Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3334203d3e20323635323037.roa
File:                     323830343a326334343a3a2f33322d3334203d3e20323635323037.roa (raw, json)
Hash identifier:          /TQHZ6DsQztJ6+UvDNAhwVDFzBpjFCd46NWXPzGQkGQ=
Subject key identifier:   CB:E9:43:80:39:94:DE:E8:7D:20:6A:94:26:1A:7C:89:3A:42:4A:45
Certificate issuer:       /CN=F3C1884EB710220FE356655B73CBC129A38E910B
Certificate serial:       77664CAE9BDCE49A9A68FA639B90940A761C37A9
Authority key identifier: F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3334203d3e20323635323037.roa
Signing time:             Sat 26 Apr 2025 12:51:06 +0000
ROA not before:           Sat 26 Apr 2025 12:46:06 +0000
ROA not after:            Sat 25 Apr 2026 12:51:06 +0000
asID:                     265207
IP address blocks:        2804:2c44::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl
                          rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:66:4c:ae:9b:dc:e4:9a:9a:68:fa:63:9b:90:94:0a:76:1c:37:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C1884EB710220FE356655B73CBC129A38E910B
        Validity
            Not Before: Apr 26 12:46:06 2025 GMT
            Not After : Apr 25 12:51:06 2026 GMT
        Subject: CN=CBE943803994DEE87D206A94261A7C893A424A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:0c:0b:bb:68:8e:a3:43:b2:07:9d:4a:2e:
                    91:32:0a:3e:81:87:b0:f6:84:b2:e2:36:56:9c:b1:
                    b6:17:9b:2d:1b:ad:cd:65:0c:a1:ba:26:4d:f1:15:
                    50:e1:66:24:71:0d:58:c7:9d:a9:93:17:6b:b6:a2:
                    7e:90:3b:4b:e4:e6:29:f6:21:b1:f9:bd:13:2b:8a:
                    82:78:7d:1e:6c:3f:66:ce:ce:8d:7a:06:1c:06:34:
                    2c:de:9c:30:49:f1:67:aa:06:82:aa:13:aa:d4:7d:
                    74:6a:0f:d2:e9:d0:f3:2d:5f:0a:c3:24:0d:3b:03:
                    17:62:4d:27:21:d2:e9:a7:18:d3:9d:4b:4b:8e:91:
                    48:c1:76:55:13:93:45:80:20:ba:a2:bf:cf:16:4c:
                    bf:46:d5:77:f2:d0:ad:e3:e0:d1:7e:71:43:38:94:
                    9b:97:7e:65:a7:84:81:e1:73:0c:c2:44:64:8e:58:
                    39:0c:84:e7:b9:32:5e:ec:1f:ef:9a:79:b1:98:dc:
                    eb:33:b1:2f:9c:f5:2b:75:5f:c0:d6:d4:02:06:6d:
                    5e:06:5d:4b:39:d5:a6:4d:b6:69:20:a7:21:d2:5b:
                    51:1e:e8:7a:f7:97:e2:58:87:74:e2:81:73:fc:62:
                    4a:d0:9e:2a:80:3e:72:ec:73:ee:13:5b:85:ea:a3:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E9:43:80:39:94:DE:E8:7D:20:6A:94:26:1A:7C:89:3A:42:4A:45
            X509v3 Authority Key Identifier:
                keyid:F3:C1:88:4E:B7:10:22:0F:E3:56:65:5B:73:CB:C1:29:A3:8E:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/F3C1884EB710220FE356655B73CBC129A38E910B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C1884EB710220FE356655B73CBC129A38E910B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPpzkozx7DVUkceNy3cM44q6ZsGAhPUN2K1TF2ScVWjR/1/323830343a326334343a3a2f33322d3334203d3e20323635323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:d7:cb:6a:d1:c3:1a:98:f7:86:8f:70:b4:f9:67:d2:cf:e2:
         6d:c1:c4:4a:f7:02:1d:8a:c6:48:9c:af:f7:ab:45:33:e9:6d:
         bc:8d:9a:c2:d6:b9:c8:a7:05:8d:b3:c9:0c:ad:6e:a5:57:a4:
         f3:be:df:e9:01:3f:fc:d5:07:16:81:b9:0d:c6:49:71:15:36:
         eb:17:15:82:5f:c1:21:8a:63:4d:6a:90:bc:81:d9:db:eb:2f:
         d2:91:36:5c:4a:0e:83:ee:7d:26:b4:f4:7b:2e:1d:e7:d1:1f:
         d9:1e:07:27:aa:b2:44:e4:80:67:63:8a:1d:57:f1:4c:1b:8b:
         45:8d:d4:71:d5:c7:f6:32:e1:73:c8:c4:8f:a5:c8:d7:5c:d9:
         39:61:f1:6c:12:b7:0e:33:01:d3:f4:18:d8:b1:c8:19:f0:22:
         45:f4:f3:62:6b:30:3b:64:e2:3e:d5:93:50:de:47:56:fa:b1:
         08:f3:dc:1f:03:06:1b:f5:98:9d:6f:13:96:f3:ba:81:ed:3c:
         ed:b8:ce:69:17:38:21:5c:85:dd:61:b4:8b:70:c5:89:c3:e7:
         f6:d9:92:62:c5:94:71:36:f2:aa:f1:4d:cf:68:7b:0c:8f:e2:
         d2:cb:5a:ee:5b:0a:cc:9c:b7:73:ea:13:4f:fa:7d:47:9e:a7:
         76:0c:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:06 2025 by rpki-client on console.sobornost.net