Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265303.roa
File:                     AS265303.roa (raw, json)
Hash identifier:          khDZx9DRuh+5keLwn8LtggqVTQOukE9yCibufjokhBg=
Subject key identifier:   0C:9E:93:8D:E6:B9:E5:3A:F8:6F:56:AE:DC:3A:EB:17:61:BE:AC:BE
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       05D5D182835617E0E43FF87C64DD0FD426404A45
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265303.roa
Signing time:             Wed 12 Mar 2025 23:23:55 +0000
ROA not before:           Wed 12 Mar 2025 23:18:55 +0000
ROA not after:            Wed 11 Mar 2026 23:23:55 +0000
asID:                     265303
IP address blocks:        168.0.172.0/22 maxlen: 24
                          177.126.1.0/24 maxlen: 24
                          177.126.6.0/24 maxlen: 24
                          177.126.8.0/24 maxlen: 24
                          177.126.10.0/23 maxlen: 24
                          177.126.13.0/24 maxlen: 24
                          177.126.15.0/24 maxlen: 24
                          187.120.12.0/24 maxlen: 24
                          189.39.216.0/22 maxlen: 24
                          200.150.164.0/23 maxlen: 24
                          200.150.167.0/24 maxlen: 24
                          200.150.169.0/24 maxlen: 24
                          200.150.170.0/24 maxlen: 24
                          200.150.172.0/24 maxlen: 24
                          200.150.174.0/23 maxlen: 24
                          201.87.128.0/24 maxlen: 24
                          201.87.131.0/24 maxlen: 24
                          201.87.133.0/24 maxlen: 24
                          201.87.134.0/23 maxlen: 24
                          201.87.136.0/23 maxlen: 24
                          201.87.139.0/24 maxlen: 24
                          201.87.140.0/23 maxlen: 24
                          201.87.142.0/24 maxlen: 24
                          201.87.144.0/24 maxlen: 24
                          201.87.146.0/23 maxlen: 24
                          201.87.148.0/23 maxlen: 24
                          201.87.150.0/24 maxlen: 24
                          201.87.152.0/23 maxlen: 24
                          201.87.157.0/24 maxlen: 24
                          2804:2dc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d5:d1:82:83:56:17:e0:e4:3f:f8:7c:64:dd:0f:d4:26:40:4a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Mar 12 23:18:55 2025 GMT
            Not After : Mar 11 23:23:55 2026 GMT
        Subject: CN=0C9E938DE6B9E53AF86F56AEDC3AEB1761BEACBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cd:55:87:a1:1e:f4:b7:65:cd:22:f9:8b:df:
                    da:d0:0f:61:ec:1b:6a:37:8b:57:56:c4:99:69:19:
                    a7:1d:cd:27:61:fe:85:b8:50:25:7b:41:bf:f4:17:
                    7b:c4:81:19:16:f5:c8:1c:4c:f1:35:f4:b7:ea:f4:
                    1a:a5:21:45:9c:c7:74:92:e0:b7:2d:0a:33:51:67:
                    21:d9:cb:8a:eb:83:58:41:83:0e:39:ad:c5:11:8d:
                    fe:75:44:75:4c:16:f1:65:fb:32:56:a1:35:3f:7b:
                    76:d1:3e:32:c1:c2:31:7d:6e:0a:f7:0e:8c:65:f2:
                    c8:55:9f:ff:73:8e:b1:eb:3a:14:9f:98:d0:c4:81:
                    4c:c2:70:cc:b2:ba:3b:46:10:d8:d4:1b:53:5e:2a:
                    ca:8a:fb:c9:45:74:7c:4e:e4:60:c0:67:79:3d:a1:
                    06:aa:3d:0e:a6:15:e5:e4:63:62:bc:e0:98:2a:09:
                    85:61:f9:c3:c1:ce:00:77:75:2b:3d:22:6b:bc:c8:
                    6c:0c:7c:e2:a1:0a:c7:a9:9c:94:33:ae:fb:e9:0a:
                    cf:c8:16:ee:79:ce:b7:6c:5c:fe:ca:dd:14:6f:f3:
                    10:da:18:ed:bf:37:7d:9a:1a:ec:94:06:e9:88:49:
                    eb:3a:2b:fa:8a:ca:e7:6b:a8:e9:61:cb:36:da:62:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9E:93:8D:E6:B9:E5:3A:F8:6F:56:AE:DC:3A:EB:17:61:BE:AC:BE
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265303.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.172.0/22
                  177.126.1.0/24
                  177.126.6.0/24
                  177.126.8.0/24
                  177.126.10.0/23
                  177.126.13.0/24
                  177.126.15.0/24
                  187.120.12.0/24
                  189.39.216.0/22
                  200.150.164.0/23
                  200.150.167.0/24
                  200.150.169.0-200.150.170.255
                  200.150.172.0/24
                  200.150.174.0/23
                  201.87.128.0/24
                  201.87.131.0/24
                  201.87.133.0-201.87.137.255
                  201.87.139.0-201.87.142.255
                  201.87.144.0/24
                  201.87.146.0-201.87.150.255
                  201.87.152.0/23
                  201.87.157.0/24
                IPv6:
                  2804:2dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:5b:5e:45:a7:37:f0:2a:81:d6:8d:24:7a:1f:f6:03:f7:
         62:3f:cd:7a:8c:2f:b7:f8:d6:ce:28:e6:89:b1:95:2a:1c:5a:
         81:d2:51:7c:3e:ee:e9:1d:4c:b4:d8:30:fd:ad:2e:d7:ce:92:
         eb:83:45:07:be:a1:4b:aa:ee:b8:1b:0b:a4:23:6a:b9:06:c3:
         95:51:8d:f8:2b:8e:87:69:80:5f:4c:c3:47:5b:db:8f:04:01:
         d4:2e:2d:fd:7e:79:2f:c1:f0:5b:68:17:af:56:45:7a:e5:5a:
         51:56:bd:62:29:22:97:56:13:cb:df:38:9b:3a:94:10:a0:bd:
         81:01:fa:e0:7b:7b:5c:7f:7d:36:58:d4:ad:2d:d1:56:be:a1:
         d6:cd:cc:18:a7:bb:19:f5:48:38:36:a7:f4:93:5e:48:13:97:
         df:7e:92:58:f4:61:a6:f1:a4:4d:e0:2a:f0:dc:e7:4f:13:80:
         79:e8:67:c2:d6:a5:35:c7:43:78:87:16:83:e1:48:7f:5c:49:
         b9:88:a5:02:b9:61:12:18:bb:8c:b8:af:6e:0d:ee:a3:1d:2e:
         b7:c9:0c:75:33:d5:a9:22:36:a3:7f:9a:f9:87:bb:63:e6:fc:
         46:4f:65:e6:9d:79:98:c3:b3:f7:62:4e:53:e7:ef:ab:76:80:
         c1:b6:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:32 2025 by rpki-client