Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa
File:                     323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa (raw, json)
Hash identifier:          2lEzfryzKLTROIdj/6lJ/UtegcRguItDCURcR2Z/oi8=
Subject key identifier:   99:A8:B0:DF:2E:6B:74:A6:3B:E5:49:6D:B8:DB:4B:E2:70:B3:0C:55
Certificate issuer:       /CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
Certificate serial:       6BEFA1D6392D5251DCAD41905C4CFE98A279B5B6
Authority key identifier: 04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa
Signing time:             Thu 06 Mar 2025 20:12:15 +0000
ROA not before:           Thu 06 Mar 2025 20:07:15 +0000
ROA not after:            Thu 05 Mar 2026 20:12:15 +0000
asID:                     266142
IP address blocks:        2804:3b54:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ef:a1:d6:39:2d:52:51:dc:ad:41:90:5c:4c:fe:98:a2:79:b5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04778BF6BF9D6A3D1CD052DA33657397CC555E41
        Validity
            Not Before: Mar  6 20:07:15 2025 GMT
            Not After : Mar  5 20:12:15 2026 GMT
        Subject: CN=99A8B0DF2E6B74A63BE5496DB8DB4BE270B30C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:6c:01:b3:c3:42:d3:a5:ee:5a:5e:e3:87:
                    43:7e:80:7a:4d:79:4b:9b:94:2d:eb:74:ec:c4:53:
                    30:ce:ab:91:b7:e8:c1:b0:ea:6d:dd:7a:5c:91:f2:
                    8f:10:44:4b:e8:2c:cf:d3:54:3f:9c:aa:a8:08:bd:
                    05:82:a8:69:f2:52:58:f1:bb:03:b2:80:6c:55:4e:
                    f7:74:1e:8e:27:6e:14:07:3d:cf:bc:58:1d:67:fe:
                    84:fb:d5:86:ff:1d:d7:94:31:82:48:ba:47:b5:31:
                    99:65:98:f9:30:f1:c3:c8:0d:28:3a:c9:a8:36:0e:
                    93:e7:87:68:18:4e:55:74:cc:d5:10:a6:fc:94:4f:
                    6b:3e:3e:f3:d3:af:af:71:be:5b:d2:83:aa:d2:76:
                    ab:10:0d:a1:ce:3b:46:96:a0:88:ab:52:eb:ff:bd:
                    c5:cf:ec:27:b9:df:fd:bb:32:f9:5c:ee:e0:de:33:
                    98:54:71:01:39:a5:73:02:e8:cd:c5:35:22:f3:80:
                    3b:23:bd:73:14:46:57:01:ca:9b:86:be:bd:a2:18:
                    9e:ff:35:1b:c9:27:2a:30:1f:c4:b2:e6:b2:6e:12:
                    ea:9b:de:86:24:9a:9b:19:6d:74:2e:9d:a0:cf:89:
                    bf:0f:9b:76:93:7c:90:e3:6e:68:43:aa:df:05:40:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:B0:DF:2E:6B:74:A6:3B:E5:49:6D:B8:DB:4B:E2:70:B3:0C:55
            X509v3 Authority Key Identifier:
                keyid:04:77:8B:F6:BF:9D:6A:3D:1C:D0:52:DA:33:65:73:97:CC:55:5E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04778BF6BF9D6A3D1CD052DA33657397CC555E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/1/323830343a336235343a633030303a3a2f33342d3334203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:2e:eb:52:c6:85:75:62:7d:f3:0e:49:14:a7:56:78:2d:
         72:6a:c7:e0:a1:46:cd:ac:6a:db:50:d7:53:21:36:24:e7:14:
         90:0b:fe:4c:43:91:38:8e:f7:d0:42:88:de:b7:28:52:cd:aa:
         52:18:cd:59:9e:b4:54:08:6c:6f:dd:f0:c0:6e:11:87:84:d2:
         b0:da:6c:4e:49:ea:56:23:5e:c2:53:ff:59:2e:f2:b5:90:7d:
         96:20:4d:03:45:5a:ee:c6:62:98:1d:3f:e0:a6:6c:85:15:2e:
         b8:bc:57:38:81:09:8e:32:6d:d5:ee:37:e0:cf:6d:a4:e6:88:
         91:5d:b7:4c:0a:c9:72:88:03:48:3d:db:2e:53:9c:9e:4b:a6:
         d1:78:bd:b6:5f:97:a0:28:bf:05:13:4f:f8:5a:a4:a9:d3:7c:
         b2:95:4b:4e:93:4b:98:bd:30:d8:fb:c6:37:33:c8:79:25:ff:
         13:11:7f:6d:9b:84:1e:53:0f:da:65:4e:54:b9:9b:60:37:ee:
         bd:38:7a:ea:55:b1:3f:2a:ad:c0:25:c4:3b:c1:1e:cc:3f:3f:
         b2:56:ed:ff:a9:7f:86:22:09:26:f7:ad:8e:31:be:05:1c:a5:
         7b:fa:29:00:2f:2a:f9:81:f6:24:25:9d:de:b8:6f:8e:c5:4a:
         26:da:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:15 2025 by rpki-client