Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          D4LoFsI3d2Nlkei7GDIRbp2AvdpRSXH2ozUEOb837PY=
Subject key identifier:   87:23:A6:CC:10:BC:43:F0:2A:D9:63:BA:63:B5:00:7D:35:56:48:07
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       035CAFB6543A9F4AD3AF8C5E681F88BFCEC93806
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:30 +0000
ROA not before:           Thu 04 Apr 2024 02:23:30 +0000
ROA not after:            Thu 03 Apr 2025 02:28:30 +0000
asID:                     52706
IP address blocks:        2804:c70:2002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5c:af:b6:54:3a:9f:4a:d3:af:8c:5e:68:1f:88:bf:ce:c9:38:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:30 2024 GMT
            Not After : Apr  3 02:28:30 2025 GMT
        Subject: CN=8723A6CC10BC43F02AD963BA63B5007D35564807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:2b:88:ee:e1:0b:aa:f2:05:77:2f:18:d6:
                    10:1d:c1:cf:93:55:4a:95:ef:04:54:12:ed:70:9a:
                    5f:7e:6d:e9:17:91:0c:5c:45:eb:74:1a:06:4c:04:
                    34:8a:7b:8e:ad:ca:27:e6:ee:03:88:b2:a3:11:44:
                    54:ba:87:43:f7:d7:35:4f:ef:83:67:4d:06:78:dd:
                    86:92:ca:d2:f8:f6:5f:b7:d8:ce:45:23:34:05:67:
                    78:09:14:81:2d:c2:7d:dc:a0:c9:f7:4e:48:e9:14:
                    a5:8e:8b:f2:47:25:f7:65:70:d5:b4:1c:9f:e2:8b:
                    6c:c0:c8:24:4a:86:ec:6e:3a:f4:10:6f:fa:97:f1:
                    3c:b6:2e:a7:4c:78:2b:27:98:5c:63:3b:84:e9:a7:
                    94:6b:07:7b:e6:ff:db:39:76:53:18:8c:e2:f7:c3:
                    d2:90:76:e9:1d:ad:65:b8:41:d4:ce:db:ee:67:88:
                    13:73:a6:2c:9b:05:b7:0d:c3:1f:95:04:82:37:36:
                    86:40:16:d1:e8:7a:cf:fd:cb:04:9d:fa:66:1e:e4:
                    06:17:a8:7b:b6:10:49:d3:0e:bd:1d:cd:6a:dc:fc:
                    f1:13:32:17:e4:6b:9d:59:47:51:da:bb:5b:b3:52:
                    a8:72:80:40:0d:79:c2:f4:a4:7c:6f:8f:b7:44:89:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:23:A6:CC:10:BC:43:F0:2A:D9:63:BA:63:B5:00:7D:35:56:48:07
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:8f:de:48:30:40:f2:46:b4:bf:75:c1:89:6e:8e:8e:67:
         86:ff:27:81:e1:63:0c:02:c3:4f:57:07:e7:f6:d8:e3:41:01:
         c9:9e:a8:2f:4f:61:57:b0:84:70:90:59:f3:1d:d0:18:e3:17:
         80:43:f2:f3:31:69:23:99:65:0b:c0:50:b5:e0:e9:4a:d4:17:
         8a:37:1c:bb:45:70:72:bb:f2:cb:7e:a7:73:23:bf:83:d9:1e:
         c6:f8:ea:32:71:6b:f0:82:b1:a2:b8:a5:d4:89:9e:50:67:80:
         f3:ec:49:43:93:04:fe:66:0f:db:ec:99:7f:63:4e:dc:bc:4c:
         cb:a0:f3:26:66:65:89:a5:41:df:67:df:8f:3f:fa:6c:8b:53:
         3f:c8:f3:7f:4b:dc:18:c2:7b:ce:6c:ba:cc:46:1d:94:4e:bf:
         c9:b3:7f:4d:01:73:9d:3f:7d:5c:f8:dc:81:98:60:67:35:15:
         55:80:79:38:fc:2d:c1:65:56:a9:fb:9c:68:32:c2:fb:23:af:
         b7:60:ff:e9:f2:45:f8:d3:3e:6a:88:f4:95:70:d5:ab:db:29:
         bb:e2:da:a2:d4:64:83:8f:c4:e2:9c:b7:4e:a2:07:e1:88:39:
         63:02:b6:c3:c2:a2:ac:cc:0e:f4:5e:a4:db:49:29:aa:b9:16:
         7b:7d:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org