Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          q4/ie4/EyB1HMnigtGizlHkmpnfd0SC3CYgY0gZMy+s=
Subject key identifier:   53:50:8A:C4:B4:F8:3B:17:99:5E:CC:60:98:F1:F6:3D:80:DF:54:4A
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       258C5FF45A005CD66EE2A9C074E561A5F3D730B1
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:35 +0000
ROA not before:           Thu 04 Apr 2024 02:23:35 +0000
ROA not after:            Thu 03 Apr 2025 02:28:35 +0000
asID:                     52706
IP address blocks:        2804:c70:403d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8c:5f:f4:5a:00:5c:d6:6e:e2:a9:c0:74:e5:61:a5:f3:d7:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:35 2024 GMT
            Not After : Apr  3 02:28:35 2025 GMT
        Subject: CN=53508AC4B4F83B17995ECC6098F1F63D80DF544A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:a7:eb:a8:6b:99:d0:03:31:e8:19:bb:32:
                    cc:54:b9:48:a9:4a:aa:2e:92:34:92:f4:54:de:af:
                    91:88:a9:31:0d:af:ed:da:7a:45:47:d3:a8:ae:f6:
                    5f:9b:c3:55:bd:d2:63:d7:4b:b5:5a:73:ab:0d:33:
                    f8:1c:bd:07:e5:ed:ab:bd:b2:bb:c9:d7:e8:54:4d:
                    eb:95:d7:ab:60:1c:f1:8e:28:b2:93:31:7f:75:c9:
                    92:9e:38:14:37:f6:e0:20:b3:e8:96:d8:11:4e:43:
                    3a:19:70:c6:c3:d0:fb:5b:0e:74:8d:0f:52:bf:3d:
                    08:3f:d5:59:d2:1a:f1:b3:a3:02:02:c4:1e:e9:73:
                    3d:a8:55:dc:74:e7:f4:a2:2b:ae:32:20:46:8e:c9:
                    37:9b:47:79:70:83:64:6f:f4:58:95:e9:97:88:57:
                    f9:f4:3e:85:82:89:da:0f:8d:4e:ec:6f:3d:8e:5a:
                    29:82:d5:f0:a3:25:fb:f5:23:f3:2d:8d:b3:57:da:
                    f7:df:58:37:22:10:18:0d:2e:24:32:1f:8d:fc:d0:
                    98:ac:8f:d5:87:b6:11:d8:bb:6b:db:90:e7:0a:70:
                    40:79:0f:f3:7c:9e:af:8e:5e:bf:54:99:67:89:ab:
                    89:d8:ba:e9:3e:9e:b8:69:5a:a6:4c:8b:ba:49:1f:
                    2c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:50:8A:C4:B4:F8:3B:17:99:5E:CC:60:98:F1:F6:3D:80:DF:54:4A
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a343033643a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:403d::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:a7:81:0c:f3:19:d7:38:ff:f5:d8:5f:3b:ee:af:53:08:c1:
         a6:44:40:70:9d:bf:27:62:53:35:a5:2b:d0:54:85:4f:a2:f3:
         a0:f4:a3:92:7a:7c:98:97:8f:e7:df:38:e1:3b:15:1e:c5:32:
         83:fd:87:70:52:69:69:f9:09:af:42:70:36:64:2c:7a:51:0d:
         65:ce:08:1b:56:17:55:0d:d2:52:aa:1e:d7:a1:a9:be:cb:9a:
         ab:88:12:37:83:f9:68:21:c6:89:76:59:63:61:0d:91:87:b5:
         66:dd:3a:df:2a:76:1c:76:a4:13:36:a7:8c:cb:f1:02:a6:c4:
         96:0b:6c:80:48:5c:cd:23:f1:d8:8c:ff:2e:da:23:15:a3:e4:
         20:d0:16:f0:fb:ae:14:85:55:1d:a8:b4:e0:4b:f6:ea:f4:2e:
         c7:55:6a:72:65:1b:2d:a1:5e:98:82:8a:4b:70:d0:92:d6:ff:
         c4:3e:a0:e0:46:31:63:51:13:ba:7e:dc:d8:a7:9b:be:ef:14:
         af:b1:07:76:fe:bb:25:49:a7:2b:84:e7:e1:67:fc:9b:95:e0:
         01:b6:65:a7:88:0d:5f:c9:68:69:c5:2e:14:cc:53:18:36:a3:
         3a:c9:79:a5:5f:3d:49:cf:84:77:c3:fa:f4:62:00:e5:ca:ba:
         15:b6:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org