Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          5VfPeqe9qipVA94Lt7YGA5Oq4zhLtoYcbMTieyOeGIk=
Subject key identifier:   B1:8C:C1:1D:ED:99:7E:0A:36:59:7B:A4:94:CC:48:DF:CC:85:57:52
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2C3135BD1FD56EC734B09308C276090348578F9A
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:29 +0000
ROA not before:           Thu 04 Apr 2024 02:23:29 +0000
ROA not after:            Thu 03 Apr 2025 02:28:29 +0000
asID:                     52706
IP address blocks:        2804:c70:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:31:35:bd:1f:d5:6e:c7:34:b0:93:08:c2:76:09:03:48:57:8f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:29 2024 GMT
            Not After : Apr  3 02:28:29 2025 GMT
        Subject: CN=B18CC11DED997E0A36597BA494CC48DFCC855752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:54:a2:1f:11:ef:87:dd:fb:d3:34:c9:08:
                    03:9d:86:4b:c1:58:6d:9a:4e:b5:74:4c:58:7e:ac:
                    fa:e4:92:77:09:e8:58:ea:6e:37:90:1d:ec:98:c9:
                    06:9a:c0:b1:f2:80:8b:9d:4f:3a:9e:4a:be:e5:6b:
                    eb:43:97:31:7b:f2:64:9e:61:ba:18:20:88:0b:8a:
                    eb:13:bb:86:6d:19:53:a0:06:91:1c:bd:c2:16:97:
                    f8:00:d9:c7:3f:a8:f0:e9:5c:b6:79:46:69:9b:e4:
                    6b:66:1b:84:d0:47:29:f6:61:31:5e:a7:29:f1:d7:
                    3d:8d:a8:2a:58:39:22:cb:ad:35:b6:2a:d9:bd:be:
                    65:ea:24:c1:a9:89:9f:cf:b1:d1:0f:95:13:d0:4e:
                    0c:09:8f:ca:8d:23:ba:81:91:56:12:e4:2c:5a:48:
                    46:ba:bf:b0:3d:ce:31:2a:54:c5:20:54:4a:38:ab:
                    88:49:7f:d6:ab:39:4d:5e:d3:3f:e1:21:55:3e:ae:
                    d4:fc:b6:38:02:df:ef:f0:c5:ef:be:e5:e0:3e:24:
                    10:6d:94:5a:4c:61:a3:eb:4c:97:26:d0:6f:55:3c:
                    2f:9b:42:ff:6a:af:4c:93:85:2a:c9:16:1b:22:32:
                    fa:84:24:58:0f:a9:78:93:b7:ff:5d:68:52:e2:da:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8C:C1:1D:ED:99:7E:0A:36:59:7B:A4:94:CC:48:DF:CC:85:57:52
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:4f:27:ee:f6:1c:79:a5:b6:6d:d8:65:d3:c0:f7:43:2f:
         73:df:71:0d:86:23:93:62:ad:da:82:84:36:b0:37:5f:f2:b9:
         6d:1d:28:5a:83:e2:71:c6:ee:85:bb:7f:b5:a2:ff:58:41:8b:
         b6:fe:79:07:be:05:ff:3b:34:a1:2e:c7:cf:8c:c1:82:b0:e9:
         28:8b:43:d9:17:6b:3b:1a:46:19:f7:66:7a:c8:69:bc:a3:e2:
         31:2b:54:df:82:40:93:1b:9a:50:f1:b5:30:cf:54:13:16:ba:
         43:49:43:e8:8e:bb:36:ac:cf:d2:24:f2:26:26:91:e4:2e:d7:
         08:20:f0:dc:08:51:fc:2d:3b:27:8b:15:9e:11:93:ce:81:5d:
         e7:31:4c:80:b3:62:be:84:43:4e:59:cc:7a:7a:e1:dc:09:09:
         48:fb:05:94:9d:72:e7:21:f3:e9:66:03:49:d8:fc:dc:5a:b2:
         63:e4:74:60:13:91:0b:f5:94:1d:d8:1a:98:d3:20:dc:52:62:
         57:c6:71:c3:80:0e:3a:8e:92:b4:f4:7e:32:d3:1a:a0:6c:0b:
         b3:32:ad:38:d5:99:60:d5:49:35:fb:b3:5e:74:35:e9:d1:2b:
         15:f8:51:4f:84:34:1b:f7:ab:37:ae:d2:32:22:54:c6:5c:b0:
         77:1e:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org