Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a313030303a3a2f34302d3430203d3e20323731373434.roa
File:                     323830343a383035343a313030303a3a2f34302d3430203d3e20323731373434.roa (raw, json)
Hash identifier:          xWzoIqkm3KPeK5QlbAbdyi0/8Lxh9C80Gi5tIYxb8IY=
Subject key identifier:   F4:99:97:2B:64:F5:80:C2:64:EC:89:DA:9C:DF:26:C3:B0:07:9E:22
Certificate issuer:       /CN=44C0DA9572BD779420F65A901B1FA51E6E3E6B5D
Certificate serial:       34C3E6228B763D4D9270E0CCCDBFE0A893245181
Authority key identifier: 44:C0:DA:95:72:BD:77:94:20:F6:5A:90:1B:1F:A5:1E:6E:3E:6B:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a313030303a3a2f34302d3430203d3e20323731373434.roa
Signing time:             Thu 27 Feb 2025 00:43:27 +0000
ROA not before:           Thu 27 Feb 2025 00:38:27 +0000
ROA not after:            Thu 26 Feb 2026 00:43:27 +0000
asID:                     271744
IP address blocks:        2804:8054:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.crl
                          rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c3:e6:22:8b:76:3d:4d:92:70:e0:cc:cd:bf:e0:a8:93:24:51:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C0DA9572BD779420F65A901B1FA51E6E3E6B5D
        Validity
            Not Before: Feb 27 00:38:27 2025 GMT
            Not After : Feb 26 00:43:27 2026 GMT
        Subject: CN=F499972B64F580C264EC89DA9CDF26C3B0079E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:ac:87:72:3d:1f:f5:21:19:43:99:c3:60:
                    24:02:8e:9a:ca:b0:b0:c9:c5:67:0b:34:5d:1a:e1:
                    6d:d7:60:14:05:e6:96:d1:8a:ac:55:c8:d2:5b:44:
                    64:cf:44:76:04:4d:a4:8e:2e:13:0f:10:19:50:78:
                    2c:24:14:ff:1f:b7:01:0a:3a:1b:62:a1:31:2f:02:
                    b4:f3:03:91:e4:19:4e:59:e4:d9:61:fb:bc:2e:5b:
                    2c:2d:87:e4:47:3e:f4:05:bb:29:cd:8f:86:3d:41:
                    fc:ad:95:9a:ae:a5:8e:b0:33:b7:18:8c:e6:2e:4e:
                    cd:20:a3:42:36:41:d6:55:f6:fe:0f:63:9c:7f:3f:
                    df:35:68:05:a9:80:f2:57:c1:d9:80:b9:a1:50:67:
                    b6:a4:6d:87:c0:3b:49:2d:0d:d0:8c:2a:9e:b2:e2:
                    01:2f:4d:ea:ba:58:db:30:1c:cd:4e:50:56:77:07:
                    e4:69:8f:72:1e:de:c6:16:23:09:ac:38:15:6c:de:
                    84:02:ef:10:2b:67:b1:60:a5:a1:ef:3d:d5:bf:c9:
                    f0:9e:f1:2e:01:db:75:fe:94:78:8a:93:1e:75:bd:
                    03:e4:67:b8:5b:63:54:2a:69:75:2c:99:24:55:7f:
                    22:3c:df:d9:de:77:b1:9c:94:fc:10:82:fa:1b:47:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:99:97:2B:64:F5:80:C2:64:EC:89:DA:9C:DF:26:C3:B0:07:9E:22
            X509v3 Authority Key Identifier:
                keyid:44:C0:DA:95:72:BD:77:94:20:F6:5A:90:1B:1F:A5:1E:6E:3E:6B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a313030303a3a2f34302d3430203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8054:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:7a:33:e5:6f:8c:44:bb:d0:b0:b8:54:ef:c7:49:0b:2c:83:
         a1:12:69:45:a3:6a:c4:84:29:46:4d:98:e2:28:17:08:c6:3d:
         19:4c:0a:3a:4d:1a:5f:58:f8:6a:63:0c:14:4f:b8:eb:0e:11:
         56:b7:09:0f:36:13:d3:dc:76:b8:b2:ab:91:9a:a5:14:6f:49:
         11:85:a1:8e:0d:48:71:32:3d:67:f3:bc:e7:16:ec:42:03:7b:
         01:e7:e8:5e:4b:f9:fa:a0:2c:d5:dc:86:a7:44:ff:b4:cc:cc:
         55:5c:bb:57:34:83:a2:91:61:48:83:70:b5:81:5b:28:02:47:
         d9:7a:02:1f:9b:54:8d:ba:66:a5:c7:05:13:9e:af:19:14:43:
         1b:49:da:ee:61:84:0c:35:da:ea:c7:df:de:f0:61:66:34:b1:
         49:bf:ff:36:a2:d5:ce:8d:d3:45:d6:0b:65:ed:7b:d5:ad:74:
         4d:28:16:2b:6d:04:ac:10:08:e9:b4:c4:1d:ae:3c:44:84:3c:
         75:eb:c0:d4:53:49:fc:0c:3b:83:f4:18:92:72:3e:87:dc:58:
         7a:72:ca:e7:5e:0f:33:dc:32:0e:5e:0b:6c:9b:8b:4c:f7:ed:
         16:9a:77:8c:4d:6e:cd:bd:59:86:21:0c:2a:1f:53:33:5f:e0:
         0d:b4:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:35:09 2025 by rpki-client