Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a343030303a3a2f33342d3334203d3e20323636313432.roa
File:                     323830343a336235343a343030303a3a2f33342d3334203d3e20323636313432.roa (raw, json)
Hash identifier:          x+5I7ImwY5TrKClqwIC2lxrVAl5LbhMcResjYESEWsw=
Subject key identifier:   50:72:9F:C3:D8:7B:3E:CF:BA:FE:BF:5A:C6:E3:62:2A:4C:49:61:45
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       635E6ED11D654E725565F249C9E0F3876C1D5671
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a343030303a3a2f33342d3334203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:16 +0000
ROA not before:           Thu 04 Apr 2024 19:38:16 +0000
ROA not after:            Thu 03 Apr 2025 19:43:16 +0000
asID:                     266142
IP address blocks:        2804:3b54:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5e:6e:d1:1d:65:4e:72:55:65:f2:49:c9:e0:f3:87:6c:1d:56:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:16 2024 GMT
            Not After : Apr  3 19:43:16 2025 GMT
        Subject: CN=50729FC3D87B3ECFBAFEBF5AC6E3622A4C496145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:c5:37:9c:30:c5:79:b9:15:52:58:f5:d1:
                    2f:3e:dd:03:80:ee:94:b8:9b:7e:e2:fa:54:6f:36:
                    6c:5e:f6:a1:4a:42:44:1b:75:d0:59:c4:38:ae:14:
                    0a:cc:f8:85:86:56:b5:21:c7:12:a4:12:9c:fe:12:
                    20:f2:a9:f4:63:b6:0c:69:e7:a8:ec:6b:ea:57:4b:
                    9d:f8:24:2b:16:88:33:a9:66:5f:73:ef:d2:0c:c5:
                    d3:4f:ca:fb:2c:32:56:62:f2:18:3b:9b:94:f5:08:
                    ed:20:14:43:29:57:7d:9f:88:98:dd:49:6b:4c:bb:
                    86:e0:90:3b:0a:4c:45:97:fd:76:ac:0e:88:ba:83:
                    41:a7:40:5e:f7:9b:b1:fa:9a:cd:76:3b:9e:f7:a0:
                    72:19:c5:05:58:6a:b1:38:02:55:40:48:5c:57:b2:
                    97:2c:a5:05:57:ba:ce:a6:5d:78:e0:e9:f2:06:1f:
                    d8:2c:1a:a2:37:0e:89:9e:fc:bf:22:17:e3:ea:2d:
                    37:4f:5f:a5:b7:a3:97:d1:79:8d:9e:8c:71:d7:7d:
                    7f:82:df:7d:e2:b0:87:d4:12:9c:0b:88:94:52:db:
                    ce:29:db:d5:df:07:1f:be:30:d2:5d:dd:72:f3:07:
                    3b:d9:2f:fe:fa:84:16:33:f0:27:b6:ef:c9:ee:08:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:72:9F:C3:D8:7B:3E:CF:BA:FE:BF:5A:C6:E3:62:2A:4C:49:61:45
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a343030303a3a2f33342d3334203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:4b:ff:af:39:0e:cb:97:bb:2c:f4:d7:13:cb:a0:e4:fc:65:
         f6:75:0d:8e:60:3e:f8:17:a6:8f:51:70:62:d0:1b:2a:a7:e4:
         04:c0:a4:2a:e5:f5:58:6b:3f:ce:89:50:64:8e:97:3d:da:bf:
         51:5c:da:43:ad:7b:99:4a:26:27:9d:bc:c0:f5:1d:60:47:97:
         2d:b9:db:68:34:51:e4:1e:89:ab:1f:3e:ca:1c:6f:11:43:ad:
         49:79:a3:78:38:dc:df:24:da:0a:6d:6d:66:89:c8:8b:4a:41:
         fc:84:be:99:20:25:d9:50:9c:32:73:d9:59:79:5f:4d:73:1b:
         b7:96:03:98:ec:3f:f9:1c:24:b5:78:c7:5f:51:7b:02:b4:2b:
         65:73:24:6e:b2:e7:2a:3c:b4:ce:c2:e1:d9:84:70:7d:02:78:
         3e:5c:17:af:4c:2a:c4:41:23:57:2b:44:c9:62:a3:49:b9:aa:
         32:94:09:4f:6f:8f:d1:fd:d3:35:3b:00:fb:e6:5f:9d:4f:76:
         0b:e7:27:21:ad:ff:9a:aa:e1:63:f7:46:ea:68:01:e8:3e:54:
         f0:46:d1:68:44:54:6f:3b:df:7f:8c:1c:5a:c0:60:a3:f3:17:
         d1:98:ae:bb:9a:db:7d:e6:f8:3a:94:3b:aa:6a:2a:d3:38:3b:
         37:37:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org