:b7:81:
         12:6f:43:f3:82:3f:68:62:dd:61:11:6a:16:c2:f8:57:9f:e1:
         40:17:ba:a7:a2:c7:c9:0d:50:01:e3:ac:bc:14:94:49:eb:d7:
         66:f9:f9:46:b4:27:db:3d:20:c6:73:8e:b6:83:f1:1c:91:8d:
         6c:0e:e6:8d:d0:30:5e:3f:97:cb:18:0c:c8:f3:be:7c:93:8a:
         ef:46:20:5b:6d:c5:41:87:04:da:29:44:1b:ff:ab:bd:e4:39:
         68:05:62:b7:db:8f:a5:07:3c:58:25:d2:6e:2b:1c:fa:08:2d:
         6c:ca:31:5a:20:3d:34:27:b9:54:c6:ca:ef:54:3c:17:07:49:
         8d:4b:72:3f:e0:53:d0:67:13:8a:63:f7:f5:ff:5f:8c:7c:ff:
         d4:61:14:58:37:aa:de:e3:32:1e:a6:1e:53:6e:89:fb:da:da:
         f2:75:1f:21:0c:26:75:8d:c8:fe:4d:97:c3:c2:ce:23:b3:0f:
         ce:03:93:ca:bb:9a:e2:c4:6a:98:b8:86:c4:23:a1:01:50:38:
         93:86:7a:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYxTsoY5DbDok3mFxRUjllVKtoD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ3NzhCRjZCRjlENkEzRDFDRDA1MkRBMzM2NTczOTdD
QzU1NUU0MTAeFw0yNDA0MDQxOTM4MTdaFw0yNTA0MDMxOTQzMTdaMDMxMTAvBgNV
BAMTKDY4QTc3RUY2NzE1Qzk5RTg0MURBRDBGM0ZFQ0I2RDQ2MDM1MkJEMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Z9JU6tydGCN6C5fBKanU6ouW
P6/eCPp1SlbpDpXh4k6r3htqRgyqzXSGK/ZnJ70Ub+eQqOTBK7AXLsboJW/R4yYf
s2ZnKp+JSmkNXh3ubINfLTZt+0uG9lR85BJz/de6o6OVRZ0v0oNKn11IRCletTjf
/I+8BMxLaqODbretwZEaaTkvO4SYoOAlC2bZ0DhSPsYF94N4oxjUR9QXs++BFuVA
/LmVMxKVN1fya9EKPMlMcmMMZWbVerUnFVVi4yOFKbOyxz7adqUaOWRc+OoUyuFR
+4VhhkQ7quGIbInvK+25Mo3r1WpIStvUthsPHIyUexWUeuV809tHaQhkvQsPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaKd+9nFcmehB2tDz/sttRgNSvS0wHwYDVR0j
BBgwFoAUBHeL9r+daj0c0FLaM2Vzl8xVXkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRCTWJIRHJ5Z2JVVjZaeE05bXFwNnAySFJuQktHYWZDNDVORldZVlV6
V0MvMS8wNDc3OEJGNkJGOUQ2QTNEMUNEMDUyREEzMzY1NzM5N0NDNTU1RTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Nzc4QkY2QkY5RDZBM0Qx
Q0QwNTJEQTMzNjU3Mzk3Q0M1NTVFNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0Qk1iSERyeWdiVVY2WnhNOW1xcDZwMkhSbkJLR2FmQzQ1TkZXWVZVeldDLzEv
MzEzODM2MmUzNjM1MmUzMTMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6QWowDQYJKoZIhvcNAQELBQADggEBANyi9LP8
2+SxLWq8ByeQYlMxA1gkOr676VObrqPm2Ss0zGzVm2gwXhWa97PuAiMynZMR4U63
gRJvQ/OCP2hi3WERahbC+Fef4UAXuqeix8kNUAHjrLwUlEnr12b5+Ua0J9s9IMZz
jraD8RyRjWwO5o3QMF4/l8sYDMjzvnyTiu9GIFttxUGHBNopRBv/q73kOWgFYrfb
j6UHPFgl0m4rHPoILWzKMVogPTQnuVTGyu9UPBcHSY1Lcj/gU9BnE4pj9/X/X4x8
/9RhFFg3qt7jMh6mHlNuifva2vJ1HyEMJnWNyP5Nl8PCziOzD84Dk8q7muLEapi4
hsQjoQFQOJOGevc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org