Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343030303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          Dw/HuMs0WVyMqOEqQ5IEBKtIarKs7EHj1SjG8W96FiQ=
Subject key identifier:   9D:C7:B3:E4:AE:33:A3:77:EC:BD:48:CA:F8:3C:0E:54:1A:8D:05:99
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       58928753D1DB62DEDF29559B6637037A68A3AC88
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:39 +0000
ROA not before:           Thu 04 Apr 2024 02:23:39 +0000
ROA not after:            Thu 03 Apr 2025 02:28:39 +0000
asID:                     52706
IP address blocks:        2804:c70:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:92:87:53:d1:db:62:de:df:29:55:9b:66:37:03:7a:68:a3:ac:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:39 2024 GMT
            Not After : Apr  3 02:28:39 2025 GMT
        Subject: CN=9DC7B3E4AE33A377ECBD48CAF83C0E541A8D0599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:57:9f:5a:2e:a6:7a:74:c7:e3:3b:06:c8:
                    60:b4:72:60:9f:fe:3f:91:4f:24:b0:48:81:73:38:
                    5b:5a:fb:85:a9:b2:27:79:7e:36:3d:54:ca:6a:4e:
                    6f:6d:d7:11:8e:4d:5b:a3:77:c4:33:a8:94:0f:c8:
                    32:d6:03:e1:5b:91:50:c4:fd:97:cb:91:ec:f7:ec:
                    e0:06:c9:48:90:86:08:1c:5d:50:6e:a4:b1:39:fc:
                    dc:5d:4c:58:5a:f9:d8:38:91:82:41:3b:be:ab:c4:
                    18:ea:ea:b6:30:d3:54:db:a3:be:5e:b4:c6:ba:95:
                    dd:0f:32:e3:3a:cd:f2:4c:4e:c8:57:41:4d:ec:04:
                    5d:8f:d6:da:d3:58:a4:e6:4e:48:61:4d:1f:91:ec:
                    7c:92:f3:c5:7f:1d:cf:d2:08:d0:ed:ac:09:1e:d3:
                    24:ff:bb:cb:9e:6f:fc:18:c9:27:b4:a4:ee:24:42:
                    3f:c2:eb:33:46:fb:ac:32:e5:1c:12:ab:4c:63:0e:
                    00:9a:e3:5a:83:7d:56:83:ee:42:f4:56:95:e3:f2:
                    2a:1e:f2:9a:77:a9:29:ee:68:47:95:fa:24:c7:12:
                    ab:68:f6:9d:98:cc:85:b4:3e:e7:ef:ea:25:c8:d9:
                    84:9d:1a:c6:91:15:8a:5f:a5:67:35:02:64:15:d5:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:B3:E4:AE:33:A3:77:EC:BD:48:CA:F8:3C:0E:54:1A:8D:05:99
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:08:ae:af:18:a0:30:2d:37:1a:d8:0d:7f:59:24:c6:f3:
         f7:87:6e:73:7c:36:ab:66:c9:78:49:cd:a8:c8:2b:3a:52:5f:
         3a:6b:49:16:b1:11:a8:e5:b1:c0:bc:22:c9:e5:46:fb:3a:aa:
         cb:65:43:dd:d4:56:ef:0f:c3:d1:44:89:bd:b8:36:c6:60:31:
         f1:56:95:0c:b9:24:4c:5a:0b:62:71:ed:44:2a:0d:a5:27:14:
         dc:d4:34:b6:a2:f6:1c:6a:90:97:87:9b:2a:40:d3:1e:52:39:
         8e:c8:ac:81:52:9c:5f:88:7b:ca:df:48:7c:55:78:92:bd:35:
         dd:d6:9e:1b:67:32:8c:97:2e:a0:70:9e:42:d2:21:7d:b4:0e:
         9e:3d:21:dd:a1:c7:7f:58:a4:18:4d:4c:06:50:5d:0f:6f:ce:
         47:54:19:2b:89:cf:58:d6:81:35:99:bd:09:0b:f6:7a:ba:7c:
         b9:46:08:27:40:2e:2e:dd:b6:28:4b:ef:a2:ff:54:5c:fb:55:
         69:22:1e:d0:b2:70:56:ba:c7:c7:2a:f6:96:f0:00:28:83:76:
         82:84:93:bb:16:38:8f:eb:ac:9e:d8:e0:28:f2:9e:d0:fe:59:
         fe:4f:f0:d7:55:d4:f0:42:41:75:51:09:ab:a9:11:c9:dd:93:
         7a:1f:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org