Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3332203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33322d3332203d3e20323635323037.roa (raw, json)
Hash identifier:          9Jrkh75SckXLnBbGeCuoIh+FtHKOVsyiHZOH0ffE2AQ=
Subject key identifier:   A9:29:C5:D8:DD:EA:4C:40:2A:E0:FD:89:2B:53:78:AF:C1:EA:18:CB
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       3AA8EC096933224348AE202DE675D2FA7EAE2FB3
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3332203d3e20323635323037.roa
Signing time:             Thu 04 Apr 2024 07:06:48 +0000
ROA not before:           Thu 04 Apr 2024 07:01:48 +0000
ROA not after:            Thu 03 Apr 2025 07:06:48 +0000
asID:                     265207
IP address blocks:        2804:2c44::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a8:ec:09:69:33:22:43:48:ae:20:2d:e6:75:d2:fa:7e:ae:2f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr  4 07:01:48 2024 GMT
            Not After : Apr  3 07:06:48 2025 GMT
        Subject: CN=A929C5D8DDEA4C402AE0FD892B5378AFC1EA18CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:6c:f3:d8:ec:98:07:78:24:81:02:ef:de:
                    fa:cb:10:7f:8b:d2:44:ed:3a:fd:04:2f:57:93:3a:
                    43:dc:c0:e7:97:46:b7:f7:d2:f5:0b:20:e9:5d:2a:
                    ad:f3:99:c5:7d:72:f4:6b:e5:cd:6e:e7:10:3f:9d:
                    75:73:68:40:eb:ac:71:bc:df:ae:5a:ff:a1:78:f3:
                    9b:af:28:1c:12:8a:1a:79:cf:b2:2e:52:b9:cd:9c:
                    5b:d4:c1:12:ee:62:0b:90:03:d1:79:14:3c:a2:e3:
                    a9:11:fe:5c:48:32:ec:b5:bf:e9:d7:cb:d2:57:1e:
                    f2:18:10:f3:fb:12:84:a3:70:5a:0f:89:77:7e:a5:
                    30:7d:2d:cc:f6:37:e9:2e:e4:3c:6f:fb:f6:d4:24:
                    dc:4f:de:37:20:3e:23:9b:46:d0:ff:2f:73:db:7f:
                    21:76:f2:eb:02:93:83:85:47:47:90:a3:fd:17:15:
                    7f:6b:a5:38:69:9f:78:ca:14:51:52:7a:e8:f6:36:
                    a9:63:b9:83:7c:b4:e5:95:76:53:c8:7a:31:fc:44:
                    0b:59:a2:69:28:96:ea:18:6b:e6:66:3b:47:74:6f:
                    0a:a1:57:8e:be:d4:16:11:46:f9:5e:36:79:cd:14:
                    a3:a2:2b:f3:cd:9c:bb:ed:e3:31:aa:8e:be:aa:87:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:C5:D8:DD:EA:4C:40:2A:E0:FD:89:2B:53:78:AF:C1:EA:18:CB
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3332203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:af:cc:c9:01:3f:0b:48:08:86:95:eb:36:aa:93:78:11:86:
         42:aa:26:d3:fc:01:a7:75:2d:38:31:a7:bc:62:c7:51:bc:66:
         ce:bc:dc:7f:a4:49:24:c7:29:26:00:d9:df:4a:93:3c:41:28:
         e2:82:c5:3e:d4:19:ae:bc:01:68:a2:bd:9d:ba:34:02:cb:34:
         a8:47:45:74:b7:83:be:7a:4e:df:95:62:72:19:e0:39:44:7a:
         69:65:7f:e8:7d:62:cf:9b:21:b8:a6:87:2e:98:a0:0a:5c:38:
         80:40:74:ed:e3:9b:08:c2:fa:f8:5f:bc:15:b1:fe:c5:c6:ef:
         86:46:7e:ad:81:16:53:8e:7d:55:34:09:a7:a6:6e:7d:37:38:
         d6:17:66:c3:ac:64:d5:8d:22:d5:89:70:28:30:d1:a1:37:f9:
         ab:fe:7a:d0:00:ab:32:ec:12:3b:82:22:f0:aa:55:7e:15:c0:
         63:78:7c:d7:ac:2c:96:fc:00:3b:26:07:41:35:8c:6c:59:f1:
         86:5e:08:fc:f5:8e:cc:20:05:d1:30:51:c4:7f:23:79:38:f3:
         de:72:79:52:43:94:49:be:14:71:9f:3c:80:2c:a1:f1:e1:44:
         e5:75:44:dc:4b:a0:cc:de:71:13:49:16:cc:3c:59:00:f2:2d:
         15:6c:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org