Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313030303a3a2f33362d3438203d3e203532373036.roa
File:                     323830343a6337303a313030303a3a2f33362d3438203d3e203532373036.roa (raw, json)
Hash identifier:          YeDwPZMh6WQIfBDSFHHVtsbNq6A2jlu+Gu49pjTaA64=
Subject key identifier:   47:FA:BA:BD:3C:C2:BA:EC:CD:EF:BD:3A:BF:3B:69:D6:9A:03:A0:7B
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       20CB7FA6EEC80E916C86A5342001AB825FED6601
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313030303a3a2f33362d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:38 +0000
ROA not before:           Thu 04 Apr 2024 02:23:38 +0000
ROA not after:            Thu 03 Apr 2025 02:28:38 +0000
asID:                     52706
IP address blocks:        2804:c70:1000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cb:7f:a6:ee:c8:0e:91:6c:86:a5:34:20:01:ab:82:5f:ed:66:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:38 2024 GMT
            Not After : Apr  3 02:28:38 2025 GMT
        Subject: CN=47FABABD3CC2BAECCDEFBD3ABF3B69D69A03A07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:a2:dc:b6:b9:eb:c6:07:b4:b4:06:d7:93:
                    f9:9c:60:8b:c2:c2:ca:c2:dc:7a:16:ed:31:a5:ca:
                    6e:e6:6a:48:6f:0e:61:dd:61:c5:e4:04:bc:28:24:
                    36:b5:75:27:20:e3:51:e6:0b:5c:12:6e:d4:fe:25:
                    09:62:23:19:be:be:6c:71:93:1b:00:c1:49:5a:e8:
                    ee:6f:b4:cd:d9:66:8f:da:4a:5a:6f:e3:35:aa:42:
                    10:31:af:f0:cb:f9:7d:cb:d1:b4:b2:43:4f:39:5b:
                    05:5d:b9:df:54:90:45:58:8f:4f:ca:27:cf:8d:f5:
                    93:10:f0:48:b0:97:a3:55:8d:2f:f1:e6:62:e2:13:
                    e4:f0:27:e2:e4:23:90:2a:72:62:cd:de:d8:3c:f4:
                    7f:7d:6b:5e:7c:01:06:c6:87:92:26:9d:ef:d6:6c:
                    0a:34:fb:9e:4d:51:14:9f:a9:25:1a:d4:80:aa:55:
                    b2:72:50:7f:7d:90:37:9a:88:9c:37:f9:f7:8f:98:
                    ff:65:56:e2:6b:a3:bf:48:e9:16:cb:ba:82:fc:4b:
                    e0:d7:b2:79:b6:db:ee:8d:3d:77:17:86:90:b8:6f:
                    4f:1f:44:e4:63:47:10:d3:5a:45:7c:4d:26:cb:de:
                    bf:2e:35:c3:04:57:d5:e6:28:f9:10:30:37:9e:50:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FA:BA:BD:3C:C2:BA:EC:CD:EF:BD:3A:BF:3B:69:D6:9A:03:A0:7B
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313030303a3a2f33362d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:7b:18:79:7e:cb:8c:9e:34:da:ca:8c:16:67:d1:de:46:
         0f:f0:19:08:6c:80:09:a6:30:04:04:f1:17:5e:89:4d:fc:5a:
         ee:44:52:56:49:20:47:cf:33:d5:d3:ea:6d:a7:78:5c:97:7a:
         64:b1:46:f5:9a:cf:5d:0c:90:c2:17:62:fc:eb:24:16:c8:00:
         3d:9c:00:59:49:f1:73:db:72:83:f7:d1:d7:1d:20:c0:f2:cf:
         3c:26:61:b2:f8:90:08:37:3d:c0:ce:e5:58:f5:74:54:cf:2b:
         26:37:ca:f0:bb:bc:22:7b:fe:74:29:de:b6:cc:be:6d:8b:7e:
         09:2d:11:81:6d:7c:73:08:13:2c:db:ec:26:f8:a5:02:b2:8b:
         8a:cf:f9:ce:69:06:a8:4a:25:6d:a0:01:d3:cd:da:45:2b:8f:
         10:5a:6d:48:19:89:d5:67:b3:88:ac:5d:f3:4e:ed:ed:69:0b:
         15:08:44:15:18:22:4a:64:b3:56:aa:7e:dd:19:0a:d0:5f:0b:
         ae:07:44:64:0d:59:22:d3:c2:05:25:b5:af:01:66:8a:b0:a4:
         f7:d5:d8:6e:04:b1:7f:97:c2:67:47:f4:21:0c:80:cf:9b:67:
         c9:15:64:7c:13:16:7a:bc:e7:e0:48:fe:d9:1a:49:65:39:a9:
         d3:e5:dd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:36 2024 by rpki-client on console-fra.rpki-client.org