Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33342d3334203d3e20323636313432.roa
File:                     323830343a336235343a3a2f33342d3334203d3e20323636313432.roa (raw, json)
Hash identifier:          inby0srHaRN7vZN5TtZKuyj5QNyD+7BFCkexqcsHj4A=
Subject key identifier:   9A:C9:B0:D5:FC:16:AF:8C:CC:D1:51:49:FE:36:0A:B6:E0:EA:AD:93
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       461E818D8390D914F48F889E159343188AF2DADA
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33342d3334203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:17 +0000
ROA not before:           Thu 06 Mar 2025 20:07:17 +0000
ROA not after:            Thu 05 Mar 2026 20:12:17 +0000
asID:                     266142
IP address blocks:        2804:3b54::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1e:81:8d:83:90:d9:14:f4:8f:88:9e:15:93:43:18:8a:f2:da:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:17 2025 GMT
            Not After : Mar  5 20:12:17 2026 GMT
        Subject: CN=9AC9B0D5FC16AF8CCCD15149FE360AB6E0EAAD93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b6:1a:52:db:92:99:5c:16:00:d5:9f:04:eb:
                    5d:0e:73:bf:e4:54:35:17:bf:1e:77:d3:53:04:06:
                    50:80:f6:b4:35:27:bb:3f:f8:25:67:63:c6:da:7c:
                    74:5d:0f:8b:c2:5f:a1:4f:39:89:fb:28:fd:98:1f:
                    c3:59:d2:a1:5a:5b:b1:c1:28:e0:0d:07:19:a1:f4:
                    a1:af:ca:99:59:ae:20:d3:1d:99:c6:23:23:7b:50:
                    e2:bb:59:b7:ee:b3:34:da:c5:f4:4c:06:cf:54:26:
                    55:a8:a2:4d:ad:2d:03:39:c0:d6:8e:0e:e0:4d:ca:
                    0d:e8:61:0c:08:07:3b:eb:88:d1:c2:12:a0:2c:b1:
                    9a:5c:d9:1e:d6:0e:84:d9:61:e2:19:fa:28:e2:5b:
                    bb:c2:f1:29:d8:e6:42:da:0b:99:fd:a4:64:f4:3c:
                    d6:13:93:47:fc:4c:83:23:31:08:60:79:c9:b4:7e:
                    aa:2b:df:a7:75:54:74:47:2a:00:a1:4f:a7:c5:38:
                    7f:15:d3:af:4c:e3:c7:de:a8:02:4f:ce:1c:d4:27:
                    52:77:91:0d:81:a3:85:a6:f8:85:a4:8d:51:6b:d2:
                    24:43:46:a4:ee:24:73:fa:45:d4:72:00:ef:3b:c6:
                    42:d6:55:17:3b:10:3e:cf:4a:0d:1d:9a:e5:e3:b3:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:B0:D5:FC:16:AF:8C:CC:D1:51:49:FE:36:0A:B6:E0:EA:AD:93
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a3a2f33342d3334203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54::/34

    Signature Algorithm: sha256WithRSAEncryption
         d6:7f:22:ad:37:88:7b:83:04:64:e7:fe:cb:4c:cc:d7:23:16:
         7d:38:04:c1:15:50:ab:e3:aa:1d:1a:88:87:8d:95:58:df:52:
         b6:90:68:c4:5d:de:1b:46:c3:84:9c:d0:24:be:50:ba:19:be:
         8e:15:fc:e8:04:e7:99:64:d5:27:11:e5:dc:6d:78:6e:6e:ae:
         2b:c1:f7:ac:40:a2:54:e7:30:8a:2f:d3:d4:7d:50:32:f4:1a:
         d6:68:4f:e9:85:73:b1:61:e7:f5:52:ba:d8:24:2b:8b:eb:90:
         cc:36:70:ed:ac:16:f3:46:88:3e:fd:56:a2:8c:9b:26:0c:53:
         60:dc:0f:2e:0b:f7:de:e8:61:8f:fc:01:c4:16:65:77:1f:18:
         4d:a1:76:63:7d:32:67:ef:17:17:47:7c:4c:f2:ca:71:73:24:
         f2:59:84:a0:68:50:f7:d4:39:b9:a2:e8:29:8c:af:74:c9:0d:
         bf:ed:3f:8f:5b:ea:9e:94:65:b6:d0:cb:22:48:64:10:53:d4:
         b4:e6:8c:d3:13:31:3e:09:d6:97:55:69:df:0c:bd:9e:0f:fd:
         a5:ad:ba:95:55:83:4d:0c:97:b7:2e:8e:4c:cf:7f:ca:39:e5:
         c4:dd:8a:67:1e:2a:88:02:1d:26:2c:cf:ee:9b:a0:21:ec:aa:
         c8:1d:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:35 2025 by rpki-client