Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33342d3334203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33342d3334203d3e20323635323037.roa (raw, json)
Hash identifier:          Q6prl4Zsimi8RMaFLe8DsorCiA7iRCfd0uRUE9a8iqU=
Subject key identifier:   B9:A2:73:A5:61:EF:47:24:5E:9C:7C:E9:08:BA:1A:67:34:F5:63:F1
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       4A473A933A17F0499C2D5738CFA437CCB76FEC4F
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33342d3334203d3e20323635323037.roa
Signing time:             Thu 04 Apr 2024 07:06:48 +0000
ROA not before:           Thu 04 Apr 2024 07:01:48 +0000
ROA not after:            Thu 03 Apr 2025 07:06:48 +0000
asID:                     265207
IP address blocks:        2804:2c44::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:47:3a:93:3a:17:f0:49:9c:2d:57:38:cf:a4:37:cc:b7:6f:ec:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr  4 07:01:48 2024 GMT
            Not After : Apr  3 07:06:48 2025 GMT
        Subject: CN=B9A273A561EF47245E9C7CE908BA1A6734F563F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:84:84:ab:1b:fb:be:24:84:bb:56:fa:90:
                    0b:55:c3:bd:52:60:b8:8a:5d:6e:e4:ab:69:65:91:
                    b1:ad:5d:90:da:06:f1:4f:5e:72:a3:53:ed:97:3e:
                    5d:5d:60:6e:81:4b:a8:54:b5:92:2f:a2:d1:f7:ad:
                    a4:f3:58:6d:b3:7c:f3:5a:2d:cc:64:d5:08:de:aa:
                    08:06:64:7d:09:7a:5e:e3:c8:d7:4f:87:6d:be:d2:
                    bb:e1:6c:50:59:cd:2c:1f:94:63:ca:5e:72:51:8f:
                    e2:19:14:f6:19:66:f8:91:a0:4f:66:24:19:4f:9b:
                    1a:0d:c8:fe:48:72:c5:a0:35:86:fb:a6:43:46:77:
                    de:1a:88:64:98:59:77:9c:e5:ce:22:37:2f:50:a7:
                    36:10:c1:f2:07:4c:27:50:ca:dc:32:96:34:a8:33:
                    a4:0d:de:48:ed:1f:ae:1f:53:e1:06:08:ae:6f:f6:
                    72:7c:7e:bf:91:16:69:b2:bd:1f:e4:bb:bb:92:10:
                    1e:ac:84:7b:b7:8a:9e:e3:8c:32:ab:fc:58:48:8a:
                    a6:81:52:12:24:ea:b9:7c:df:2b:f0:6d:8f:b7:3d:
                    a4:59:de:2e:51:b7:40:01:10:60:67:8f:f5:5d:c0:
                    44:32:56:fe:50:b6:47:7f:32:e5:1f:ba:85:ff:26:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:73:A5:61:EF:47:24:5E:9C:7C:E9:08:BA:1A:67:34:F5:63:F1
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33342d3334203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:21:8e:2a:6d:25:40:42:7a:b3:60:2f:5d:50:36:1b:8f:ec:
         cc:56:e1:0c:f9:ea:fb:42:b8:6a:2a:bd:02:c9:6a:a0:8e:c9:
         ea:62:90:a8:d2:b7:da:48:1f:56:8e:1c:a4:83:6a:ab:29:48:
         ed:5b:9d:1c:15:b9:6c:9f:e9:51:e7:60:c8:81:3f:cc:d7:cb:
         7d:b2:60:64:db:e9:4e:ae:1f:d6:55:d2:7d:63:06:41:e1:b9:
         c4:45:85:d0:bb:cd:d1:95:32:48:72:7d:81:20:75:8f:4e:e5:
         0e:23:87:16:32:5b:6b:41:03:63:4e:76:92:11:6d:b6:a8:29:
         e0:06:2d:da:cf:4b:2b:dc:f9:3b:97:0c:5b:7e:be:6d:0f:a0:
         02:c8:0d:73:90:14:ed:f8:07:00:b3:17:8a:67:0b:7a:c6:22:
         25:f0:21:06:30:22:bf:5a:ad:5c:90:4b:e9:99:74:c4:95:b0:
         4b:eb:02:4e:73:ca:c7:f4:37:b4:a4:11:75:cd:39:f9:a6:3a:
         2a:19:94:63:df:15:ea:47:c8:27:63:6c:55:79:52:df:96:68:
         d1:af:60:d5:af:ec:5e:ed:f8:2e:ce:4d:0c:8b:ed:47:91:6d:
         18:b4:95:14:4c:db:66:48:54:35:d0:de:0a:e6:98:1a:c1:2d:
         c7:ca:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:19 2024 by rpki-client on console-ams.rpki-client.org