Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa
File:                     323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa (raw, json)
Hash identifier:          NDx2thtBMmgFrf8x7y/w1xK41HILNdRLpgF+KvjyLY0=
Subject key identifier:   95:D6:43:45:15:BD:E3:B4:87:D8:F4:F0:22:07:1F:ED:C8:EE:8B:79
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       3EA9BD88F8CBD992EC9D39D5E8A9C4BD0CB0A927
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:15 +0000
ROA not before:           Thu 06 Mar 2025 20:07:15 +0000
ROA not after:            Thu 05 Mar 2026 20:12:15 +0000
asID:                     266142
IP address blocks:        2804:3b54:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a9:bd:88:f8:cb:d9:92:ec:9d:39:d5:e8:a9:c4:bd:0c:b0:a9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:15 2025 GMT
            Not After : Mar  5 20:12:15 2026 GMT
        Subject: CN=95D6434515BDE3B487D8F4F022071FEDC8EE8B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:ca:f3:85:e6:c0:ab:79:3f:dd:92:ad:c7:
                    2d:4d:36:e4:e7:33:72:21:a2:b2:ae:ee:08:f6:80:
                    c9:0e:09:b4:e0:fc:0b:0c:eb:8b:d8:59:ce:43:a1:
                    42:3f:67:12:06:d3:31:a6:f1:c2:83:0d:dd:e8:2c:
                    0f:53:f6:85:0f:b1:8b:40:4c:77:4b:47:67:96:36:
                    39:2e:bf:24:57:28:8c:0c:fe:ee:8a:82:69:ff:51:
                    e3:4b:0d:19:0a:66:8c:24:b8:c1:30:73:3d:67:4c:
                    bf:fa:5e:96:b1:a3:67:a3:41:ce:a3:c5:5f:de:24:
                    13:0f:6e:91:8b:62:ca:67:f6:7c:b0:89:60:5a:f2:
                    2d:73:4b:b6:11:2f:dc:16:88:6d:56:34:1c:c4:79:
                    ac:6b:82:62:58:27:cc:c1:fc:59:82:72:85:a2:49:
                    3b:73:16:83:bb:fb:c7:65:2c:42:09:44:a1:8a:ab:
                    74:37:1c:fd:49:54:e8:d4:2a:f0:60:54:45:61:9a:
                    d7:55:0f:f0:7d:77:81:a4:1c:50:64:ce:a7:de:12:
                    1b:ce:71:b9:49:76:9f:20:77:8d:ea:f6:8e:59:8c:
                    02:26:52:f5:4d:1e:de:01:ee:70:e7:86:9c:03:e6:
                    72:0e:85:a1:20:11:d2:a7:8a:d9:6a:a5:a2:c0:e6:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D6:43:45:15:BD:E3:B4:87:D8:F4:F0:22:07:1F:ED:C8:EE:8B:79
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:57:1b:14:e5:ed:f4:7b:46:d2:d4:36:ac:da:23:2c:bd:51:
         85:d3:b7:2c:b9:a0:2b:28:96:da:ef:9c:ed:88:ad:bb:b2:61:
         d5:f6:56:1b:18:be:14:54:4c:5a:75:ac:61:ad:6b:86:70:2c:
         45:06:c7:3a:27:94:a0:42:f9:f3:af:b9:5d:43:17:8a:22:f2:
         a0:96:b9:6d:16:8b:05:7f:48:01:be:73:90:ad:8f:c1:0b:e8:
         63:9f:0e:65:63:d3:d6:80:71:32:11:60:fc:e8:a6:93:db:08:
         17:b1:38:fb:59:55:f1:f8:8a:e4:d5:58:70:d7:c4:61:25:27:
         1f:8a:fb:d6:cf:9f:df:86:f4:16:96:c2:fa:0c:26:1f:22:cd:
         88:c2:39:81:17:57:01:08:c6:2a:c7:90:ba:32:09:8f:25:d0:
         63:82:28:75:6e:c0:1d:6c:71:59:af:d7:d1:8d:ab:9d:79:bf:
         62:9c:3d:5d:1f:cb:6b:dc:86:83:00:c7:86:7a:e5:03:1e:e9:
         d3:e6:cf:25:8a:6b:55:d1:80:14:f8:f5:38:f8:d2:2f:db:f3:
         8e:0d:e4:29:82:86:db:1e:20:8b:e7:6a:01:25:7b:0b:57:82:
         02:96:5c:7d:8e:ce:d2:e4:e5:b3:5b:f3:a4:a4:6e:e3:16:63:
         ed:04:b7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:24:03 2025 by rpki-client