Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa
File:                     323830343a356533343a3a2f33322d313238203d3e20323639303138.roa (raw, json)
Hash identifier:          z9e1VMLViDskgG0qvy/eUsr1O0XMyvwPIp0+dLzpV9k=
Subject key identifier:   F0:2A:6D:29:9E:F1:26:E6:C5:BE:65:32:22:68:72:1E:A8:11:72:4F
Certificate issuer:       /CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
Certificate serial:       54BC49F12BC86EFD08A6ECF41B3F5D6996C752C0
Authority key identifier: 83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa
Signing time:             Thu 04 Apr 2024 02:26:57 +0000
ROA not before:           Thu 04 Apr 2024 02:21:57 +0000
ROA not after:            Thu 03 Apr 2025 02:26:57 +0000
asID:                     269018
IP address blocks:        2804:5e34::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl
                          rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bc:49:f1:2b:c8:6e:fd:08:a6:ec:f4:1b:3f:5d:69:96:c7:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83CE6152C5DC2AF2E628D574237B19843CB8056C
        Validity
            Not Before: Apr  4 02:21:57 2024 GMT
            Not After : Apr  3 02:26:57 2025 GMT
        Subject: CN=F02A6D299EF126E6C5BE65322268721EA811724F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:1d:6f:77:71:23:3e:27:20:8f:c2:ac:bf:
                    0b:2d:e5:2a:b9:98:d4:57:ec:34:8b:89:92:1f:11:
                    e9:13:d7:05:6f:ee:90:b0:0e:cb:5d:85:1c:b9:61:
                    ed:7f:6a:b4:7a:cd:12:02:71:54:75:b3:87:67:7f:
                    bc:b5:54:19:f4:32:7d:5d:b0:1a:44:75:76:07:90:
                    cb:31:71:5a:72:a0:79:02:2b:c5:49:29:39:37:03:
                    89:81:22:6e:30:2a:1b:05:83:88:f3:02:1d:0c:59:
                    65:9d:1f:9c:b9:d5:3a:35:bd:2e:ed:ee:5f:49:2f:
                    c2:b7:d3:07:62:29:45:40:f6:64:92:b0:be:32:bd:
                    1d:8b:e6:40:38:42:26:40:e9:58:42:31:2a:56:09:
                    21:fd:d4:3b:2f:e8:f7:7d:14:0d:4b:a2:dd:71:7c:
                    2e:5c:4b:8f:38:d4:48:92:7d:14:b0:b5:53:32:3e:
                    89:6d:ce:ca:bb:05:e8:50:67:75:7d:a5:b5:10:aa:
                    b9:14:c0:1d:68:4e:ee:9c:95:45:c3:0f:a9:8b:be:
                    b2:67:14:a1:c9:f5:54:26:65:3c:e0:54:39:81:c6:
                    9b:7d:e5:63:c1:9a:da:9a:7a:df:a5:1f:19:fe:10:
                    00:b2:ca:b9:0a:e1:e1:44:e1:f1:ed:7f:30:20:a3:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2A:6D:29:9E:F1:26:E6:C5:BE:65:32:22:68:72:1E:A8:11:72:4F
            X509v3 Authority Key Identifier:
                keyid:83:CE:61:52:C5:DC:2A:F2:E6:28:D5:74:23:7B:19:84:3C:B8:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83CE6152C5DC2AF2E628D574237B19843CB8056C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DyMaBAFmTbEbu1Yxsv2ndwCJGTGch5EmBpRVikvJuqBK/1/323830343a356533343a3a2f33322d313238203d3e20323639303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:03:7d:97:e2:2a:e8:9f:02:5c:73:24:eb:0f:87:1e:b9:
         ed:e6:0b:3f:02:fc:57:4c:3d:e5:38:bf:57:a3:cb:c4:44:73:
         e2:c4:87:a7:e6:2e:54:7b:53:6c:77:a5:1a:bb:0e:b0:30:c2:
         2b:f6:66:3e:66:f9:f7:98:4b:c3:07:10:e2:0e:6a:a8:1a:80:
         3b:60:88:42:5a:86:0f:4a:53:aa:20:ac:08:d8:8a:a7:82:af:
         fd:a4:c3:b1:69:9a:99:b2:78:ae:24:95:6d:4c:66:c5:69:d7:
         98:7c:7b:d5:79:90:28:95:3e:3d:16:88:be:8f:5a:4d:41:05:
         eb:5f:01:95:c2:f4:3c:2c:7e:9d:9c:34:f4:58:f9:cb:9c:db:
         cb:02:95:da:6d:88:5a:c3:3d:be:92:51:74:c3:76:c9:5d:d8:
         11:12:fa:eb:dd:24:35:9b:2a:84:3f:94:bc:b1:0f:4e:65:f9:
         2d:70:57:38:42:08:3e:65:3b:a0:e8:5e:fa:f3:24:12:af:0a:
         ec:ce:b1:d3:36:a1:7f:91:ce:4d:dc:2b:66:04:23:64:23:a6:
         9f:ba:d9:d7:30:70:1e:37:7a:e5:53:bc:63:37:05:a9:92:60:
         ad:c3:f2:f2:2e:7a:7f:5d:a0:f3:77:c4:88:a9:43:87:7d:c3:
         6a:48:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:08 2024 by rpki-client on console-fra.rpki-client.org