Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33322d3332203d3e20323730343630.roa
File:                     323830343a366335343a3a2f33322d3332203d3e20323730343630.roa (raw, json)
Hash identifier:          dk5mgbC7YTGP/GyjDdh0fWh0TIDYed8jjbrPsMxBVdk=
Subject key identifier:   31:89:2C:3C:ED:AA:8D:67:C9:4D:52:BF:94:03:DB:78:BD:9E:30:31
Certificate issuer:       /CN=83DB8824320D38B985E019F808C2A0AAB470FB37
Certificate serial:       5D1DD93DFB922C7DF6700D178D7A5F9EEF23A31A
Authority key identifier: 83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33322d3332203d3e20323730343630.roa
Signing time:             Thu 04 Apr 2024 23:25:49 +0000
ROA not before:           Thu 04 Apr 2024 23:20:49 +0000
ROA not after:            Thu 03 Apr 2025 23:25:49 +0000
asID:                     270460
IP address blocks:        2804:6c54::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1d:d9:3d:fb:92:2c:7d:f6:70:0d:17:8d:7a:5f:9e:ef:23:a3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DB8824320D38B985E019F808C2A0AAB470FB37
        Validity
            Not Before: Apr  4 23:20:49 2024 GMT
            Not After : Apr  3 23:25:49 2025 GMT
        Subject: CN=31892C3CEDAA8D67C94D52BF9403DB78BD9E3031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:a5:8f:de:a2:26:c7:fe:5b:64:e2:48:1a:
                    38:0b:73:31:27:cf:58:a0:5f:21:e2:e2:27:64:d8:
                    14:5e:bf:89:c3:11:38:3c:7f:f6:3e:23:8e:79:c4:
                    0b:ce:1d:16:bd:cd:0f:d6:7f:57:3e:25:16:55:aa:
                    13:ec:ac:20:16:f3:63:35:09:6b:c4:dd:e4:51:ba:
                    b4:6a:4f:32:58:3c:bb:99:0d:4e:c7:c4:80:d1:e6:
                    18:c5:d7:98:86:29:f6:50:6a:43:6d:76:7b:46:d3:
                    b6:94:62:ba:0a:fd:ac:79:f6:3c:b4:83:05:13:db:
                    68:3d:f5:14:c6:55:58:aa:a2:c0:af:02:7b:5d:86:
                    b2:44:5f:ca:01:ad:66:52:78:6c:8d:05:1e:3c:7c:
                    e5:2e:79:54:c9:19:8c:05:c3:ed:f5:ad:63:a1:b9:
                    6a:0b:de:3e:6e:28:84:f1:cb:f5:c5:b2:1a:23:a2:
                    6a:b8:04:c4:dc:a7:6e:73:81:fd:9f:34:ec:ab:2e:
                    51:b6:35:6d:93:3a:89:89:09:1f:7a:45:47:0a:72:
                    c7:61:f7:cc:e7:cc:d1:7c:c6:3d:21:91:69:af:83:
                    4f:c3:0e:ea:2b:87:e4:4f:8d:40:82:e3:8a:e5:d8:
                    1e:37:0a:fb:d5:f3:a7:ab:2b:30:ff:06:e6:57:ac:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:2C:3C:ED:AA:8D:67:C9:4D:52:BF:94:03:DB:78:BD:9E:30:31
            X509v3 Authority Key Identifier:
                keyid:83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33322d3332203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:35:2b:da:e2:5d:f2:b2:e9:a0:d2:97:9d:7e:d2:3b:03:b4:
         91:27:b1:0e:a2:1e:2f:88:99:0a:45:bf:39:8b:23:06:64:72:
         8a:58:74:78:49:36:28:3d:76:72:1e:eb:22:7c:48:d4:55:01:
         b2:9a:92:08:ef:80:4a:26:18:a5:67:95:40:0b:0a:98:42:04:
         38:ec:89:cf:a2:81:4a:83:37:ec:eb:04:a9:e1:da:58:34:e9:
         fc:29:0b:89:e0:22:3b:33:3d:8c:0e:ba:c4:fc:4a:37:4c:d0:
         9a:41:b3:57:79:2e:b9:5a:f7:1e:8f:01:65:a6:3f:76:f4:fd:
         f0:52:e8:42:b1:8f:9b:55:22:40:da:9a:5b:48:ac:97:c2:c1:
         0f:43:b0:f1:b7:94:cf:0f:c8:13:0c:7d:c8:14:58:d3:0d:58:
         df:eb:f9:c0:d4:42:c2:75:de:3a:7f:13:ea:5a:81:ed:6e:ea:
         9c:ea:ad:77:83:29:57:e4:2a:3e:02:58:68:81:49:15:05:e4:
         89:a3:bc:45:1c:19:57:e9:a1:81:53:ac:d8:09:ba:71:19:73:
         9c:63:f6:95:9d:80:39:d5:2d:17:6c:d2:d7:5a:a3:1a:06:84:
         eb:8b:ff:8e:64:0f:1e:cf:bf:f7:a6:9c:70:a6:5f:67:6a:f3:
         c2:67:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org