Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33332d3333203d3e20323635323037.roa (raw, json)
Hash identifier:          RB9NRUuBuZuRsddM9yhjBIjZJWiFJ6zyC8S9tHfC+WE=
Subject key identifier:   43:5C:A3:37:70:64:21:B2:52:4B:00:7A:52:F6:C4:0F:A6:45:5F:EF
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       1510862214164444B732B31E24195777BE23A1A1
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa
Signing time:             Thu 06 Mar 2025 07:25:21 +0000
ROA not before:           Thu 06 Mar 2025 07:20:21 +0000
ROA not after:            Thu 05 Mar 2026 07:25:21 +0000
asID:                     265207
IP address blocks:        2804:2c44::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:10:86:22:14:16:44:44:b7:32:b3:1e:24:19:57:77:be:23:a1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Mar  6 07:20:21 2025 GMT
            Not After : Mar  5 07:25:21 2026 GMT
        Subject: CN=435CA337706421B2524B007A52F6C40FA6455FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:8d:13:af:2b:31:6c:b7:17:00:f0:d6:12:
                    26:39:45:07:21:01:0e:21:41:60:ae:4f:cc:df:eb:
                    9b:66:31:26:84:60:b1:8a:42:68:70:c6:af:83:79:
                    be:a4:17:7f:15:9b:c9:5c:44:08:6e:c3:7e:3c:a9:
                    e0:bf:9b:18:15:31:83:42:56:11:7b:af:c6:27:3f:
                    3b:59:0f:5e:e7:60:3a:71:c6:fe:31:85:d3:e8:6f:
                    7c:02:86:87:f5:ee:00:78:56:d4:be:21:c6:9f:03:
                    c2:bd:f2:2e:52:77:8c:a7:7b:5e:83:ff:13:7f:63:
                    71:05:67:44:b3:9e:a0:0e:67:21:1a:6b:22:d6:32:
                    57:76:bc:68:9f:64:6c:46:74:79:d0:ed:ed:31:19:
                    d1:49:aa:8f:a4:c6:d1:e4:e1:93:a6:fd:f6:23:79:
                    e1:cb:89:05:04:58:ca:80:b2:57:45:db:82:df:8a:
                    8f:e4:a1:29:2c:42:27:44:2a:bf:bf:4d:b1:71:df:
                    71:32:53:7d:61:65:c6:6e:ee:1d:bf:2f:f5:92:78:
                    40:9d:57:65:ab:32:b9:62:82:e2:d1:b1:22:92:cb:
                    38:8b:ea:e6:36:2d:17:44:f0:f6:71:84:e8:0a:fa:
                    3d:f0:7d:61:89:16:f2:80:77:b8:df:ca:1f:c0:f6:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5C:A3:37:70:64:21:B2:52:4B:00:7A:52:F6:C4:0F:A6:45:5F:EF
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33332d3333203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:26:3e:42:52:3b:bb:40:c8:b6:96:7a:22:d4:f8:a7:4c:
         a7:a9:17:f3:3e:37:18:18:91:39:ed:7c:da:14:9c:7c:0d:90:
         97:a4:b6:4b:e9:3c:86:fb:d9:5f:a2:0b:5a:83:b4:a0:77:e7:
         22:2f:45:f6:5e:cf:39:46:af:7d:dd:9a:93:a2:96:03:3f:10:
         3a:da:a7:c7:77:c9:1e:c7:e8:6b:ac:8e:c6:de:1c:aa:fa:99:
         e0:38:bc:c9:09:89:0c:b3:58:82:58:61:82:80:c2:cc:20:7d:
         d9:9d:ec:ca:47:45:ba:0a:fc:54:6c:24:97:11:fa:37:7e:7d:
         73:1d:0f:57:96:6d:5f:06:bb:16:48:40:78:81:d1:7d:18:7d:
         ae:5e:24:ae:e5:ff:f8:5d:01:80:d2:de:c1:ca:6f:ad:41:40:
         2b:f5:ed:2a:7b:07:0f:07:5e:2c:fc:d0:16:21:e6:63:2a:ab:
         dc:7d:1b:c5:f0:d4:21:24:65:e7:6b:9b:a7:5c:1b:72:6c:3c:
         94:be:23:21:2c:d5:c6:ef:6e:f5:ba:59:b9:78:c5:3a:ea:b1:
         10:f2:3f:17:bc:0f:52:5f:16:28:90:a9:31:50:15:82:d6:ba:
         5c:ff:bd:19:1a:fd:f4:ee:c8:1d:b6:af:03:f7:83:3f:b8:a3:
         d0:92:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:05:38 2025 by rpki-client