Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa
File:                     323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa (raw, json)
Hash identifier:          7FyL2Yf4EpZ9+U4m1wa8RU7dwuQRq6ED7xGLPtdGg7k=
Subject key identifier:   2E:9A:4D:60:6D:6B:64:0F:28:6D:7D:65:25:E0:C8:7D:9B:2F:0A:21
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       6272294AE402B7DDF962E123B391F7B828E91F54
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:15 +0000
ROA not before:           Thu 04 Apr 2024 19:38:15 +0000
ROA not after:            Thu 03 Apr 2025 19:43:15 +0000
asID:                     266142
IP address blocks:        2804:3b54:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:72:29:4a:e4:02:b7:dd:f9:62:e1:23:b3:91:f7:b8:28:e9:1f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:15 2024 GMT
            Not After : Apr  3 19:43:15 2025 GMT
        Subject: CN=2E9A4D606D6B640F286D7D6525E0C87D9B2F0A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:6b:2a:fa:c9:f8:4c:dd:fa:5a:f8:75:37:
                    41:0e:af:d9:4a:d9:ee:44:ea:a6:5d:bb:83:51:95:
                    08:67:28:3a:25:03:f6:ec:7f:97:9a:46:9b:95:23:
                    78:53:07:c2:f4:31:7f:d3:22:e8:bc:d1:0e:59:5b:
                    1e:82:cd:9a:00:33:e8:20:0d:00:90:72:ae:83:a4:
                    53:c2:86:8c:74:cd:3d:9f:53:6f:e1:dd:ba:46:7f:
                    3e:69:35:06:11:42:01:84:ad:08:74:f8:9c:4b:3a:
                    fa:9c:ec:10:ab:a6:a2:4f:5e:e8:7c:0b:d6:9d:7a:
                    da:68:ac:8a:b4:40:95:df:de:ba:59:4f:42:6f:8a:
                    07:4c:d4:e0:9d:d0:2b:4d:56:86:02:1b:fd:76:82:
                    06:21:86:76:d9:5d:4a:83:9e:7b:32:fe:f1:33:bc:
                    f8:c0:0b:d0:ed:af:2c:d3:2a:ae:e5:52:dc:61:ad:
                    23:a0:59:36:01:10:68:e4:98:9b:a1:75:34:3e:05:
                    af:14:99:17:90:48:ae:49:57:e2:be:bc:8f:f4:39:
                    5c:12:ef:9b:05:94:8d:d0:cf:d7:95:b2:a7:0f:f1:
                    02:a1:11:80:54:a0:6b:c8:06:96:8a:3f:14:26:75:
                    1f:28:fa:59:fc:26:44:5a:fc:e3:ef:41:9f:d4:bd:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9A:4D:60:6D:6B:64:0F:28:6D:7D:65:25:E0:C8:7D:9B:2F:0A:21
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:86:de:5b:d3:b5:9d:6d:83:c4:44:0c:82:e8:f4:11:c3:8c:
         fc:1e:21:3f:4a:4a:8c:de:66:09:1c:10:4c:b8:0e:5d:a8:71:
         e7:e8:2f:7d:24:ff:b1:ef:e8:c2:f0:47:a4:ee:7d:23:49:e7:
         d9:84:0a:eb:e0:8f:f9:bd:f0:69:92:e0:39:db:ea:5f:5f:7a:
         45:e8:4e:02:30:50:e7:45:da:bc:44:da:24:19:e1:4b:be:c4:
         0d:d6:63:80:9e:f3:94:b0:c0:e6:1e:73:bd:74:66:93:2a:01:
         b9:e5:2d:e5:b8:a3:f7:c2:83:2d:1e:b4:ed:cc:7f:c8:c2:f6:
         05:01:9a:9f:c7:d9:55:d2:78:c3:d6:c4:26:af:58:9e:34:e1:
         3f:24:a5:17:8a:1e:f7:0d:48:8a:f2:61:3c:57:d9:2d:67:30:
         7e:4b:08:c9:22:07:7e:ce:7f:00:00:c8:e4:d9:ba:c0:be:3d:
         38:c0:e6:5e:62:16:f1:1b:db:69:95:dc:7f:1d:5e:02:48:2b:
         44:e3:ed:11:31:bf:72:07:46:8a:e3:4e:5c:71:a3:35:81:fe:
         0a:e9:4d:ae:13:cf:a3:a6:dc:55:82:66:80:97:e0:7c:7d:4c:
         6f:3b:3e:18:7f:7b:a4:d2:a7:2e:47:e5:db:41:10:16:e6:27:
         3e:ae:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:13 2024 by rpki-client on console-ams.rpki-client.org