Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33332d3334203d3e20323730343630.roa
File:                     323830343a366335343a3a2f33332d3334203d3e20323730343630.roa (raw, json)
Hash identifier:          kWw25a4NWW16t1ECq7qCLzjZUwiKYHwcE9k93oSZc6g=
Subject key identifier:   65:89:3A:69:63:86:54:30:D6:F1:5B:BF:40:DA:2D:A0:05:7C:0E:F0
Certificate issuer:       /CN=83DB8824320D38B985E019F808C2A0AAB470FB37
Certificate serial:       7CA95ED064400E9CB2B941D89FF9D8E0F5716D9D
Authority key identifier: 83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33332d3334203d3e20323730343630.roa
Signing time:             Thu 06 Mar 2025 23:33:31 +0000
ROA not before:           Thu 06 Mar 2025 23:28:31 +0000
ROA not after:            Thu 05 Mar 2026 23:33:31 +0000
asID:                     270460
IP address blocks:        2804:6c54::/33 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl
                          rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a9:5e:d0:64:40:0e:9c:b2:b9:41:d8:9f:f9:d8:e0:f5:71:6d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83DB8824320D38B985E019F808C2A0AAB470FB37
        Validity
            Not Before: Mar  6 23:28:31 2025 GMT
            Not After : Mar  5 23:33:31 2026 GMT
        Subject: CN=65893A6963865430D6F15BBF40DA2DA0057C0EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:2e:1d:86:d6:cc:4e:97:a9:7b:24:b8:97:
                    bf:ee:83:e5:17:7a:86:09:ea:58:71:54:14:d6:fb:
                    99:38:23:fa:65:1a:41:ea:a8:dd:02:68:91:bf:68:
                    d4:ed:73:f6:1d:7c:e6:79:0c:d8:5c:40:12:7f:d3:
                    71:bc:bb:80:67:eb:c8:4c:36:96:01:ed:d5:63:01:
                    c6:f5:38:56:1d:41:60:29:71:48:20:56:71:36:89:
                    cb:23:f7:14:01:10:6a:77:a6:c1:b0:30:8a:bc:c2:
                    38:6f:6a:a1:32:62:ad:ea:2e:e2:51:67:df:d1:b4:
                    27:f2:5d:95:93:af:3e:ab:d7:df:14:94:9c:d4:3f:
                    2d:75:ab:a0:ef:32:98:e2:cf:db:21:40:cf:8a:61:
                    4a:a0:64:90:79:a6:3b:5a:74:fb:82:10:4d:9b:21:
                    79:1d:ba:44:f5:2d:a1:8e:21:37:9c:de:0b:d4:f1:
                    37:25:75:82:dd:bd:d6:d4:d7:a4:64:a5:f7:d6:f8:
                    69:dd:8f:52:71:8c:4b:17:0e:ee:0f:ef:5f:d4:02:
                    63:b7:12:8c:16:cd:e7:d8:2f:de:95:f8:29:39:38:
                    a8:da:6f:ab:d6:3d:d4:07:4a:40:df:01:01:23:c8:
                    a9:0c:57:0a:b6:ae:35:ce:a0:0a:68:a9:aa:c5:51:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:89:3A:69:63:86:54:30:D6:F1:5B:BF:40:DA:2D:A0:05:7C:0E:F0
            X509v3 Authority Key Identifier:
                keyid:83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/323830343a366335343a3a2f33332d3334203d3e20323730343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c54::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:63:d3:59:80:ac:3d:cc:2e:36:e7:57:6f:25:ec:34:b6:
         df:64:2b:a4:9a:c1:f0:bd:87:c1:fd:9c:fd:9e:d7:9f:93:52:
         0d:33:48:c5:cb:d4:65:0b:0d:fa:6c:41:a4:ab:27:ba:e8:38:
         98:7e:b2:3e:6d:92:60:a7:a5:7d:42:97:e4:0e:e1:2a:db:e7:
         af:b8:4d:86:59:d7:e6:f7:48:b2:b3:1d:88:01:70:a7:c6:e8:
         0a:a4:82:19:1e:0d:a5:3f:54:d1:8d:39:01:58:6c:16:b9:fd:
         8d:b9:17:8d:3d:19:97:14:9f:b9:53:b8:9d:ed:55:38:3d:99:
         68:c6:1d:06:e6:9a:49:40:07:d4:ad:21:b8:39:9f:b8:14:a2:
         d6:58:bf:06:07:7e:16:02:d7:d0:70:d2:8d:26:f1:4a:f2:16:
         87:07:0f:6b:9a:84:6c:19:87:f7:2c:f5:b3:4f:69:bd:2a:45:
         19:e5:68:4e:46:0c:97:d0:65:5b:67:b1:27:ee:31:9a:00:c8:
         3b:44:b4:c6:55:cf:99:64:cb:1c:97:c8:ac:17:17:e8:b8:d0:
         83:67:8e:97:08:a1:52:a9:0b:96:d8:0d:81:29:71:23:92:12:
         51:98:39:26:2e:89:33:7f:d8:4f:13:5c:4b:c7:1e:22:35:28:
         7e:0c:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:30:34 2025 by rpki-client