Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a343030303a3a2f33342d3334203d3e20323635323037.roa
File:                     323830343a326334343a343030303a3a2f33342d3334203d3e20323635323037.roa (raw, json)
Hash identifier:          SxZ3jeDcGsllwP8R/C0g8M8IN6uUCThXraphx0D2Vkw=
Subject key identifier:   E8:3B:AA:29:3B:18:60:B9:CB:E0:B3:B9:50:AE:A9:1C:78:D4:6C:63
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       06C0362F82765FEFC8BAA5344CC80D568FA3B024
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a343030303a3a2f33342d3334203d3e20323635323037.roa
Signing time:             Thu 04 Apr 2024 07:06:48 +0000
ROA not before:           Thu 04 Apr 2024 07:01:48 +0000
ROA not after:            Thu 03 Apr 2025 07:06:48 +0000
asID:                     265207
IP address blocks:        2804:2c44:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c0:36:2f:82:76:5f:ef:c8:ba:a5:34:4c:c8:0d:56:8f:a3:b0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr  4 07:01:48 2024 GMT
            Not After : Apr  3 07:06:48 2025 GMT
        Subject: CN=E83BAA293B1860B9CBE0B3B950AEA91C78D46C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:94:d7:77:d9:b5:71:14:aa:c9:ac:c3:d5:
                    b9:56:bf:27:f7:a2:73:44:30:93:c0:ba:6b:d8:72:
                    4f:64:5d:6c:6f:01:ab:27:66:bb:83:b1:5d:83:43:
                    c5:1b:bc:91:0c:42:2b:f2:bc:13:da:4b:f9:f5:1d:
                    80:64:5f:9f:74:d7:de:c6:b4:bf:9f:4a:27:53:c1:
                    fc:30:4a:a7:d8:d6:16:73:6c:1b:18:2b:4d:ac:04:
                    14:41:f6:8b:a1:31:8d:e6:f6:81:f6:c9:14:3f:a8:
                    10:9f:d3:0a:45:ae:17:a1:dc:7a:8c:6f:79:2e:e0:
                    0d:2c:52:14:e3:7d:43:6d:61:a5:5e:57:3a:57:93:
                    b1:7a:b8:dc:03:a7:a2:e4:45:c1:04:31:f7:40:66:
                    e8:ca:bf:8f:cf:d5:5f:d3:56:de:08:51:f2:db:08:
                    46:32:1c:22:e3:41:49:e2:c5:0c:69:8d:7e:89:16:
                    62:44:78:2a:f7:84:b0:25:93:c1:14:49:1a:9f:e5:
                    e2:54:d4:79:25:8b:f9:84:cb:5a:4b:24:27:95:1a:
                    a8:80:6b:92:b4:d4:8b:d8:01:f1:72:0d:e9:eb:05:
                    f9:f6:a1:04:ac:be:fe:13:4d:c9:67:d5:e9:1d:9e:
                    2f:7e:a9:fd:8c:06:ec:c0:46:7e:04:83:13:86:68:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:AA:29:3B:18:60:B9:CB:E0:B3:B9:50:AE:A9:1C:78:D4:6C:63
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a343030303a3a2f33342d3334203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:46:dd:46:94:44:38:1b:42:3b:07:6e:93:79:20:71:8f:28:
         75:ba:f0:c2:62:d3:6a:50:38:9e:61:16:66:cf:48:3e:5c:2d:
         31:c9:2e:b3:7f:ef:44:89:cb:b0:e0:03:ed:85:16:96:92:bd:
         c6:4d:1c:a0:5c:ba:aa:03:96:16:d6:1a:d9:0d:58:27:7b:f1:
         d3:c8:f9:b3:17:63:84:2d:ce:e1:32:5e:54:b6:88:fc:91:16:
         6d:72:9c:9a:55:4e:83:37:08:cf:68:40:2c:f7:37:88:ab:f8:
         fa:10:3a:0c:00:6a:0d:d7:6b:52:77:b7:d3:4e:d2:f6:3d:14:
         87:de:61:3c:1a:f2:89:37:c7:a5:19:4c:f6:41:1b:f1:64:b7:
         fb:10:3f:7c:95:ad:c3:2a:e6:56:2c:3a:93:b0:2d:75:58:73:
         1b:46:fd:29:52:8c:25:f6:26:8e:c9:fb:0b:eb:cd:ff:95:5e:
         d4:4c:1d:e3:3e:32:e6:43:78:bf:5f:59:9c:c6:62:85:a5:5e:
         9c:46:67:79:ab:dc:9a:73:48:81:81:b6:a8:34:f3:b7:d8:9a:
         46:a1:52:02:a6:ca:a0:a0:ca:dd:50:ec:f8:b8:84:5b:4a:d4:
         3c:cd:04:bb:e9:6a:e6:de:07:5f:a5:cb:1b:11:0b:59:9c:49:
         67:f2:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:56 2024 by rpki-client on console-ams.rpki-client.org