Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a343030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          Wh/7qoZCz8AvIQBAaqGhQD+KqRkYIXaUoLHf0NycoYw=
Subject key identifier:   A4:A2:EA:1D:19:4A:8B:AC:6F:F7:E5:4A:BD:B8:BD:75:C6:5A:1A:37
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       54C5C992AF706D9D91FF81D0E69C5BF38889AFE9
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:28 +0000
ROA not before:           Thu 04 Apr 2024 02:23:28 +0000
ROA not after:            Thu 03 Apr 2025 02:28:28 +0000
asID:                     52706
IP address blocks:        2804:c70:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:c9:92:af:70:6d:9d:91:ff:81:d0:e6:9c:5b:f3:88:89:af:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:28 2024 GMT
            Not After : Apr  3 02:28:28 2025 GMT
        Subject: CN=A4A2EA1D194A8BAC6FF7E54ABDB8BD75C65A1A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:1d:1b:e1:9b:09:67:42:5e:61:58:c9:1d:
                    62:b8:72:c5:05:51:92:bd:e2:ae:77:fd:d2:1a:6d:
                    d9:21:76:9e:ee:f0:ba:60:6c:d2:96:75:ca:06:4e:
                    84:57:85:58:2e:f2:ff:ed:66:be:65:04:28:d8:c0:
                    d5:19:78:b3:6b:3a:f0:87:23:35:9e:1c:c9:9b:8f:
                    c0:f6:09:0c:90:07:25:e9:ed:7e:34:41:30:22:83:
                    82:09:03:b0:f2:8b:8b:af:5d:50:d5:e7:d5:04:42:
                    94:c9:b3:98:b1:d3:1d:5c:b2:02:8e:ef:46:ea:d0:
                    23:68:e9:f3:b1:10:0c:3c:71:f0:00:3d:6c:f5:09:
                    2f:8b:56:fa:60:52:8a:5a:97:84:4a:06:5d:cc:61:
                    d3:77:4d:ba:86:d3:21:5a:04:23:0a:14:01:40:e6:
                    51:d3:52:2a:96:fc:9e:79:7f:73:5e:01:8f:bd:07:
                    1a:52:64:a4:78:cd:84:04:33:81:84:69:e4:85:80:
                    c0:47:54:85:f9:02:2b:3d:20:df:af:f0:8d:da:f8:
                    58:d3:20:b2:f2:b9:4a:48:17:a1:9d:96:a6:8c:52:
                    05:89:73:7c:2e:44:15:7c:14:f2:ad:2d:1e:b2:3d:
                    82:65:b2:b2:b0:cc:c6:2c:6b:b5:2f:de:d3:ac:d3:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:EA:1D:19:4A:8B:AC:6F:F7:E5:4A:BD:B8:BD:75:C6:5A:1A:37
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:e9:57:38:f9:0a:8b:ae:35:a6:f0:64:e7:ab:0e:a3:3f:
         9f:26:ca:ed:de:94:26:23:d2:2d:23:4d:62:ac:e3:24:db:8c:
         4b:d9:a5:93:b6:3a:64:ac:39:b9:a6:b6:56:e8:5b:0c:22:d0:
         86:1e:cc:99:7e:b1:d3:18:d1:e8:b3:b9:06:b8:4a:09:6e:69:
         0b:58:e2:a0:f0:37:fe:18:7e:18:eb:9b:26:e3:8c:c9:1b:e0:
         00:14:39:6f:84:08:bf:02:d3:ad:c4:b7:14:56:ab:67:9d:a7:
         d2:f4:e1:38:d9:b6:3c:1d:46:0c:4e:dc:3f:55:5c:24:a9:93:
         69:e4:8a:ef:b3:a2:e3:3f:62:88:8b:f5:5a:eb:da:c1:09:83:
         a5:de:9e:be:31:47:38:b1:91:a5:a8:2f:b8:46:dd:37:55:99:
         be:6f:b3:26:b7:a1:90:30:38:1f:ba:52:39:83:16:e3:79:6f:
         5c:dc:17:5b:13:82:32:fe:36:ab:e4:aa:fc:f6:8f:45:53:82:
         00:76:f8:f6:a8:94:b8:87:13:b5:57:a4:87:a0:52:b3:c7:12:
         fb:68:64:63:ed:01:db:98:a5:c0:cf:b6:37:bb:81:72:c3:1e:
         30:df:ff:e9:25:42:27:07:72:60:08:d6:31:12:83:67:ab:c0:
         93:c9:74:8f
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUVMXJkq9wbZ2R/4HQ5pxb84iJr+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMjhaFw0yNTA0MDMwMjI4MjhaMDMxMTAvBgNV
BAMTKEE0QTJFQTFEMTk0QThCQUM2RkY3RTU0QUJEQjhCRDc1QzY1QTFBMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgih0b4ZsJZ0JeYVjJHWK4csUF
UZK94q53/dIabdkhdp7u8LpgbNKWdcoGToRXhVgu8v/tZr5lBCjYwNUZeLNrOvCH
IzWeHMmbj8D2CQyQByXp7X40QTAig4IJA7Dyi4uvXVDV59UEQpTJs5ix0x1csgKO
70bq0CNo6fOxEAw8cfAAPWz1CS+LVvpgUopal4RKBl3MYdN3TbqG0yFaBCMKFAFA
5lHTUiqW/J55f3NeAY+9BxpSZKR4zYQEM4GEaeSFgMBHVIX5Ais9IN+v8I3a+FjT
ILLyuUpIF6GdlqaMUgWJc3wuRBV8FPKtLR6yPYJlsrKwzMYsa7Uv3tOs0xKpAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUpKLqHRlKi6xv9+VKvbi9dcZaGjcwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQMcEAwDQYJKoZIhvcNAQELBQADggEB
AB6p6Vc4+QqLrjWm8GTnqw6jP58myu3elCYj0i0jTWKs4yTbjEvZpZO2OmSsObmm
tlboWwwi0IYezJl+sdMY0eizuQa4SgluaQtY4qDwN/4YfhjrmybjjMkb4AAUOW+E
CL8C063EtxRWq2edp9L04TjZtjwdRgxO3D9VXCSpk2nkiu+zouM/YoiL9Vrr2sEJ
g6Xenr4xRzixkaWoL7hG3TdVmb5vsya3oZAwOB+6UjmDFuN5b1zcF1sTgjL+Nqvk
qvz2j0VTggB2+PaolLiHE7VXpIegUrPHEvtoZGPtAduYpcDPtje7gXLDHjDf/+kl
QicHcmAI1jESg2erwJPJdI8=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org