Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          kTm8D55tC0w+8elyFBZalooh4FXxguzwzm+WJLkL15E=
Subject key identifier:   5B:D4:61:E3:EE:C3:9C:74:8A:79:CC:0C:77:66:4E:D6:82:63:7C:06
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       657D3CD5D735062BC493C5DBDCF09B0F567E3286
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:36 +0000
ROA not before:           Thu 04 Apr 2024 02:23:36 +0000
ROA not after:            Thu 03 Apr 2025 02:28:36 +0000
asID:                     52706
IP address blocks:        2804:c70:2001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7d:3c:d5:d7:35:06:2b:c4:93:c5:db:dc:f0:9b:0f:56:7e:32:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:36 2024 GMT
            Not After : Apr  3 02:28:36 2025 GMT
        Subject: CN=5BD461E3EEC39C748A79CC0C77664ED682637C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:d2:c6:b0:34:0d:ee:01:d3:b0:0c:6f:68:
                    98:ab:9d:76:46:1e:0b:4c:e1:59:26:78:e9:f8:71:
                    6b:67:a5:9d:39:b1:5e:27:86:0c:1d:2d:06:22:ba:
                    7d:df:33:85:e5:14:93:b6:3d:a3:76:7b:ad:f0:77:
                    9b:69:d9:e8:04:05:06:29:c8:2e:9e:db:c6:5a:cf:
                    34:04:cd:14:be:40:50:bd:df:8f:28:56:4c:ba:37:
                    81:e1:b5:a9:a0:cd:7a:48:27:ec:90:07:8f:ef:3c:
                    50:e3:7e:69:ba:cd:94:af:cb:e3:2e:31:b8:9c:87:
                    13:d4:59:1e:02:e8:4a:1b:4f:f2:0e:b5:48:cc:3c:
                    d5:90:68:ea:80:c0:ac:05:3d:90:20:1d:96:d2:5b:
                    64:d3:83:31:db:a1:9c:7e:08:cc:b9:7d:01:29:1e:
                    8e:fb:e3:f3:6e:33:67:b5:d1:91:86:79:8f:d1:2b:
                    2f:4b:79:42:d2:fd:bc:03:b5:80:68:ec:00:92:8d:
                    e9:be:0a:1c:0c:e5:40:90:1f:27:a4:27:dc:df:ef:
                    10:d6:75:f5:d2:2a:54:c5:7e:07:b5:cb:f0:68:27:
                    5b:93:df:e6:df:d4:95:6f:60:5d:97:76:c1:74:ef:
                    65:40:be:49:d9:42:17:d2:42:04:38:89:7b:03:63:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:61:E3:EE:C3:9C:74:8A:79:CC:0C:77:66:4E:D6:82:63:7C:06
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2001::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:1b:b1:c2:c6:41:dd:88:a1:c1:e4:db:d9:6c:c6:47:86:6e:
         14:cf:f0:1b:69:3b:da:82:82:7e:9e:42:f7:20:d2:33:ce:0e:
         f3:bf:6d:bf:27:94:1e:b5:2a:5c:26:76:63:12:a0:b8:ab:89:
         2d:c9:a6:a5:40:e3:23:65:e4:73:3a:69:b2:84:41:a1:5d:c3:
         95:b6:2e:19:c4:96:1c:6b:13:6c:32:2c:31:7a:8f:b6:84:18:
         63:c7:43:14:74:96:4e:c1:bf:dc:aa:66:18:86:df:2e:b4:f7:
         ab:f3:22:f5:2a:6e:f2:a8:f4:3f:1e:d1:28:7a:6d:09:6e:80:
         0d:5e:ad:0c:b6:1c:08:19:8d:6a:48:8b:64:ba:44:36:f7:15:
         aa:da:e3:a2:8b:00:21:bc:ec:6b:50:14:ff:94:eb:89:33:1a:
         7e:ac:b7:d6:cc:71:4d:59:47:55:90:53:68:da:e1:e6:18:bb:
         1e:ad:19:50:69:1b:06:3f:69:a8:02:94:e8:e6:90:4c:0d:b7:
         05:db:38:15:62:10:1d:c4:9c:5a:4e:d4:b4:62:f0:52:85:c9:
         4c:a4:51:ff:2b:fa:34:ec:61:a3:d4:fd:7e:ff:10:71:af:78:
         64:5c:d7:80:fe:a0:fb:67:c7:10:f5:0f:cc:55:e5:2f:1a:6d:
         cc:ca:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:36 2024 by rpki-client on console-fra.rpki-client.org