Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa
File:                     323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa (raw, json)
Hash identifier:          KDjV5AkB9IXR4dYK8vBq9ZBZXi79x6o5FnKRNn6ejCc=
Subject key identifier:   4D:AF:1E:43:26:24:03:6C:0C:5E:D8:CC:B7:2B:92:A6:5C:AE:FD:5C
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       0E13CC960F61531823642934DFD7C42AAA353ECF
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa
Signing time:             Thu 04 Apr 2024 07:06:47 +0000
ROA not before:           Thu 04 Apr 2024 07:01:47 +0000
ROA not after:            Thu 03 Apr 2025 07:06:47 +0000
asID:                     265207
IP address blocks:        2804:2c44:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:13:cc:96:0f:61:53:18:23:64:29:34:df:d7:c4:2a:aa:35:3e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr  4 07:01:47 2024 GMT
            Not After : Apr  3 07:06:47 2025 GMT
        Subject: CN=4DAF1E432624036C0C5ED8CCB72B92A65CAEFD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:12:97:6b:c1:7f:0f:ac:98:06:da:e9:98:
                    35:7b:ed:62:d2:ac:bc:b1:dd:6e:37:c2:ec:c3:cf:
                    c0:8d:c2:68:68:f2:66:4c:3d:8d:28:14:da:06:f8:
                    d5:4a:33:26:b9:8b:5e:6b:c3:bf:58:c1:21:44:18:
                    9f:34:05:59:1b:1e:31:72:0d:35:c8:88:87:4b:de:
                    1d:a8:60:c7:90:21:0c:95:5a:fa:32:53:e9:5d:55:
                    32:13:02:b2:fd:19:f1:1c:e8:48:3b:af:2c:77:8e:
                    4c:05:fd:3b:44:d7:6c:d5:5b:ce:c6:3d:94:db:9b:
                    ac:f5:a3:61:9c:a1:23:97:76:56:96:c8:eb:23:bb:
                    87:8d:13:b1:55:0f:17:40:08:b9:e6:4b:c8:f6:02:
                    68:bf:76:10:f1:65:ae:68:be:8f:1b:c9:41:ef:1f:
                    f0:ec:d0:5f:0a:69:eb:bd:2e:61:40:02:d2:07:e4:
                    38:98:e1:a9:a6:9f:f1:f3:19:e1:01:e0:ce:cf:48:
                    84:f3:c7:37:a5:48:ad:73:23:bb:ae:cd:73:6c:e4:
                    f8:0d:a2:00:35:96:b1:7a:56:f0:c5:d7:c8:b5:0d:
                    83:4f:0a:5f:86:4c:60:60:dd:d5:8f:34:60:ea:35:
                    a7:76:76:b6:7f:e6:cb:e8:d8:50:ce:c1:cf:d0:55:
                    93:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AF:1E:43:26:24:03:6C:0C:5E:D8:CC:B7:2B:92:A6:5C:AE:FD:5C
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33332d3333203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:1a:a7:62:f2:96:a8:8b:22:e0:fc:19:bc:4f:7d:5e:12:
         1c:bd:3d:40:fa:e6:cc:8b:72:57:87:da:3e:6d:00:eb:95:8a:
         d2:d1:c5:79:66:05:45:67:6d:14:7b:da:16:35:6b:06:e4:49:
         da:c4:5b:2a:3c:ac:84:d2:41:a6:57:de:f4:ec:b1:d6:69:ab:
         02:94:e7:4e:8e:93:35:02:22:fd:99:ba:49:35:b6:37:eb:f9:
         65:5e:90:c2:d2:e9:5e:d2:e9:c9:e1:62:7f:27:f5:79:41:10:
         5b:c8:68:e3:a4:4c:a2:35:41:18:27:c7:85:9a:76:d1:08:0d:
         83:ca:06:74:f5:8d:af:24:a1:c2:d1:31:32:7d:3b:53:af:fd:
         c7:26:8c:d6:4a:65:8d:e7:13:ba:c6:55:9a:76:4b:16:bc:62:
         e7:fd:45:10:e2:3c:0b:8c:28:9b:96:c9:6a:c7:fb:7f:4e:18:
         95:99:eb:04:6b:ae:c1:5a:c4:f9:92:b8:b1:4d:b3:07:a5:26:
         ee:1d:50:77:7e:a3:d5:84:a4:32:2e:80:d6:0a:6d:bf:18:41:
         f7:eb:d4:8f:ae:67:3b:71:8c:28:54:90:6b:0f:bc:30:76:1c:
         7c:4f:05:92:64:30:67:3b:a1:9c:44:4c:18:1f:41:f6:98:b9:
         2d:63:6d:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDhPMlg9hUxgjZCk039fEKqo1Ps8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNDMTg4NEVCNzEwMjIwRkUzNTY2NTVCNzNDQkMxMjlB
MzhFOTEwQjAeFw0yNDA0MDQwNzAxNDdaFw0yNTA0MDMwNzA2NDdaMDMxMTAvBgNV
BAMTKDREQUYxRTQzMjYyNDAzNkMwQzVFRDhDQ0I3MkI5MkE2NUNBRUZENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YRKXa8F/D6yYBtrpmDV77WLS
rLyx3W43wuzDz8CNwmho8mZMPY0oFNoG+NVKMya5i15rw79YwSFEGJ80BVkbHjFy
DTXIiIdL3h2oYMeQIQyVWvoyU+ldVTITArL9GfEc6Eg7ryx3jkwF/TtE12zVW87G
PZTbm6z1o2GcoSOXdlaWyOsju4eNE7FVDxdACLnmS8j2Ami/dhDxZa5ovo8byUHv
H/Ds0F8Kaeu9LmFAAtIH5DiY4ammn/HzGeEB4M7PSITzxzelSK1zI7uuzXNs5PgN
ogA1lrF6VvDF18i1DYNPCl+GTGBg3dWPNGDqNad2drZ/5svo2FDOwc/QVZPtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUTa8eQyYkA2wMXtjMtyuSplyu/VwwHwYDVR0j
BBgwFoAU88GITrcQIg/jVmVbc8vBKaOOkQswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFBwemtveng3RFZVa2NlTnkzY000NHE2WnNHQWhQVU4ySzFURjJTY1ZX
alIvMS9GM0MxODg0RUI3MTAyMjBGRTM1NjY1NUI3M0NCQzEyOUEzOEU5MTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQzE4ODRFQjcxMDIyMEZF
MzU2NjU1QjczQ0JDMTI5QTM4RTkxMEIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RQcHprb3p4N0RWVWtjZU55M2NNNDRxNlpzR0FoUFVOMksxVEYyU2NWV2pSLzEv
MzIzODMwMzQzYTMyNjMzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTMyMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygELESAMA0GCSqGSIb3DQEBCwUA
A4IBAQBiwRqnYvKWqIsi4PwZvE99XhIcvT1A+ubMi3JXh9o+bQDrlYrS0cV5ZgVF
Z20Ue9oWNWsG5EnaxFsqPKyE0kGmV9707LHWaasClOdOjpM1AiL9mbpJNbY36/ll
XpDC0ule0unJ4WJ/J/V5QRBbyGjjpEyiNUEYJ8eFmnbRCA2DygZ09Y2vJKHC0TEy
fTtTr/3HJozWSmWN5xO6xlWadksWvGLn/UUQ4jwLjCiblslqx/t/ThiVmesEa67B
WsT5krixTbMHpSbuHVB3fqPVhKQyLoDWCm2/GEH369SPrmc7cYwoVJBrD7wwdhx8
TwWSZDBnO6GcREwYH0H2mLktY20/
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:56 2024 by rpki-client on console-ams.rpki-client.org