Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          iwNmZP+BfeJZyphMNzRTQpn6OI3UkyvSbK6YR2PwLkM=
Subject key identifier:   3E:9C:AB:19:5A:6C:A1:57:17:F1:A9:4E:9E:F7:92:A7:36:CF:AB:78
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       46432DF6532EED6900E652D4A29572687E9B9B39
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:34 +0000
ROA not before:           Thu 04 Apr 2024 02:23:34 +0000
ROA not after:            Thu 03 Apr 2025 02:28:34 +0000
asID:                     52706
IP address blocks:        2804:c70:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:2d:f6:53:2e:ed:69:00:e6:52:d4:a2:95:72:68:7e:9b:9b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:34 2024 GMT
            Not After : Apr  3 02:28:34 2025 GMT
        Subject: CN=3E9CAB195A6CA15717F1A94E9EF792A736CFAB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:bb:0f:7d:9a:e7:7f:e5:eb:5c:4e:02:67:
                    21:e0:52:1a:02:ae:3c:a3:08:27:41:45:e4:62:3e:
                    4f:a1:9e:ba:aa:5f:09:6c:41:09:42:75:9d:65:f3:
                    c7:7e:39:19:9d:67:26:ff:3e:93:96:30:55:12:51:
                    82:6e:77:12:04:1c:8f:18:0d:cf:5c:8c:73:74:f5:
                    ba:5f:14:d1:86:45:ee:f2:c1:36:7b:d0:43:70:76:
                    b7:21:f1:98:24:53:43:4e:79:6b:e7:65:c0:cc:ba:
                    80:1f:7a:cb:1c:cc:2c:c3:4b:b9:51:d9:b0:1a:fc:
                    fb:34:ab:7c:42:d5:74:8c:0e:0d:ba:4d:23:18:fe:
                    9c:98:2e:1e:07:fc:b0:71:18:54:a0:cb:ff:c4:59:
                    3c:af:bc:fe:4d:16:b7:b5:c4:ac:00:29:97:08:20:
                    15:3c:ea:94:aa:ec:ca:35:5f:8a:68:33:d3:b9:3b:
                    d5:a1:ff:b9:a3:21:b4:a0:ed:2e:4f:ee:e0:3d:c0:
                    a6:8e:e7:4d:85:a7:d7:61:51:68:02:76:70:35:fd:
                    6d:fb:f6:5d:bb:1a:62:de:f7:8d:58:5d:fd:82:ef:
                    d1:ac:7c:88:7c:a9:0b:53:1b:31:71:3e:24:e7:52:
                    2c:d6:63:82:a5:92:28:4c:26:25:dc:fd:b8:b2:cf:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9C:AB:19:5A:6C:A1:57:17:F1:A9:4E:9E:F7:92:A7:36:CF:AB:78
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:e4:80:32:fd:d0:01:59:ba:ea:0c:dc:62:6a:5b:c1:04:
         36:9f:27:d5:ff:ed:2e:9d:0a:ca:ba:18:c9:60:d4:7c:33:eb:
         02:53:33:9e:24:3d:9e:35:6c:b8:da:c9:f8:7e:8f:12:f1:7f:
         61:b1:3c:43:ed:fc:0e:b3:0e:c4:d1:e7:80:b9:b9:e7:cc:ea:
         ec:1e:2a:a5:dc:64:d8:55:bc:93:f2:c2:ad:e1:83:00:38:2a:
         37:1a:4d:93:c7:78:79:c8:9b:b1:19:30:3d:78:1b:02:51:d3:
         47:f3:14:d2:c1:f1:57:e5:ac:70:7d:e3:b6:b9:58:66:ef:eb:
         56:40:66:2b:01:bd:03:ac:5e:3b:5e:87:d2:e5:aa:a7:cb:15:
         82:da:7e:b7:85:2b:96:c4:83:ce:86:b0:cb:6c:9c:af:17:e6:
         cb:4c:26:99:9d:0d:81:3b:11:01:ce:33:9f:0e:18:71:8b:a1:
         b4:0e:df:60:44:44:fb:01:e1:fb:be:21:d2:dd:97:58:19:72:
         d3:ca:b4:7c:7c:6c:63:03:b1:32:a9:67:b3:cb:74:fd:34:dc:
         0e:c1:80:8e:d3:82:8b:46:e6:b4:19:ab:83:73:31:e1:0e:17:
         e3:7e:06:f9:53:9d:24:ae:51:a3:3f:3a:2b:7e:8b:30:b9:c3:
         6a:78:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org