Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3332203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33322d3332203d3e20323635323037.roa (raw, json)
Hash identifier:          PK8I8tOwWOfg5PkrXsWW5DOtResDXNrgZ+cQjHakRmk=
Subject key identifier:   4D:4E:03:94:88:70:84:2D:DC:A6:5F:12:93:9B:C0:74:1F:46:27:38
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       46B49D2A5120410DD8DCC020FE084BF27D0ADCEE
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3332203d3e20323635323037.roa
Signing time:             Thu 06 Mar 2025 07:25:20 +0000
ROA not before:           Thu 06 Mar 2025 07:20:20 +0000
ROA not after:            Thu 05 Mar 2026 07:25:20 +0000
asID:                     265207
IP address blocks:        2804:2c44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b4:9d:2a:51:20:41:0d:d8:dc:c0:20:fe:08:4b:f2:7d:0a:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar  6 07:20:20 2025 GMT
            Not After : Mar  5 07:25:20 2026 GMT
        Subject: CN=4D4E03948870842DDCA65F12939BC0741F462738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:f1:04:f2:77:a8:7a:a9:50:f6:88:9c:af:
                    17:a7:51:7f:9a:99:a3:f0:a2:33:db:47:ff:40:0a:
                    ae:56:b0:b7:1c:93:dc:08:d1:bd:63:a0:51:c6:a0:
                    cc:cf:81:30:b1:b6:80:9c:b7:a6:e9:6a:1d:74:8b:
                    03:b9:e1:66:a1:1f:4a:d0:90:1b:c4:6f:c1:1d:1d:
                    87:e2:bc:fd:75:b6:b3:cf:65:fe:83:30:c5:c8:29:
                    28:de:04:16:e1:ae:42:4d:00:76:fb:1d:b8:87:09:
                    29:91:c3:02:b4:00:aa:0e:92:9e:fe:8b:86:5d:47:
                    1f:80:cc:01:e5:11:51:fe:8b:09:f5:ec:3c:30:40:
                    55:6d:24:56:b7:df:0f:2c:b5:93:a5:97:51:b1:5e:
                    5d:b6:23:b7:5c:1f:41:5b:01:a7:6e:57:fc:29:3d:
                    01:11:85:ae:d5:19:16:5d:f6:93:50:30:2b:f3:54:
                    5c:83:6a:00:5d:d2:1f:b6:6e:db:a3:4d:fb:db:ce:
                    de:99:96:c6:95:b5:d1:5c:a2:f4:18:92:b0:27:62:
                    a7:b4:1a:84:08:e0:86:ed:b2:71:d2:39:71:f6:bf:
                    88:23:a4:8c:0f:df:ec:e6:aa:91:5c:b6:08:45:44:
                    c9:fc:79:08:c4:91:4e:e3:4c:0a:27:2d:a0:73:48:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:03:94:88:70:84:2D:DC:A6:5F:12:93:9B:C0:74:1F:46:27:38
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3332203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:89:c6:4e:70:e5:d4:b5:c4:42:c5:ab:5c:d4:ea:7f:90:
         f3:62:1a:df:09:89:f1:84:06:a8:be:7d:4e:4f:05:df:bc:ce:
         1d:bd:f5:8b:e3:0c:dc:a1:0c:bb:ce:d1:cd:00:d9:da:f4:99:
         58:06:05:b3:14:86:3f:43:10:52:d0:1a:dc:b0:05:fd:8f:93:
         44:60:d0:b4:e3:29:43:c3:9b:a9:b0:61:4b:72:db:07:51:fc:
         e6:a2:5d:1b:c6:5d:7e:b0:61:3d:72:94:90:27:44:cf:c5:0d:
         9d:e8:5a:05:64:08:70:ee:4e:d0:fb:71:5e:5c:90:b7:56:ef:
         d8:b2:d7:24:00:2b:ac:ee:98:4e:3c:eb:b8:f9:48:80:77:f3:
         8b:3b:b2:37:0e:4a:3f:2f:43:ab:4f:a9:ee:f4:d3:43:26:65:
         56:a1:33:ba:2e:08:f2:c0:6f:9c:53:26:dd:3a:af:2a:c9:d2:
         0e:e0:4c:70:ac:1a:a0:b5:b7:67:45:4e:0e:e6:82:96:8b:28:
         1e:e7:2e:b9:c2:15:f0:b7:d5:ce:22:ea:8d:d9:f4:d1:31:cf:
         b2:1e:df:d8:99:f1:aa:f2:f4:4b:c6:8e:e9:5a:33:ae:23:11:
         b9:d9:5f:86:8a:78:2f:7f:e8:19:95:51:fe:6d:5d:3d:79:30:
         e9:23:0b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:21 2025 by rpki-client