Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030393a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a323030393a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          +Z9tPB9JsOA/l9IQ7zXTRq0f9BCrGe+EAZPT+Nf1tq0=
Subject key identifier:   30:94:FB:24:87:66:1E:28:C7:A8:5A:B0:49:E9:4A:83:18:8B:E2:2A
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       01EC19770F52DAD476A921129216113182D19173
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030393a3a2f34382d3438203d3e203532373036.roa
Signing time:             Mon 17 Jun 2024 17:51:18 +0000
ROA not before:           Mon 17 Jun 2024 17:46:18 +0000
ROA not after:            Mon 16 Jun 2025 17:51:18 +0000
asID:                     52706
IP address blocks:        2804:c70:2009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ec:19:77:0f:52:da:d4:76:a9:21:12:92:16:11:31:82:d1:91:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Jun 17 17:46:18 2024 GMT
            Not After : Jun 16 17:51:18 2025 GMT
        Subject: CN=3094FB2487661E28C7A85AB049E94A83188BE22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bf:8d:a1:2f:8a:96:72:55:84:d6:df:fb:d3:
                    3a:b0:5f:28:a4:64:3e:db:07:f6:78:d9:3a:fa:de:
                    82:3a:88:1a:b7:84:c8:cb:b7:c5:56:0d:33:fd:57:
                    ce:b7:b1:d5:da:f3:5f:e1:a1:c9:04:9b:6c:e1:1b:
                    b4:02:01:d5:ec:0a:0e:cd:c3:eb:29:4f:8e:73:0c:
                    12:44:de:60:d4:49:30:aa:a5:36:85:05:5f:d8:9e:
                    5b:21:fd:b1:1c:23:b7:40:ea:e6:04:c3:b1:c6:e0:
                    39:e3:3a:15:3b:5a:79:39:f1:95:ee:f4:87:07:df:
                    b8:66:09:a4:45:5d:46:fd:94:d2:04:31:25:55:f0:
                    9a:aa:2d:e3:f1:ce:a4:13:7c:f8:78:58:ef:7c:69:
                    58:df:1b:ef:ad:27:ad:b5:99:e2:27:14:a9:ce:a0:
                    fc:ab:3b:03:69:7b:03:66:14:14:ef:d3:99:c6:eb:
                    ee:e7:de:d9:b6:44:2a:41:6a:fc:42:81:5c:28:64:
                    26:b1:e6:20:f5:35:b1:e2:64:9f:74:5b:d7:23:5a:
                    43:7c:e0:27:fd:55:39:bb:4f:a7:ca:b3:d9:4e:02:
                    c4:6d:e0:3d:97:6e:ad:eb:b3:40:d2:f6:35:ca:af:
                    a9:55:62:f4:f2:66:10:71:2f:29:ca:67:d8:79:fb:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:94:FB:24:87:66:1E:28:C7:A8:5A:B0:49:E9:4A:83:18:8B:E2:2A
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a323030393a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2009::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:90:d9:ed:0a:c5:dc:f3:5e:5d:c0:a1:b4:56:79:10:f0:70:
         50:c4:71:71:52:6a:54:88:ad:fa:b9:64:af:c3:0b:1c:fc:75:
         2a:f2:96:c6:71:03:d3:84:4d:df:44:01:d5:3d:32:e5:5d:04:
         14:bc:38:c4:8f:77:12:83:30:c6:db:fb:ba:1b:5c:40:d4:2a:
         2b:d9:8f:54:95:a9:09:a1:fb:62:04:5e:1a:01:8f:51:0e:6e:
         6a:34:1c:f0:00:6a:d2:d2:b9:98:53:c6:a8:85:85:9b:82:10:
         ae:06:d5:c9:c6:1b:ad:af:33:09:80:3d:c6:13:aa:60:e7:66:
         52:a4:5a:6a:7c:4b:e3:0f:56:94:ca:8e:6a:bf:31:c6:b1:73:
         ca:7c:45:3f:32:ac:eb:39:6a:69:a7:53:93:f5:4f:f3:13:d0:
         bd:20:20:31:31:06:38:b6:6e:57:37:8b:70:6c:83:9a:8c:47:
         b6:d3:da:66:9d:96:ad:23:72:c5:98:85:09:8c:24:2f:9e:7e:
         79:b7:d0:14:fb:44:d8:c4:37:87:1c:0c:7a:ba:c0:b0:6d:f4:
         d8:b1:5f:f1:77:68:23:28:c2:f3:26:9e:79:f6:32:42:e3:91:
         94:71:61:ba:ba:0e:2d:ed:18:e5:f2:20:b1:d7:a7:38:58:50:
         ea:b2:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org