Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a323030303a3a2f33352d3336203d3e20323730343630.roa
File:                     323830343a366335343a323030303a3a2f33352d3336203d3e20323730343630.roa (raw, json)
Hash identifier:          Cno06486nHmsmZ+aKAtwkImSooSxy9RVRCvKgVCmjN0=
Subject key identifier:   1B:13:C1:1A:CD:09:3C:F6:36:19:C6:59:4A:07:1A:1F:54:39:03:12
Certificate issuer:       /CN=83DB8824320D38B985E019F808C2A0AAB470FB37
Certificate serial:       1E99A4F3BB8690A2A9D430181C5C9EA180F696D0
Authority key identifier: 83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a323030303a3a2f33352d3336203d3e20323730343630.roa
Signing time:             Thu 04 Apr 2024 23:25:49 +0000
ROA not before:           Thu 04 Apr 2024 23:20:49 +0000
ROA not after:            Thu 03 Apr 2025 23:25:49 +0000
asID:                     270460
IP address blocks:        2804:6c54:2000::/35 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:99:a4:f3:bb:86:90:a2:a9:d4:30:18:1c:5c:9e:a1:80:f6:96:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DB8824320D38B985E019F808C2A0AAB470FB37
        Validity
            Not Before: Apr  4 23:20:49 2024 GMT
            Not After : Apr  3 23:25:49 2025 GMT
        Subject: CN=1B13C11ACD093CF63619C6594A071A1F54390312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:90:3f:b0:57:1d:05:a1:66:6a:2a:29:9b:
                    b5:b8:7b:5c:ed:6b:73:36:0a:03:5b:04:98:d2:ab:
                    28:28:28:8c:6e:c4:6e:8d:6d:ed:4c:3b:9c:3d:e5:
                    00:dc:2e:23:d2:56:c4:ce:98:c1:e0:b4:55:c4:16:
                    59:44:9d:d3:ef:b0:52:74:b1:9f:2e:e8:7d:34:ab:
                    3f:73:a4:22:53:be:e6:87:ce:93:db:15:2b:16:2f:
                    d4:a9:99:2c:ef:4d:29:2a:a1:f4:e0:4e:98:d4:b7:
                    2a:c9:43:c7:78:69:90:92:be:92:9e:f8:67:67:04:
                    6e:8c:42:1c:d2:2d:a9:7b:07:b3:fd:2e:d5:19:8f:
                    24:99:ee:e7:9e:ee:07:67:8d:d9:35:76:6a:8c:9e:
                    7e:27:7d:d6:46:e6:0c:52:51:a4:33:42:0f:cc:fc:
                    2b:7a:1a:ca:27:09:28:42:d9:2a:fe:01:a4:df:c7:
                    72:2b:49:c1:b2:49:81:7f:18:2d:a2:44:ef:85:53:
                    53:a9:45:b4:7f:36:a9:b2:2a:30:2d:a4:56:0b:a9:
                    a4:db:cf:61:41:49:5e:b2:97:a7:50:e2:9a:36:36:
                    c9:f2:c8:21:b2:66:8a:95:e0:b8:bf:f2:17:31:ca:
                    4f:a2:a7:bd:ef:da:9c:82:de:02:a7:4e:cf:8d:ba:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:C1:1A:CD:09:3C:F6:36:19:C6:59:4A:07:1A:1F:54:39:03:12
            X509v3 Authority Key Identifier:
                keyid:83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a323030303a3a2f33352d3336203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         90:01:d2:e3:97:08:5f:d5:4f:b9:5b:69:f5:70:89:ae:71:cb:
         a9:25:5d:f7:e5:f6:f2:57:4f:f5:36:f9:9e:ae:4e:7e:46:71:
         ff:6e:79:72:35:fa:a7:17:fc:f1:24:5f:a9:c0:2e:94:43:dd:
         6f:e4:71:90:ae:5c:21:25:72:33:75:38:ee:2f:f1:32:41:03:
         0d:cb:11:97:84:73:3d:d8:ac:e7:69:1f:a8:a9:ee:90:87:cd:
         c7:3c:b2:d8:8d:32:cd:24:60:5f:0b:06:c0:44:50:b8:e3:98:
         cb:9e:65:68:46:52:17:8e:85:37:3a:9a:bf:ac:d0:3d:35:db:
         5c:27:b2:5e:2d:a3:04:71:ce:6f:4b:e6:ed:0a:cc:37:6b:a2:
         4e:74:34:79:d7:6b:51:95:09:cc:b4:30:e6:87:89:dc:58:a0:
         c2:b0:05:4a:4f:2f:b5:ed:a2:e3:c5:6b:25:fc:7b:10:78:a4:
         5d:2f:e4:f7:64:e1:ac:22:9e:eb:22:a7:8f:6c:d1:09:53:75:
         5e:e9:e1:27:26:5d:81:cb:20:72:35:52:8d:f4:16:dc:e4:d3:
         1d:9c:94:e9:a6:6c:4a:3f:01:3c:be:f8:b6:05:d6:c2:bf:e2:
         d4:da:f5:c2:e1:c8:40:22:07:c2:35:e3:18:e2:b8:a8:d1:3d:
         0c:d9:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org