Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          b5BUnm2jdL+A/mBPa9OEESYVpxOVOlASIz7YVrkttGw=
Subject key identifier:   5F:05:AA:FE:C2:43:FA:20:F1:19:9B:12:E5:9B:06:D1:0E:50:60:A1
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       5FEDAA89CC89C729224BDDDF2890153D11336CB9
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:29 +0000
ROA not before:           Thu 04 Apr 2024 02:23:29 +0000
ROA not after:            Thu 03 Apr 2025 02:28:29 +0000
asID:                     52706
IP address blocks:        2804:c70:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ed:aa:89:cc:89:c7:29:22:4b:dd:df:28:90:15:3d:11:33:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:29 2024 GMT
            Not After : Apr  3 02:28:29 2025 GMT
        Subject: CN=5F05AAFEC243FA20F1199B12E59B06D10E5060A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:10:ca:97:ed:75:2c:1b:8a:a8:d7:b6:e7:4a:
                    45:3b:56:c9:f4:f4:7a:85:9e:5f:e3:a1:86:3e:73:
                    33:1e:53:c8:0e:43:95:f5:09:fa:74:7d:7e:85:a3:
                    32:da:bf:c6:6a:df:dd:0d:fa:28:5f:24:41:79:ee:
                    77:7c:22:83:65:bc:bb:f9:9e:7c:7b:6e:8c:a1:e9:
                    1d:7b:f6:19:e2:ca:53:49:68:ca:bc:cf:0a:98:73:
                    7e:21:45:cc:01:00:b5:0b:42:97:bc:66:0e:2d:2c:
                    e5:52:d8:90:11:da:76:2e:0a:a6:a6:17:31:b1:1c:
                    f1:85:fc:b5:fd:c1:5e:d1:ec:06:43:ad:5f:56:76:
                    16:24:e5:2f:5e:ec:16:7e:83:82:32:5f:99:d3:32:
                    e6:5d:58:8e:8e:28:dc:db:34:26:41:d3:fe:ed:8c:
                    d1:1a:1b:d0:24:f2:cb:19:93:55:e4:4d:e5:f9:00:
                    4a:72:1e:61:4e:50:f1:e2:74:3f:6e:ef:d7:17:36:
                    77:fe:46:96:76:82:f2:50:44:4a:3a:2c:f5:4e:ef:
                    d5:79:1f:67:88:d8:31:4f:4d:d6:3b:eb:a5:07:12:
                    e5:a1:d8:f8:61:f5:e9:c0:76:fb:71:56:7e:82:43:
                    f7:36:74:a2:60:4c:83:2f:4a:17:2c:52:a9:cb:c7:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:05:AA:FE:C2:43:FA:20:F1:19:9B:12:E5:9B:06:D1:0E:50:60:A1
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:45:5d:5a:41:e0:a5:d1:30:2a:f4:4d:6a:b7:51:c4:6c:ea:
         f1:49:ce:b3:c2:db:35:eb:c4:3d:92:28:d7:54:d7:00:98:ac:
         ec:f4:93:82:64:b3:1c:02:88:e3:bd:b8:f7:3d:2a:a2:41:7b:
         83:10:98:86:c4:9e:18:6f:4d:f9:e8:5c:a4:3c:3c:e8:fe:f3:
         49:ce:c6:ce:bc:f1:d2:3f:5c:d7:84:e6:ef:dd:d8:58:d7:4a:
         b2:13:d9:b7:b7:62:ee:f5:3a:d0:59:31:37:b9:3f:16:c8:54:
         ec:93:6e:54:4d:6d:e1:ba:15:b2:3f:84:00:a5:2c:74:77:3d:
         4b:c5:9c:9f:60:a7:6c:dd:64:f8:df:0f:d0:8b:37:47:cb:c4:
         ab:8e:cd:ff:00:59:44:eb:2d:bc:4b:37:7b:30:6c:1a:aa:2f:
         35:9f:6b:c7:c0:cf:b2:fa:a2:3a:ae:8e:31:3d:76:e6:60:45:
         1e:e6:ec:91:0e:e3:ac:7e:6a:7d:b8:26:43:0c:c5:15:52:9e:
         9c:d9:92:6f:43:3b:78:cb:61:70:05:d0:48:64:eb:83:3d:1d:
         b4:13:58:21:bd:64:8d:82:3d:97:f6:a3:93:f9:35:bf:c4:52:
         79:c0:e1:8d:df:95:ec:d4:ad:84:55:ce:84:e3:4e:2c:f2:47:
         9a:0b:2f:6a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUX+2qicyJxykiS93fKJAVPREzbLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMjlaFw0yNTA0MDMwMjI4MjlaMDMxMTAvBgNV
BAMTKDVGMDVBQUZFQzI0M0ZBMjBGMTE5OUIxMkU1OUIwNkQxMEU1MDYwQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxEMqX7XUsG4qo17bnSkU7Vsn0
9HqFnl/joYY+czMeU8gOQ5X1Cfp0fX6FozLav8Zq390N+ihfJEF57nd8IoNlvLv5
nnx7boyh6R179hniylNJaMq8zwqYc34hRcwBALULQpe8Zg4tLOVS2JAR2nYuCqam
FzGxHPGF/LX9wV7R7AZDrV9WdhYk5S9e7BZ+g4IyX5nTMuZdWI6OKNzbNCZB0/7t
jNEaG9Ak8ssZk1XkTeX5AEpyHmFOUPHidD9u79cXNnf+RpZ2gvJQREo6LPVO79V5
H2eI2DFPTdY766UHEuWh2Phh9enAdvtxVn6CQ/c2dKJgTIMvShcsUqnLx7UxAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUXwWq/sJD+iDxGZsS5ZsG0Q5QYKEwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQMcCAwDQYJKoZIhvcNAQELBQADggEB
ACVFXVpB4KXRMCr0TWq3UcRs6vFJzrPC2zXrxD2SKNdU1wCYrOz0k4JksxwCiOO9
uPc9KqJBe4MQmIbEnhhvTfnoXKQ8POj+80nOxs688dI/XNeE5u/d2FjXSrIT2be3
Yu71OtBZMTe5PxbIVOyTblRNbeG6FbI/hAClLHR3PUvFnJ9gp2zdZPjfD9CLN0fL
xKuOzf8AWUTrLbxLN3swbBqqLzWfa8fAz7L6ojqujjE9duZgRR7m7JEO46x+an24
JkMMxRVSnpzZkm9DO3jLYXAF0Ehk64M9HbQTWCG9ZI2CPZf2o5P5Nb/EUnnA4Y3f
lezUrYRVzoTjTizyR5oLL2o=
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org