Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          7ItJP6dg2fm4sC0JlW4eeMRuu7kuD+QqRwKwpIQZefo=
Subject key identifier:   FC:6C:B9:72:BC:2B:87:25:78:1A:00:6C:6F:E8:4A:C8:47:04:EF:C3
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       46EF871B12324D72F756EDC319B2198752C9C030
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa
Signing time:             Mon 19 May 2025 18:21:52 +0000
ROA not before:           Mon 19 May 2025 18:16:52 +0000
ROA not after:            Mon 18 May 2026 18:21:52 +0000
asID:                     52706
IP address blocks:        2804:c70:2008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 19:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ef:87:1b:12:32:4d:72:f7:56:ed:c3:19:b2:19:87:52:c9:c0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: May 19 18:16:52 2025 GMT
            Not After : May 18 18:21:52 2026 GMT
        Subject: CN=FC6CB972BC2B8725781A006C6FE84AC84704EFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:23:15:88:4b:e6:d8:ee:12:57:cc:a3:ea:5a:
                    37:b9:06:ad:35:d4:3e:91:36:6c:fb:4e:49:c2:94:
                    49:47:6b:e6:f4:31:c3:8c:bb:3e:f3:60:c4:19:df:
                    71:87:13:20:6c:ea:97:12:76:8e:58:d8:cf:40:83:
                    f3:c2:0c:b8:10:77:b4:cb:82:e8:19:f8:fa:40:0a:
                    af:5d:8b:7f:f9:68:da:a4:c3:4f:bb:a0:23:ce:e0:
                    6c:3a:68:3f:f4:5e:79:93:5d:aa:17:02:07:c7:2b:
                    46:f5:d9:4e:4c:9e:99:88:40:cd:ef:99:2d:45:6e:
                    92:e6:7f:42:3f:9b:14:74:a2:8c:21:c8:86:9a:98:
                    aa:12:d1:f5:a2:9a:a8:97:6a:dd:a9:a4:78:bc:a8:
                    27:7c:24:38:43:c6:8f:3f:7c:67:3f:0a:a2:e4:9a:
                    16:08:c5:c7:ae:10:50:68:b8:91:6a:37:fe:b8:40:
                    22:f0:67:2d:45:74:2d:e6:19:cf:4e:75:0b:91:90:
                    8b:30:99:63:a7:cb:4f:82:a2:f7:25:9f:eb:33:60:
                    ec:83:3a:6d:f2:32:9d:9b:e5:37:15:f3:0f:99:fe:
                    c4:14:31:07:2f:93:10:06:54:8d:ba:7a:17:73:3a:
                    c3:c2:1b:c5:1d:cd:82:ac:bd:1b:8d:94:aa:69:6f:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6C:B9:72:BC:2B:87:25:78:1A:00:6C:6F:E8:4A:C8:47:04:EF:C3
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030383a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2008::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:93:59:74:3b:59:45:42:37:d2:05:65:a6:be:55:c7:5d:99:
         51:fa:23:f3:ee:7a:25:10:1a:10:06:47:2d:f9:2b:c5:f8:c6:
         4e:f1:3e:73:11:33:2d:ed:b9:45:29:8c:66:a2:11:e9:ae:8d:
         29:a8:d8:f0:01:77:61:40:d2:27:a6:c6:51:31:c5:c1:70:a1:
         c9:f7:86:3e:e2:da:c0:68:cc:68:5b:a1:8b:03:b8:dd:e8:d9:
         d8:7d:1c:63:3e:0c:cf:ae:b7:d8:5a:82:d9:96:61:58:2c:61:
         68:52:ff:f5:c4:7c:ae:ce:09:42:ee:54:81:5d:1c:cf:40:e9:
         f0:71:0b:56:f5:34:58:75:40:6e:b6:40:c8:70:74:d3:4b:39:
         5d:bc:40:74:12:b3:9a:ae:f3:03:4b:b3:3a:a8:f5:2a:db:47:
         b1:7e:d1:09:36:01:53:bd:fa:73:96:d6:de:11:62:a1:ef:96:
         fd:79:d4:b0:c1:09:85:41:7c:75:0f:8a:7d:07:39:ff:a0:46:
         7f:87:03:22:44:77:82:29:2a:36:e3:1d:20:63:8b:11:a2:c5:
         94:57:d1:97:a8:f1:51:ba:8c:bd:4f:0b:08:e3:ca:69:27:7e:
         8e:fd:ae:d2:2f:c2:a0:0f:08:a1:98:81:7e:0d:87:99:f5:10:
         71:59:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:41:25 2025 by rpki-client