Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa
File:                     323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa (raw, json)
Hash identifier:          LVcTgtCkowzlHt3gYpohMz4zTzncfGFtH7mFY4EZlvw=
Subject key identifier:   F3:82:1E:94:16:BA:E1:AC:03:C0:F0:2D:51:7F:58:40:7A:67:92:75
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       7BBB6B51749358CA70522AE2BF87F3C00F240C83
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:14 +0000
ROA not before:           Thu 04 Apr 2024 19:38:14 +0000
ROA not after:            Thu 03 Apr 2025 19:43:14 +0000
asID:                     266142
IP address blocks:        2804:3b54:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:6b:51:74:93:58:ca:70:52:2a:e2:bf:87:f3:c0:0f:24:0c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:14 2024 GMT
            Not After : Apr  3 19:43:14 2025 GMT
        Subject: CN=F3821E9416BAE1AC03C0F02D517F58407A679275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:e5:ed:83:71:94:c7:81:14:cc:bb:4b:fc:
                    a4:b1:3c:a4:94:a6:7c:7c:f5:09:bc:b2:01:46:4e:
                    2c:82:63:d2:dd:a1:5d:a7:60:4a:af:86:f0:40:a8:
                    e1:94:fd:46:d5:92:e4:0d:bb:10:e8:e1:4d:36:70:
                    ac:72:18:c7:21:67:2c:e4:87:3c:a5:42:6f:51:d8:
                    79:48:b0:2a:40:77:f7:07:3e:2b:c4:29:d4:fd:a8:
                    e4:36:cf:a2:54:fa:ea:9b:9c:6c:ce:67:39:2c:35:
                    f0:46:0d:60:1e:25:7c:22:48:2e:15:d4:f7:cd:e5:
                    58:f2:d2:ce:12:2a:6b:f8:af:a0:37:f8:fd:c0:c9:
                    df:fd:e6:a2:93:1a:a1:9c:59:a1:60:80:d5:85:2d:
                    0b:fc:ac:2c:32:14:71:47:13:1a:6d:18:c8:7a:c4:
                    a6:37:ab:45:fa:75:4f:b2:5a:95:65:15:76:6c:c4:
                    4c:24:0e:b1:92:1f:1b:5a:ba:b2:23:8d:6a:8e:21:
                    64:80:e5:20:06:93:19:87:f4:2e:cb:40:e3:1c:22:
                    5a:55:7b:a0:0e:97:cf:14:3f:3b:87:74:94:9c:bf:
                    1f:92:3e:30:2e:de:fc:5b:2b:04:48:a7:e3:38:87:
                    b1:0d:cf:e8:4f:a3:37:36:d9:2c:bd:65:91:d1:85:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:1E:94:16:BA:E1:AC:03:C0:F0:2D:51:7F:58:40:7A:67:92:75
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33332d3333203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:bc:05:c5:87:db:c8:81:f4:b0:3a:dc:3d:3b:c2:4d:6d:
         28:89:1b:c1:fe:93:74:e7:a2:4a:4c:5f:6f:00:d2:7d:1d:2b:
         e1:cd:60:23:48:38:ab:70:2a:b2:3f:d5:a6:44:2d:ec:ba:91:
         bf:ed:84:4a:ce:c6:ad:81:ec:26:bc:96:25:86:a7:50:e5:e7:
         0c:61:67:f3:be:20:f2:b6:8a:ec:0a:fa:9e:86:c9:41:9b:ef:
         62:7a:20:31:03:8e:c9:7b:f9:60:a3:27:3f:83:a7:8c:13:2e:
         f3:c9:f9:23:92:56:2f:fd:7e:a9:d0:8e:de:af:21:f3:ba:d6:
         58:de:83:43:a2:22:49:05:25:fa:4f:db:ca:78:10:1e:43:4e:
         6d:60:96:90:84:5e:ce:17:6b:ac:5c:5e:fb:19:f5:ae:01:df:
         10:4f:31:7f:82:38:71:36:73:30:9b:93:a3:a0:22:1b:74:96:
         4e:84:ba:eb:d6:34:86:19:56:56:a8:80:b3:70:e9:a1:00:a2:
         5f:0a:49:9c:0a:02:51:71:ec:a1:ae:60:db:82:98:eb:88:ab:
         ae:02:10:97:fb:43:57:3a:7a:4d:95:3a:de:4b:f4:6b:03:f7:
         ba:07:4c:87:f1:27:42:a2:72:17:01:9d:4e:6c:74:40:b3:3d:
         bd:80:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org