Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          QWCDwDCgZIXa47A7U4v4qxjVVllIJqY/lF8kly79iwI=
Subject key identifier:   58:7B:12:A3:D4:25:AE:FF:67:90:BE:96:7D:55:CC:AF:05:83:60:79
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       01CAFED24E75FD15ECFC4C471F24963D2E32E947
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:36 +0000
ROA not before:           Thu 06 Mar 2025 02:26:36 +0000
ROA not after:            Thu 05 Mar 2026 02:31:36 +0000
asID:                     52706
IP address blocks:        2804:c70:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ca:fe:d2:4e:75:fd:15:ec:fc:4c:47:1f:24:96:3d:2e:32:e9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:36 2025 GMT
            Not After : Mar  5 02:31:36 2026 GMT
        Subject: CN=587B12A3D425AEFF6790BE967D55CCAF05836079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:37:0e:90:b8:d2:ec:8c:af:f9:d9:aa:f9:2a:
                    df:09:7b:7b:19:7a:9f:d4:b2:f4:75:9a:17:29:08:
                    82:d0:41:c5:30:76:9c:6b:96:18:96:d5:db:a0:00:
                    2f:4f:1c:1a:7f:b7:58:b5:a5:ac:c8:5e:a7:13:1a:
                    9c:10:8e:69:2e:0a:1f:3e:f3:ad:92:72:16:32:9a:
                    c9:4d:6d:dc:ce:80:97:c1:cf:57:b2:49:3a:31:48:
                    d5:3f:46:f6:64:0e:fd:ca:8a:c0:53:27:1e:a4:eb:
                    cc:62:9f:40:59:49:53:01:61:a2:99:aa:ed:f1:7d:
                    98:27:29:25:7a:6d:e0:a1:bb:87:f5:11:1f:69:7c:
                    a3:f8:88:81:d0:28:b5:de:c5:b9:e7:cd:fe:77:ea:
                    5f:7a:f6:f3:f9:56:fb:ac:22:61:75:20:20:09:15:
                    41:25:af:f7:67:6a:05:b5:ef:59:84:43:69:63:0d:
                    04:a8:5e:89:4a:10:d4:6a:be:95:6c:73:7a:42:18:
                    a5:e2:38:34:ca:76:55:00:0f:38:36:00:e6:df:89:
                    6c:47:4c:f0:c5:f6:83:a8:59:b8:0a:df:a9:9e:c8:
                    cf:86:98:81:24:13:06:b5:5f:7c:d7:24:be:f6:26:
                    c5:22:51:f9:89:55:f8:9b:41:c6:b6:ab:af:38:6c:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:12:A3:D4:25:AE:FF:67:90:BE:96:7D:55:CC:AF:05:83:60:79
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a333030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:7c:f9:56:b6:2a:54:66:b8:e9:1d:5a:d0:f6:45:6e:49:
         79:91:32:72:7e:69:55:71:76:81:6e:93:7f:53:05:78:92:07:
         ee:dc:31:f9:38:4e:be:16:18:3e:be:6c:5e:17:90:0b:9c:e0:
         d5:46:80:a2:11:c3:fa:7f:87:45:aa:85:10:a1:d6:8b:89:20:
         8f:cb:d0:b4:57:a8:77:45:07:10:77:4e:3c:5c:af:11:a8:a0:
         b5:4a:fb:0f:ff:7c:61:a5:39:a8:a8:0b:79:9f:6b:b0:7e:ff:
         0a:99:a6:b0:ff:dd:15:c1:a8:28:15:8f:99:d9:c7:f4:a1:1f:
         82:23:b9:3c:ba:35:c9:ba:71:ed:ec:8d:0d:98:c8:20:cd:83:
         d9:af:a5:83:0b:e7:d3:91:ce:da:06:5c:3a:9e:4c:7f:53:f5:
         0d:78:83:8e:1b:9c:18:01:09:10:ca:25:40:05:38:92:d0:f7:
         a9:63:5a:bf:fc:09:91:e0:b5:3f:e6:63:78:69:9a:c9:ed:1e:
         bd:ad:ab:07:ed:4a:4b:aa:2c:b2:a3:69:45:f0:f5:3d:e2:c1:
         12:35:b9:74:6f:e4:bf:68:4a:c0:77:53:fb:fc:b2:d7:2f:9f:
         4d:b7:66:b0:ec:60:ff:78:c1:3e:07:59:ec:9e:a5:be:93:33:
         03:eb:93:66
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUAcr+0k51/RXs/ExHHySWPS4y6UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2MzZaFw0yNjAzMDUwMjMxMzZaMDMxMTAvBgNV
BAMTKDU4N0IxMkEzRDQyNUFFRkY2NzkwQkU5NjdENTVDQ0FGMDU4MzYwNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+Nw6QuNLsjK/52ar5Kt8Je3sZ
ep/UsvR1mhcpCILQQcUwdpxrlhiW1dugAC9PHBp/t1i1pazIXqcTGpwQjmkuCh8+
862SchYymslNbdzOgJfBz1eySToxSNU/RvZkDv3KisBTJx6k68xin0BZSVMBYaKZ
qu3xfZgnKSV6beChu4f1ER9pfKP4iIHQKLXexbnnzf536l969vP5VvusImF1ICAJ
FUElr/dnagW171mEQ2ljDQSoXolKENRqvpVsc3pCGKXiODTKdlUADzg2AObfiWxH
TPDF9oOoWbgK36meyM+GmIEkEwa1X3zXJL72JsUiUfmJVfibQca2q684bGiXAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUWHsSo9Qlrv9nkL6WfVXMrwWDYHkwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQMcDAwDQYJKoZIhvcNAQELBQADggEB
ACynfPlWtipUZrjpHVrQ9kVuSXmRMnJ+aVVxdoFuk39TBXiSB+7cMfk4Tr4WGD6+
bF4XkAuc4NVGgKIRw/p/h0WqhRCh1ouJII/L0LRXqHdFBxB3TjxcrxGooLVK+w//
fGGlOaioC3mfa7B+/wqZprD/3RXBqCgVj5nZx/ShH4IjuTy6Ncm6ce3sjQ2YyCDN
g9mvpYML59ORztoGXDqeTH9T9Q14g44bnBgBCRDKJUAFOJLQ96ljWr/8CZHgtT/m
Y3hpmsntHr2tqwftSkuqLLKjaUXw9T3iwRI1uXRv5L9oSsB3U/v8stcvn023ZrDs
YP94wT4HWeyepb6TMwPrk2Y=
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:12 2025 by rpki-client