Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          OfdWxPJuIYpRrjraHxx/6/+93HJbypwVTpo9/xQYAr8=
Subject key identifier:   63:C3:E3:6A:C2:75:48:3B:31:A9:3E:00:AE:E6:FA:D3:DB:DB:B9:B0
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       14BD7E90FEC422448633311B20D3AA1A640469CB
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:35 +0000
ROA not before:           Thu 06 Mar 2025 02:26:35 +0000
ROA not after:            Thu 05 Mar 2026 02:31:35 +0000
asID:                     52706
IP address blocks:        2804:c70:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bd:7e:90:fe:c4:22:44:86:33:31:1b:20:d3:aa:1a:64:04:69:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:35 2025 GMT
            Not After : Mar  5 02:31:35 2026 GMT
        Subject: CN=63C3E36AC275483B31A93E00AEE6FAD3DBDBB9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a7:99:1d:3a:a7:6e:c0:7b:05:2e:b7:8d:46:
                    b6:70:a9:68:48:91:8b:4c:d9:a8:6f:7b:4f:10:b6:
                    eb:3e:6e:3b:6e:c9:af:eb:71:af:38:36:7f:7d:4a:
                    1c:11:d5:54:fc:ce:86:1b:15:b1:6b:af:56:6c:1a:
                    1c:32:e7:1c:c9:bd:95:5e:45:6c:fe:11:50:7c:68:
                    99:4f:9a:94:6f:3d:b5:b2:17:9d:9d:37:2b:9d:33:
                    15:f2:76:4c:ad:d8:58:32:a4:7e:68:5a:5d:09:1b:
                    15:64:40:a7:13:d9:e8:c1:9b:3b:24:e8:4a:33:03:
                    76:f0:ac:e9:b8:01:23:60:83:0a:cc:91:81:83:0e:
                    33:e3:da:2c:d3:80:77:d4:7e:40:cf:5c:00:4a:8f:
                    77:98:d3:10:e4:14:8d:42:ce:10:4c:6f:e2:aa:4c:
                    4d:bb:26:f0:36:f9:a9:93:7d:03:2f:a2:e8:03:fd:
                    e6:a7:5d:0d:1c:e3:31:70:1e:46:7d:51:0d:a0:ff:
                    2e:8b:a4:be:54:f5:36:fd:fc:05:37:93:03:ae:86:
                    da:22:9c:f4:c8:39:6b:c7:34:05:79:86:ac:31:b7:
                    40:57:7b:fd:d6:ff:a4:0b:52:9a:9b:9c:6f:24:c2:
                    ec:cd:e2:3d:e8:bc:6e:bb:f3:b6:2c:f2:59:3b:99:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C3:E3:6A:C2:75:48:3B:31:A9:3E:00:AE:E6:FA:D3:DB:DB:B9:B0
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:f6:c6:cc:c8:59:7f:7e:2a:a3:d7:87:3a:99:b0:b5:a4:
         21:2e:7b:60:e6:d8:bd:e5:5b:ae:b8:a6:dd:4d:f0:1d:2e:36:
         ae:62:d6:cd:a0:a5:9d:6a:c7:d5:3a:19:a9:35:0f:a4:aa:78:
         90:91:c9:f0:f5:de:91:c3:74:f0:12:23:a3:e4:ba:bb:1a:f5:
         78:bb:75:4e:cf:02:01:f4:b2:03:6c:d4:9b:8a:a1:ce:9d:ae:
         fc:62:ee:3f:39:d5:79:83:6f:02:ba:b4:b3:10:8b:b2:76:03:
         2e:e5:ad:27:8a:c3:96:34:0b:f9:46:a1:b9:43:ef:0e:99:b1:
         34:57:a3:a3:7d:3e:76:6a:7e:49:d7:44:c5:f7:46:62:92:03:
         25:2e:1b:e6:d9:35:83:24:33:7a:bf:59:6e:a3:b8:e5:16:dc:
         8c:8c:cb:46:06:3d:3a:92:0d:c8:ae:ce:e7:b0:75:91:43:13:
         37:3c:15:68:90:14:b5:cb:24:5d:1f:2b:81:d3:ce:29:cd:32:
         37:73:8a:3d:d0:39:1f:79:cd:6d:c7:04:b0:e6:c8:65:4f:06:
         91:d5:bb:9c:51:d4:9d:fa:b3:2c:aa:88:c5:7d:6a:ad:dd:29:
         d3:6d:5b:1b:e8:28:f0:8f:0e:a5:39:6a:e2:8f:53:0d:5f:d9:
         65:d6:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:01:39 2025 by rpki-client