Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          iT1rF8MTBxgYExEY5b9uX9Cc8r3pqlz+eK3PRtqXH48=
Subject key identifier:   D0:F8:9D:76:89:40:F1:98:AB:DF:3D:AE:26:C1:86:A3:00:1A:FA:FE
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       30A5A773196DAC6CED4B5419663D7CF684FFB6AE
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:37 +0000
ROA not before:           Thu 04 Apr 2024 02:23:37 +0000
ROA not after:            Thu 03 Apr 2025 02:28:37 +0000
asID:                     52706
IP address blocks:        2804:c70:4001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a5:a7:73:19:6d:ac:6c:ed:4b:54:19:66:3d:7c:f6:84:ff:b6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:37 2024 GMT
            Not After : Apr  3 02:28:37 2025 GMT
        Subject: CN=D0F89D768940F198ABDF3DAE26C186A3001AFAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:3a:0a:2d:fa:1c:09:50:85:73:39:87:9f:
                    13:5a:e5:e4:df:12:e6:8d:a7:60:99:41:42:69:32:
                    f3:f3:22:76:eb:93:a9:41:50:12:44:89:48:fe:9f:
                    1e:05:95:74:fb:58:40:a0:e5:a1:79:70:56:54:7a:
                    2f:7d:90:36:26:a0:60:2b:9d:9e:60:dc:c3:73:72:
                    f0:48:34:e2:88:d2:8e:69:08:d2:d4:b7:b6:64:ad:
                    1c:ed:3e:45:ec:85:83:9a:c1:74:1b:63:f0:d8:c1:
                    40:ee:64:34:43:f0:c9:b5:f7:31:7c:e2:bd:a7:e0:
                    9e:15:50:9b:51:71:b8:e0:2f:43:83:12:3c:4b:7a:
                    10:3d:ca:4c:5f:08:18:61:d0:0c:30:a6:68:3c:12:
                    da:79:bd:7a:e0:94:6d:6d:ab:8c:3b:01:17:be:dd:
                    da:24:1c:82:c2:a7:b5:81:4d:35:b1:33:5b:6d:8c:
                    30:ea:62:83:8e:dc:4e:57:bc:82:e2:a5:f8:a1:fe:
                    8e:95:83:e3:2a:32:d8:be:96:43:15:4c:6c:87:47:
                    98:a9:26:39:20:82:0d:c6:28:7e:36:99:ff:bd:9e:
                    fb:e3:fa:d5:c0:fd:fb:30:e4:7d:13:9f:78:3d:b5:
                    88:15:e5:e4:7e:60:5e:46:11:95:b1:a7:1e:b2:84:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:9D:76:89:40:F1:98:AB:DF:3D:AE:26:C1:86:A3:00:1A:FA:FE
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343030313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:b3:07:2f:2c:e1:16:dc:86:51:86:4d:24:4d:14:df:69:eb:
         02:27:89:f1:08:28:6a:49:b2:a0:8e:d4:1c:35:41:43:4c:b1:
         0f:23:9f:78:9c:32:e4:c7:57:06:4b:1f:cb:db:b6:17:69:26:
         77:72:15:9e:15:4c:f3:50:93:1a:db:28:32:40:42:ef:ec:91:
         3c:83:19:df:6a:ab:0d:66:e7:96:34:f3:4e:ca:c7:e1:a0:53:
         64:c7:5c:95:be:62:38:22:10:eb:47:38:c0:7f:79:e2:1a:91:
         34:55:cb:26:5c:ad:cd:b1:3d:6c:06:56:8a:38:d0:71:af:ac:
         e9:43:c1:e0:0e:e4:21:b8:92:ae:58:94:8f:56:fc:8a:d6:01:
         29:80:13:3d:d4:58:2c:47:f3:9c:24:bc:dd:0f:52:db:66:96:
         c6:d2:f0:46:d9:4c:88:d8:93:e3:df:0e:b6:ec:a2:a0:fc:37:
         82:eb:25:8e:79:31:82:5b:43:72:d0:1b:32:36:5b:51:7a:98:
         dc:52:03:8c:bf:08:c6:66:6a:48:3f:b6:5b:4d:9e:80:44:84:
         f7:b9:f1:60:d8:8b:41:0e:9c:17:af:bb:24:da:63:6d:3c:0d:
         85:c3:60:5b:61:d9:76:a9:fa:41:bd:5a:28:58:c0:eb:28:86:
         77:7a:c1:53
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUMKWncxltrGztS1QZZj189oT/tq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMzdaFw0yNTA0MDMwMjI4MzdaMDMxMTAvBgNV
BAMTKEQwRjg5RDc2ODk0MEYxOThBQkRGM0RBRTI2QzE4NkEzMDAxQUZBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjWToKLfocCVCFczmHnxNa5eTf
EuaNp2CZQUJpMvPzInbrk6lBUBJEiUj+nx4FlXT7WECg5aF5cFZUei99kDYmoGAr
nZ5g3MNzcvBINOKI0o5pCNLUt7ZkrRztPkXshYOawXQbY/DYwUDuZDRD8Mm19zF8
4r2n4J4VUJtRcbjgL0ODEjxLehA9ykxfCBhh0Awwpmg8Etp5vXrglG1tq4w7ARe+
3dokHILCp7WBTTWxM1ttjDDqYoOO3E5XvILipfih/o6Vg+MqMti+lkMVTGyHR5ip
Jjkggg3GKH42mf+9nvvj+tXA/fsw5H0Tn3g9tYgV5eR+YF5GEZWxpx6yhKt3AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU0PiddolA8Zir3z2uJsGGowAa+v4wHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzQzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcEABMA0GCSqGSIb3DQEBCwUAA4IB
AQCkswcvLOEW3IZRhk0kTRTfaesCJ4nxCChqSbKgjtQcNUFDTLEPI594nDLkx1cG
Sx/L27YXaSZ3chWeFUzzUJMa2ygyQELv7JE8gxnfaqsNZueWNPNOysfhoFNkx1yV
vmI4IhDrRzjAf3niGpE0VcsmXK3NsT1sBlaKONBxr6zpQ8HgDuQhuJKuWJSPVvyK
1gEpgBM91FgsR/OcJLzdD1LbZpbG0vBG2UyI2JPj3w627KKg/DeC6yWOeTGCW0Ny
0BsyNltRepjcUgOMvwjGZmpIP7ZbTZ6ARIT3ufFg2ItBDpwXr7sk2mNtPA2Fw2Bb
Ydl2qfpBvVooWMDrKIZ3esFT
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:47 2024 by rpki-client on console-ams.rpki-client.org