Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa
File:                     323830343a336235343a3a2f33332d3333203d3e20323636313432.roa (raw, json)
Hash identifier:          9GQ9qL/x2PY9/jVnh6bALEGIhqTaP6syKIaH0VNb1H4=
Subject key identifier:   40:2F:3F:33:50:0A:52:4D:D3:B3:D4:B1:01:1D:4B:CA:16:3A:AE:FC
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       09795C35D81EEB2767F293A37029A27A05B0A976
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa
Signing time:             Thu 04 Apr 2024 19:43:15 +0000
ROA not before:           Thu 04 Apr 2024 19:38:15 +0000
ROA not after:            Thu 03 Apr 2025 19:43:15 +0000
asID:                     266142
IP address blocks:        2804:3b54::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:79:5c:35:d8:1e:eb:27:67:f2:93:a3:70:29:a2:7a:05:b0:a9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Apr  4 19:38:15 2024 GMT
            Not After : Apr  3 19:43:15 2025 GMT
        Subject: CN=402F3F33500A524DD3B3D4B1011D4BCA163AAEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:9c:88:f6:08:03:fc:6d:22:81:cf:52:48:
                    37:eb:42:67:f6:8e:3e:d7:29:66:f4:3f:f4:84:9c:
                    21:84:80:15:62:8e:3d:26:2f:39:df:22:15:16:9d:
                    74:2b:2d:6d:7e:d0:80:07:09:e4:e5:8d:e1:9a:57:
                    c5:ee:1b:c6:23:7d:81:97:66:09:9d:ed:df:0a:46:
                    29:39:cc:9a:7b:02:f2:6d:57:ab:98:58:a0:83:e7:
                    60:d2:2a:e8:22:40:a2:b7:da:88:0c:c1:37:47:f3:
                    82:94:98:4b:23:b4:f3:28:1f:b4:e6:68:13:94:5f:
                    64:90:27:19:05:09:c1:5a:aa:63:c8:7a:6e:34:1d:
                    2b:64:45:27:9e:a5:2c:71:d3:a5:f8:e4:c3:99:6c:
                    eb:f6:24:3f:a8:26:8f:cb:68:21:9f:2d:c1:d8:2b:
                    68:27:3b:fa:61:50:af:99:1d:e6:bc:23:52:49:61:
                    cb:e8:af:bc:8b:28:11:52:d8:a9:75:dd:80:ae:e3:
                    0f:88:f8:99:a3:d9:77:c2:6c:ed:68:cf:12:5a:98:
                    a2:1d:a7:71:85:b5:f1:6c:68:a5:41:d0:bd:16:9e:
                    e8:79:b7:bc:6a:f2:ad:d7:a4:5a:a2:da:e2:ae:31:
                    24:b8:1d:8f:ca:b4:97:58:dc:67:6b:10:8a:dd:2e:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2F:3F:33:50:0A:52:4D:D3:B3:D4:B1:01:1D:4B:CA:16:3A:AE:FC
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33332d3333203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54::/33

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:f4:9a:1f:04:0b:83:d9:dd:c2:bf:5d:03:50:e0:00:01:
         72:68:0f:87:92:f3:9f:8a:33:53:33:18:e1:b9:2c:35:e5:c3:
         fc:64:7d:b3:02:c5:37:76:8d:1d:35:78:5f:39:d8:44:72:00:
         3b:e9:e2:57:a6:94:f5:20:65:03:4b:ab:66:97:8c:6a:38:b4:
         66:94:94:f7:73:32:93:3d:1c:ac:ce:15:ba:ea:eb:30:08:ea:
         2c:6b:7d:a7:4c:28:dd:cb:f3:27:af:f9:25:56:1a:f1:46:3c:
         33:29:e5:90:94:df:c6:d9:2b:d6:99:c4:69:e9:a5:1c:78:68:
         91:75:82:70:ec:24:20:fc:0b:e0:86:8b:7b:85:6c:f2:ae:f7:
         64:e7:ab:a5:29:4f:05:d0:04:0b:39:f0:aa:b5:42:1d:89:24:
         a7:60:6e:fd:e2:95:df:0f:02:58:5f:99:01:f5:d2:18:84:59:
         16:c6:15:cb:ed:f8:bf:1a:1e:38:4c:3c:87:c6:fb:49:da:13:
         23:0f:e5:c7:ca:46:30:e7:30:9c:8d:f6:4a:1c:03:3e:39:e9:
         b2:4b:cf:a9:c1:62:82:f1:ea:b4:95:e3:e5:a0:0a:a0:49:14:
         f8:c1:c8:da:95:fd:8e:89:8e:a0:df:50:24:94:4a:0c:3e:44:
         fa:eb:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org