Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa
File:                     323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa (raw, json)
Hash identifier:          j1eK9nToiza1/5HZNqHSdE6dcdz/rIHkY7dAqN3Tqyw=
Subject key identifier:   F9:6C:C6:7D:56:28:94:7C:5E:AA:D3:87:01:87:2E:12:21:71:41:14
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       5C2296845742ABF6D58672CE6F59FFEF712C6CD1
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa
Signing time:             Thu 06 Mar 2025 07:25:22 +0000
ROA not before:           Thu 06 Mar 2025 07:20:22 +0000
ROA not after:            Thu 05 Mar 2026 07:25:22 +0000
asID:                     265207
IP address blocks:        2804:2c44:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:22:96:84:57:42:ab:f6:d5:86:72:ce:6f:59:ff:ef:71:2c:6c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar  6 07:20:22 2025 GMT
            Not After : Mar  5 07:25:22 2026 GMT
        Subject: CN=F96CC67D5628947C5EAAD38701872E1221714114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:03:0f:2d:f4:91:01:9a:ce:94:30:f1:9e:
                    17:ea:e3:11:47:96:c9:36:d5:05:20:35:ba:08:03:
                    21:82:c5:70:99:bc:1d:4f:46:89:ae:8f:59:ca:fa:
                    9e:43:df:64:41:e8:36:d7:4f:9b:7c:ec:d5:90:78:
                    be:f3:38:bf:cf:b5:57:84:51:ba:06:56:2c:32:05:
                    33:af:63:8f:c6:3b:c6:53:2f:f0:a5:3e:91:51:20:
                    81:a9:da:0d:a1:c7:39:99:ab:63:8c:73:dc:56:2a:
                    89:f9:aa:ab:07:7a:c4:45:99:43:c0:84:12:ad:a8:
                    a4:39:b4:ac:56:4d:36:3d:4b:a0:6d:d2:01:53:13:
                    97:a2:e3:da:1d:dc:75:9d:98:eb:2e:0b:3c:9e:72:
                    af:2a:19:c4:3e:73:48:64:19:2b:b9:f9:10:60:0e:
                    df:d8:19:f6:a8:a8:a0:7f:c9:6b:cd:fb:20:8d:e0:
                    87:9e:b0:2e:58:07:eb:36:da:75:9d:df:f4:8f:2d:
                    87:fb:75:55:57:ee:d5:e8:d9:43:60:8f:23:38:e1:
                    30:24:a2:7f:e7:b8:2c:d4:79:d6:7a:39:c2:41:5f:
                    58:8e:43:a4:96:ea:a4:d0:a6:c1:2c:73:12:14:63:
                    08:07:b2:92:8e:a6:80:0b:50:02:06:2e:ec:43:11:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:C6:7D:56:28:94:7C:5E:AA:D3:87:01:87:2E:12:21:71:41:14
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a383030303a3a2f33342d3334203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:50:57:4a:a2:58:4f:32:f9:10:f8:9b:6e:45:11:bb:8f:
         4f:f3:e6:bd:48:8a:39:69:27:5c:f8:b5:27:3e:2f:a9:a5:1f:
         4d:f3:b5:0e:22:6a:fc:20:6f:33:29:75:d7:a8:c3:db:d7:b3:
         65:2b:8a:d5:eb:57:d4:d7:b6:92:b1:ea:3b:ce:83:aa:22:41:
         5d:a2:a6:80:9c:8b:8c:9d:95:23:3d:ab:25:d8:70:2d:f3:e8:
         d0:6b:89:75:50:44:05:b5:fe:2d:9f:c5:2e:74:c7:0b:7a:d1:
         0a:b9:b8:59:8c:fc:fd:6a:d7:de:e6:12:52:e2:ac:cf:f0:d6:
         6d:1a:98:9f:ef:18:f1:47:69:c7:15:61:db:2e:58:b0:52:94:
         0e:4d:3e:60:72:f0:0e:35:9d:64:2d:f1:14:e2:04:14:b4:5c:
         dd:ee:5e:82:4c:f2:c0:bb:fb:5e:27:e5:f2:2a:d7:1c:e3:39:
         3f:36:4c:7c:14:2b:73:ba:ad:57:d5:57:dd:c3:df:e0:b5:f9:
         e5:3a:7d:91:71:9b:3a:06:b6:77:4c:34:4d:a0:86:1f:b0:8f:
         68:b6:9a:3f:d5:c7:3a:12:18:6a:d5:72:4a:a8:fd:86:42:fd:
         9f:08:ae:4e:a2:cd:c6:00:c7:5e:f4:89:35:8d:df:b0:32:13:
         e8:d8:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:14 2025 by rpki-client