Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa
File:                     323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa (raw, json)
Hash identifier:          iib5lJo3aK+9CfZocvO08Cn2+ABaz9GJErhuMjPCynA=
Subject key identifier:   24:CE:23:DB:41:AF:93:84:6E:04:E1:CB:51:57:F0:45:07:C2:49:F0
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       3333A0BC5E8FEC93C9F412B6803695E545502258
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa
Signing time:             Thu 06 Mar 2025 07:25:22 +0000
ROA not before:           Thu 06 Mar 2025 07:20:22 +0000
ROA not after:            Thu 05 Mar 2026 07:25:22 +0000
asID:                     265207
IP address blocks:        2804:2c44:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:33:a0:bc:5e:8f:ec:93:c9:f4:12:b6:80:36:95:e5:45:50:22:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar  6 07:20:22 2025 GMT
            Not After : Mar  5 07:25:22 2026 GMT
        Subject: CN=24CE23DB41AF93846E04E1CB5157F04507C249F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:ca:73:8c:34:a5:f2:85:a7:b4:e4:62:19:
                    92:75:48:96:74:ad:37:48:50:f1:44:43:ea:8f:32:
                    d8:4d:dd:6a:57:77:5c:c0:e9:cd:f3:dc:30:fd:86:
                    b2:df:77:c9:c9:af:61:6b:23:0d:8b:a0:aa:5a:a7:
                    77:2a:36:b0:31:22:d5:90:3c:13:4c:d6:c2:52:a1:
                    9b:51:d2:88:cb:db:55:6f:8b:50:aa:06:44:84:e5:
                    f7:7d:f3:5e:e2:72:47:f5:a3:6b:f0:a8:01:93:f9:
                    51:8a:c6:93:a3:a0:47:db:73:35:30:5a:4d:aa:87:
                    8c:55:e5:db:7d:5e:1a:a5:71:11:4d:61:eb:93:08:
                    dd:28:cc:49:2b:30:c6:c1:db:63:7e:b6:c9:4f:7e:
                    55:f5:59:10:2d:34:65:03:49:cc:2a:cb:97:17:22:
                    3e:4a:aa:79:48:33:61:f9:50:74:33:a6:5c:1a:9b:
                    9b:43:e9:88:ea:8a:b1:1d:86:e5:5c:cb:06:da:b2:
                    a9:08:6f:82:5d:20:aa:8f:c2:ed:b4:48:e6:bb:e1:
                    bb:06:0b:0e:bc:35:46:e8:82:f6:7e:a0:4d:4c:ed:
                    d5:5f:65:66:dd:78:00:1d:f2:9d:39:2a:78:4d:5f:
                    7a:fe:e0:1c:76:9e:41:09:f9:77:83:92:4e:ab:b1:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:23:DB:41:AF:93:84:6E:04:E1:CB:51:57:F0:45:07:C2:49:F0
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:e4:f2:c7:9e:16:cd:67:4b:e9:c1:67:cb:87:ff:f2:9b:f1:
         2a:ce:a1:65:89:9c:6f:eb:d2:f1:3a:d7:16:aa:46:eb:f4:60:
         6c:d6:f6:46:1f:09:e6:de:f3:bb:0d:db:f4:cc:ce:bb:9d:03:
         cd:c0:f7:89:0f:d2:12:e0:61:bf:d4:c5:b3:2a:64:45:bc:e6:
         d3:83:78:0c:5c:1d:4e:7f:f7:4f:86:5f:58:26:b1:3f:20:1d:
         ae:9c:8c:ff:42:b8:4a:74:f1:12:5a:12:92:3e:74:79:ea:99:
         fa:64:ee:61:4b:1f:35:bd:00:dc:b2:cf:5c:b2:6d:8c:0f:83:
         60:7f:7b:85:1d:58:42:3a:f1:a1:ac:4c:09:1e:a2:c6:62:e6:
         5c:1a:5a:e2:3a:14:02:0a:52:a1:dd:91:f7:b3:c5:1f:e5:a3:
         59:f9:05:eb:2a:2e:cb:c9:1e:de:8a:0f:5f:7f:fa:76:3f:b2:
         ee:3f:5f:13:13:3e:e9:2e:21:d2:0c:d3:8b:5a:43:a2:c0:29:
         16:07:46:e2:19:c8:c2:bb:fb:72:64:a5:df:d2:17:e6:cd:de:
         d9:c9:6a:5f:17:f1:9a:b3:6b:52:e3:5c:a6:ed:ff:18:8d:34:
         3a:18:de:32:e7:07:e5:05:5e:ad:7c:89:20:94:a2:ee:40:39:
         69:33:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:42 2025 by rpki-client