Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33322d3332203d3e20323636313432.roa
File:                     323830343a336235343a3a2f33322d3332203d3e20323636313432.roa (raw, json)
Hash identifier:          LFKFVIDNNJyiI46xbH7wmKTClrGaMzysu08zPTNVAyQ=
Subject key identifier:   10:E9:7B:C1:94:1E:F0:10:4A:04:51:36:B7:52:AB:4D:EF:AE:84:5A
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       5A1611A7728FACB558DA1D036A9AAFD1EF34FFEA
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33322d3332203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:18 +0000
ROA not before:           Thu 06 Mar 2025 20:07:18 +0000
ROA not after:            Thu 05 Mar 2026 20:12:18 +0000
asID:                     266142
IP address blocks:        2804:3b54::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:16:11:a7:72:8f:ac:b5:58:da:1d:03:6a:9a:af:d1:ef:34:ff:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:18 2025 GMT
            Not After : Mar  5 20:12:18 2026 GMT
        Subject: CN=10E97BC1941EF0104A045136B752AB4DEFAE845A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:e7:6c:0b:cf:ad:b1:f4:77:44:59:46:80:
                    e9:13:74:ae:e2:c1:ba:c8:31:81:d0:97:ac:50:d8:
                    58:16:5a:c9:79:03:05:6f:e8:39:8b:48:4d:03:e1:
                    d4:8d:1c:b7:5b:57:43:27:d7:10:14:d3:b4:6e:cf:
                    61:56:01:a5:24:e2:33:a9:63:9d:89:e4:aa:db:1d:
                    1e:ee:0f:3a:df:b1:32:e6:f1:45:13:89:5d:59:76:
                    8e:61:35:91:9b:51:24:1f:bb:41:ab:a5:c3:0a:e4:
                    4e:9d:ad:08:3f:6a:ab:91:88:f5:41:ae:be:20:e6:
                    69:d0:cb:ca:86:b4:0a:b5:a8:16:1d:38:6f:0b:2c:
                    b5:21:25:a6:e7:75:30:90:99:cc:3a:3e:7f:09:1c:
                    66:da:74:eb:87:f7:1f:ff:50:b9:60:2d:10:85:9d:
                    84:31:b8:83:9c:bd:36:c5:4c:b4:ea:d1:fc:fb:84:
                    5c:44:c2:8f:f4:06:4e:c3:15:d4:66:6c:37:14:43:
                    25:39:77:70:20:43:83:f7:d1:53:d7:6d:78:7c:8a:
                    c8:5a:0b:c1:a1:70:95:f9:ed:90:2c:67:c9:63:50:
                    8e:d1:4a:cf:22:79:5f:a6:d5:eb:ea:eb:64:d3:50:
                    f1:27:fe:f2:53:2f:a5:c8:ac:0c:1e:01:27:f1:ca:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:7B:C1:94:1E:F0:10:4A:04:51:36:B7:52:AB:4D:EF:AE:84:5A
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33322d3332203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:45:b4:32:44:e0:6e:51:33:88:43:ff:c7:d3:f0:5f:e1:
         65:4f:df:e7:6b:bb:4e:a7:e1:b7:60:fa:14:f6:33:e2:e3:1c:
         1c:1f:76:ed:84:c4:9d:8b:ae:4c:e7:f7:87:05:29:a3:a5:38:
         60:88:27:fa:78:7e:4a:03:f5:be:65:41:89:3d:00:5c:1f:2a:
         c0:6c:9e:bb:b2:f5:36:7e:78:e4:46:38:b7:b2:31:25:93:51:
         0f:2b:13:a0:dc:bc:d8:dc:a7:83:29:f7:74:ea:67:21:d5:82:
         08:43:dc:fa:12:0e:97:c6:9d:65:7c:63:3d:5a:c7:5e:5a:6a:
         9c:65:11:5b:36:00:4b:7e:bf:50:f7:40:5a:06:1b:4d:83:be:
         d5:45:dc:b8:76:03:d8:8e:bd:97:1c:47:c5:06:55:78:d1:cb:
         e6:a0:cd:e3:5f:27:38:a2:cb:24:5a:47:09:39:2b:bc:bd:30:
         c6:46:d1:fa:00:65:56:97:fd:b7:83:9c:2f:8f:27:4e:9f:c7:
         55:ca:be:8b:a4:09:ff:5f:57:6b:9f:1a:63:33:aa:4f:e4:61:
         e7:e2:8b:57:7e:05:ba:47:81:26:3e:c9:6a:78:88:23:de:24:
         ad:97:3e:71:95:0c:91:15:be:f2:8d:10:e1:cf:0e:ce:94:9d:
         62:fe:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:34 2025 by rpki-client