Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33332d3333203d3e20323635323037.roa (raw, json)
Hash identifier:          Q7g9BdSr1r7fgYBUaesyzksXcsgLQZdxdQfk8jDaTRk=
Subject key identifier:   AB:AC:41:A9:0B:EC:F8:C1:64:C5:B3:F4:98:F3:9C:0E:EC:F5:AE:C5
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       29ECE856E5C36BBE68178FD63F7AC6FBED182D18
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa
Signing time:             Thu 04 Apr 2024 07:06:48 +0000
ROA not before:           Thu 04 Apr 2024 07:01:48 +0000
ROA not after:            Thu 03 Apr 2025 07:06:48 +0000
asID:                     265207
IP address blocks:        2804:2c44::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:e8:56:e5:c3:6b:be:68:17:8f:d6:3f:7a:c6:fb:ed:18:2d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr  4 07:01:48 2024 GMT
            Not After : Apr  3 07:06:48 2025 GMT
        Subject: CN=ABAC41A90BECF8C164C5B3F498F39C0EECF5AEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f5:b0:87:53:30:d0:02:30:7c:16:5b:6b:8d:
                    61:83:53:d2:a6:5f:e4:13:59:d2:2b:88:cc:01:b3:
                    fd:d4:49:f0:40:86:0a:ed:16:41:56:4d:9b:ed:84:
                    00:79:20:b2:65:d3:4f:65:61:19:28:f8:f0:dd:fd:
                    9a:47:6a:60:5f:5a:e5:58:a8:09:98:cc:c0:6b:b2:
                    84:25:35:ce:64:8a:d0:aa:b9:60:8d:bf:58:bb:59:
                    5f:9a:e0:3d:53:74:34:a6:a9:ed:18:a8:51:50:da:
                    cd:b9:79:df:32:d8:e7:f9:94:29:57:52:66:81:b5:
                    fe:90:37:58:31:27:e8:d0:99:a9:c5:86:80:bb:f8:
                    c1:ae:b6:54:3a:20:f1:02:70:4b:cc:12:b3:3e:f8:
                    6c:ed:b2:a0:03:8b:89:28:8c:7a:2b:2c:42:92:87:
                    8d:fd:79:5f:3a:d9:3d:a6:09:5c:10:43:1c:5b:59:
                    58:4d:73:23:cb:c7:54:3c:44:07:ef:f9:39:5b:14:
                    7a:16:ff:e0:16:06:cc:63:f7:f7:47:c3:86:4c:fa:
                    7a:f7:79:2a:98:ce:53:9d:88:8d:df:eb:2f:9d:71:
                    df:52:fc:f6:fe:e6:0c:af:ed:3d:93:3b:0a:e7:8c:
                    5c:93:fa:64:1f:67:d4:ea:8b:5e:2f:c4:8f:41:07:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AC:41:A9:0B:EC:F8:C1:64:C5:B3:F4:98:F3:9C:0E:EC:F5:AE:C5
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:10:5f:5c:86:5d:98:5c:bc:50:af:ca:c3:43:94:95:37:98:
         9b:de:de:d6:7d:8c:f2:d4:16:19:0b:68:0f:b9:8e:e6:f9:04:
         d8:03:75:f7:04:35:1b:f8:0a:9c:95:68:77:43:fb:b0:ba:1c:
         3d:11:0f:60:53:a7:fc:de:82:b9:58:aa:c8:54:1c:bc:63:aa:
         4e:93:fb:b0:a7:52:d4:92:3c:0e:10:ca:c9:29:82:a5:17:03:
         9b:ed:34:79:bc:02:5a:c8:ca:c5:e1:10:20:d0:0d:3f:f8:56:
         99:36:bf:4e:00:73:b9:5c:f1:0a:98:cf:2f:7e:6a:70:de:c7:
         2c:53:40:80:d1:c0:45:d8:c9:8d:3b:fe:bd:4f:40:8c:f4:86:
         2e:0d:c4:35:ba:94:1a:92:89:9a:15:e3:42:a6:75:79:94:d0:
         aa:c5:61:13:a1:23:be:bc:0b:73:cd:9a:c0:f7:20:27:0f:fd:
         c0:89:82:5c:1e:15:e8:08:0e:05:9a:dc:85:63:3d:34:86:f2:
         89:02:58:cd:ef:78:57:87:a6:9e:e7:72:36:97:12:85:e5:ad:
         9c:54:32:7d:6a:6d:a4:9a:a2:8e:79:9c:2a:74:55:3d:a6:c2:
         f8:b7:7b:89:a2:ad:47:46:4d:62:b2:c5:88:64:b8:37:5d:7a:
         ba:eb:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:12 2024 by rpki-client on console-fra.rpki-client.org