Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33332d3334203d3e20323730343630.roa
File:                     323830343a366335343a3a2f33332d3334203d3e20323730343630.roa (raw, json)
Hash identifier:          Tk7dscNoXrmpHquqUfGHh1mztbvB/Ja2bEswOQ4CzM8=
Subject key identifier:   2E:61:C5:CC:91:8B:66:E9:FC:D0:C4:BB:4C:80:EF:9D:CF:6E:3C:23
Certificate issuer:       /CN=83DB8824320D38B985E019F808C2A0AAB470FB37
Certificate serial:       5058664643001F3242AF7AE7999C939585D3116B
Authority key identifier: 83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33332d3334203d3e20323730343630.roa
Signing time:             Thu 04 Apr 2024 23:25:49 +0000
ROA not before:           Thu 04 Apr 2024 23:20:49 +0000
ROA not after:            Thu 03 Apr 2025 23:25:49 +0000
asID:                     270460
IP address blocks:        2804:6c54::/33 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:58:66:46:43:00:1f:32:42:af:7a:e7:99:9c:93:95:85:d3:11:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DB8824320D38B985E019F808C2A0AAB470FB37
        Validity
            Not Before: Apr  4 23:20:49 2024 GMT
            Not After : Apr  3 23:25:49 2025 GMT
        Subject: CN=2E61C5CC918B66E9FCD0C4BB4C80EF9DCF6E3C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:90:d0:9a:a6:17:78:45:39:89:40:e7:e0:
                    84:3e:10:41:b1:8e:d7:43:bd:b7:e1:fc:a9:c0:92:
                    ef:88:06:23:43:9f:6d:f8:58:b7:7b:01:83:a2:c3:
                    01:4c:64:81:0a:f9:d1:14:ac:02:b8:6f:9e:1c:cb:
                    94:41:f3:da:f7:1e:e1:ca:e4:0d:22:37:ca:64:4a:
                    34:c8:86:27:4b:7a:cd:e0:43:5f:90:de:70:53:31:
                    2c:4d:83:03:e4:f8:32:91:17:8b:29:f8:06:56:68:
                    8d:80:2e:d4:92:a5:fe:20:e6:d2:78:1e:7c:91:f2:
                    db:dd:e4:e6:d4:9f:35:92:6d:cb:67:90:7f:3e:05:
                    5a:f9:f7:92:e1:5c:5b:11:fa:8e:b7:89:13:e8:16:
                    30:a2:2d:23:e9:f8:fb:6b:d8:24:5a:a1:c1:19:cc:
                    e6:ba:ed:97:ba:bf:4c:e2:88:8a:de:ff:a6:47:30:
                    a8:c7:68:0e:87:43:4f:fc:79:23:43:51:bc:4d:38:
                    16:1f:62:83:e9:18:22:94:45:71:8c:13:3d:1e:86:
                    c4:76:51:e8:0a:83:f3:fd:af:70:74:8c:4e:6e:a9:
                    39:36:93:22:fa:6b:41:50:ff:3c:b1:bf:c8:a6:0b:
                    09:8a:69:2d:c6:dd:b3:65:36:0b:38:c4:f7:06:ef:
                    1d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:C5:CC:91:8B:66:E9:FC:D0:C4:BB:4C:80:EF:9D:CF:6E:3C:23
            X509v3 Authority Key Identifier:
                keyid:83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33332d3334203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:2b:ae:f4:a7:d7:bd:88:ef:70:21:fb:d9:cf:c5:69:ea:
         f6:7c:e1:39:de:64:c0:1b:82:c6:ad:a3:5a:2e:b3:06:0e:eb:
         8b:fb:88:09:d3:72:5d:c7:15:d6:b6:a9:a2:1e:08:3a:31:aa:
         e2:c6:75:77:22:82:ba:ad:cd:24:15:bc:54:44:41:6c:34:0c:
         e1:c9:4e:41:52:d0:35:e7:51:02:aa:bc:33:7c:8d:b5:cf:a0:
         0e:5f:0b:93:04:6c:41:20:d9:f9:8f:72:6d:34:6a:de:11:5b:
         dd:d6:4b:12:5d:54:07:73:48:88:04:22:7f:6f:fe:c6:0a:c3:
         34:b4:75:5d:49:3c:34:02:11:5a:f0:16:53:c7:71:2d:fe:33:
         bf:9f:dc:e2:c6:51:8c:06:41:d7:95:41:e2:34:eb:94:14:af:
         10:1c:fb:e1:f2:0e:fb:2a:a2:13:4e:02:66:62:55:60:04:91:
         04:1a:6b:b5:e6:f6:b5:d2:27:7b:63:03:21:12:da:86:26:28:
         0d:a0:a5:74:e5:6d:2a:9a:92:42:7a:b7:43:cd:7f:f7:96:36:
         0b:33:05:47:36:c8:9d:1d:d1:b5:e7:9c:07:45:ee:0e:5b:2c:
         ca:d8:22:d0:78:0a:92:25:57:75:ae:13:1e:db:4d:8b:42:08:
         89:9d:a6:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUFhmRkMAHzJCr3rnmZyTlYXTEWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNEQjg4MjQzMjBEMzhCOTg1RTAxOUY4MDhDMkEwQUFC
NDcwRkIzNzAeFw0yNDA0MDQyMzIwNDlaFw0yNTA0MDMyMzI1NDlaMDMxMTAvBgNV
BAMTKDJFNjFDNUNDOTE4QjY2RTlGQ0QwQzRCQjRDODBFRjlEQ0Y2RTNDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9ZDQmqYXeEU5iUDn4IQ+EEGx
jtdDvbfh/KnAku+IBiNDn234WLd7AYOiwwFMZIEK+dEUrAK4b54cy5RB89r3HuHK
5A0iN8pkSjTIhidLes3gQ1+Q3nBTMSxNgwPk+DKRF4sp+AZWaI2ALtSSpf4g5tJ4
HnyR8tvd5ObUnzWSbctnkH8+BVr595LhXFsR+o63iRPoFjCiLSPp+Ptr2CRaocEZ
zOa67Ze6v0ziiIre/6ZHMKjHaA6HQ0/8eSNDUbxNOBYfYoPpGCKURXGMEz0ehsR2
UegKg/P9r3B0jE5uqTk2kyL6a0FQ/zyxv8imCwmKaS3G3bNlNgs4xPcG7x3LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULmHFzJGLZun80MS7TIDvnc9uPCMwHwYDVR0j
BBgwFoAUg9uIJDINOLmF4Bn4CMKgqrRw+zcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFUblNlckJlNU1RQzFrSjJabkpybUVFbTl1TGtzYmtRSmg5OWpOdE5F
SmMvMS84M0RCODgyNDMyMEQzOEI5ODVFMDE5RjgwOEMyQTBBQUI0NzBGQjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzREI4ODI0MzIwRDM4Qjk4
NUUwMTlGODA4QzJBMEFBQjQ3MEZCMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRVG5TZXJCZTVNUUMxa0oyWm5Kcm1FRW05dUxrc2JrUUpoOTlqTnRORUpjLzEv
MzIzODMwMzQzYTM2NjMzNTM0M2EzYTJmMzMzMzJkMzMzNDIwM2QzZTIwMzIzNzMw
MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARsVAAwDQYJKoZIhvcNAQELBQADggEBAI6UK670
p9e9iO9wIfvZz8Vp6vZ84TneZMAbgsato1ouswYO64v7iAnTcl3HFda2qaIeCDox
quLGdXcigrqtzSQVvFREQWw0DOHJTkFS0DXnUQKqvDN8jbXPoA5fC5MEbEEg2fmP
cm00at4RW93WSxJdVAdzSIgEIn9v/sYKwzS0dV1JPDQCEVrwFlPHcS3+M7+f3OLG
UYwGQdeVQeI065QUrxAc++HyDvsqohNOAmZiVWAEkQQaa7Xm9rXSJ3tjAyES2oYm
KA2gpXTlbSqakkJ6t0PNf/eWNgszBUc2yJ0d0bXnnAdF7g5bLMrYItB4CpIlV3Wu
Ex7bTYtCCImdpgA=
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org