Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa
File:                     323830343a336235343a3a2f33332d3333203d3e20323636313432.roa (raw, json)
Hash identifier:          Ti20M6FDIILrU4wLk2muqnG+SegnVBNbcJ+ZHR4kVUI=
Subject key identifier:   44:FB:81:E6:64:3D:68:53:72:0D:6A:F0:E6:5C:87:D9:20:4B:F5:12
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       38493712BDA396035958DC4FBA615B5579DA7EF1
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:15 +0000
ROA not before:           Thu 06 Mar 2025 20:07:15 +0000
ROA not after:            Thu 05 Mar 2026 20:12:15 +0000
asID:                     266142
IP address blocks:        2804:3b54::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:37:12:bd:a3:96:03:59:58:dc:4f:ba:61:5b:55:79:da:7e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:15 2025 GMT
            Not After : Mar  5 20:12:15 2026 GMT
        Subject: CN=44FB81E6643D6853720D6AF0E65C87D9204BF512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:21:ab:fd:5a:c1:76:bf:c4:5e:c2:0c:ad:
                    91:53:95:99:d7:13:b1:c3:18:91:07:c2:fd:4f:c3:
                    cd:8d:2f:c3:40:bd:38:59:14:d1:34:6f:9d:bf:59:
                    b0:64:96:6d:52:88:c1:8b:5d:67:74:e5:ce:68:ab:
                    db:0e:eb:6c:0f:dd:1e:2b:6e:36:bf:2e:b6:f4:78:
                    1e:38:1b:4c:15:a0:a9:db:3a:1b:74:94:13:e2:63:
                    54:9c:66:d7:d7:f1:b5:17:31:2a:d1:8c:3b:e3:64:
                    1e:f5:ff:45:9b:ab:de:c2:02:36:5c:ef:3e:37:1c:
                    e2:73:21:24:ab:5e:6d:b7:13:36:b8:7e:67:9c:b6:
                    d8:29:11:5d:c9:d0:59:82:dd:95:cc:f6:10:50:9f:
                    77:ae:4b:3b:e4:3d:58:1c:bd:43:b1:07:89:2a:88:
                    13:c1:24:db:7a:38:4d:68:f9:ff:40:10:e8:21:ef:
                    d8:20:33:30:a6:be:c3:f8:5a:c2:ca:e0:b2:cc:b0:
                    43:64:77:48:f9:c6:82:97:f7:25:4c:29:32:cc:b1:
                    a2:2e:8c:91:e7:35:f1:f0:07:69:7a:bd:bd:9b:40:
                    76:da:72:15:1f:d4:ea:3e:89:0c:d6:33:52:e1:46:
                    d7:37:c4:d6:7a:55:83:5b:4f:47:23:3b:a7:2e:6b:
                    43:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FB:81:E6:64:3D:68:53:72:0D:6A:F0:E6:5C:87:D9:20:4B:F5:12
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54::/33

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:7f:3a:33:c0:5e:db:b7:f8:fb:be:f7:0a:d6:db:c8:55:
         00:f7:58:0e:22:d0:8d:ac:af:a3:34:9b:8a:24:f4:fb:e1:99:
         e4:7e:e0:b7:97:e6:54:67:df:a3:38:68:bd:fe:25:f0:58:ff:
         fa:8b:3a:aa:16:32:89:7d:aa:b9:63:db:6c:03:42:67:67:03:
         04:a7:69:aa:88:fa:dd:73:59:b1:1f:43:86:12:40:72:e4:f3:
         d0:f2:f8:05:e9:0c:b6:5e:a5:50:cd:25:ae:68:ae:dd:0f:23:
         0e:55:58:1b:a9:41:25:6e:96:b8:94:5a:64:3b:03:07:9f:04:
         73:8d:cb:80:a9:c0:97:8e:66:a4:f4:49:ad:7a:5c:46:c4:7e:
         a9:24:66:bd:ff:d3:30:6b:c0:9d:38:1c:0b:ca:91:cc:02:6a:
         92:4c:eb:aa:5a:13:fa:6c:b9:c1:c3:66:fa:f9:e5:f4:cd:d3:
         bb:14:0b:23:cc:4a:34:22:75:1d:c0:5b:3d:97:cd:b2:ab:e3:
         8e:69:39:4c:d3:3e:ef:92:fe:97:82:c6:9a:3a:77:b6:ce:22:
         c2:a1:fe:01:4f:d0:be:72:a6:89:8b:e5:0f:62:21:6f:8d:20:
         8e:8f:2c:4a:36:7c:8a:c6:0a:18:47:45:05:34:6e:7d:d0:57:
         42:21:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:33 2025 by rpki-client