Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          4mk5eVdI2DR2zXO1fDDvSQtXWLZHqXbUYLE4lGL3z0c=
Subject key identifier:   42:0C:75:CC:58:F8:61:B6:DD:47:87:AA:DC:24:AF:0F:A3:51:ED:B7
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       11107C3852A8BC392BC642EAC300194978BF70BA
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:47 +0000
ROA not before:           Thu 06 Mar 2025 02:26:47 +0000
ROA not after:            Thu 05 Mar 2026 02:31:47 +0000
asID:                     52706
IP address blocks:        2804:c70:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:10:7c:38:52:a8:bc:39:2b:c6:42:ea:c3:00:19:49:78:bf:70:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:47 2025 GMT
            Not After : Mar  5 02:31:47 2026 GMT
        Subject: CN=420C75CC58F861B6DD4787AADC24AF0FA351EDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:d2:b6:b3:17:f5:17:71:be:42:3b:97:8b:
                    e8:62:e2:5b:93:d5:f9:b3:26:e7:3f:b7:4b:e2:de:
                    80:c2:4c:51:d3:8c:e3:b5:a8:70:d4:6b:18:98:45:
                    fb:a2:58:7f:47:b4:ea:18:15:38:88:1f:f4:62:3a:
                    04:77:3f:6b:d5:f4:da:46:b1:0a:b7:8f:aa:bf:f6:
                    f9:dc:2c:7d:6d:4f:77:cf:73:4f:b1:31:55:ba:eb:
                    b1:68:74:a5:c7:a3:51:98:01:30:b8:c2:3a:35:e0:
                    25:c5:83:29:f0:ba:86:9a:11:97:f7:3c:4c:4d:37:
                    c9:48:b5:ae:ef:4e:84:fa:d6:f8:81:f6:a4:40:2c:
                    84:cf:d8:bd:4b:81:b7:85:e2:0d:a1:01:84:d6:42:
                    4a:86:3d:1f:cd:70:00:1c:35:ed:94:d8:b7:90:0f:
                    3f:5b:a1:88:6a:3c:fa:dc:e2:5d:3c:2d:3d:3c:58:
                    97:a1:c5:35:a8:80:5e:0e:85:40:b5:b2:98:7e:73:
                    62:fa:6b:0f:b1:82:30:4b:98:34:66:d2:ed:15:4e:
                    92:0a:70:38:44:95:d5:81:3d:d6:91:a4:2b:60:0c:
                    75:72:ae:ed:f3:48:a9:31:21:4b:bf:e8:52:8a:1e:
                    81:d4:f8:da:3a:61:03:76:97:42:9f:31:b7:50:bf:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:75:CC:58:F8:61:B6:DD:47:87:AA:DC:24:AF:0F:A3:51:ED:B7
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:fd:b6:41:bd:92:96:ad:ee:8a:4a:5f:df:8f:e9:3c:15:
         fd:a4:7e:21:9a:01:55:f8:6f:a8:b0:e7:ae:d5:5d:19:4a:c0:
         d4:fa:9d:6a:58:a0:e9:22:31:a2:64:83:4b:6d:24:aa:57:31:
         ad:a2:2f:41:5c:99:b3:e2:5b:19:0e:30:e4:0b:6c:70:43:16:
         e1:72:35:0a:57:e2:14:56:fc:87:ff:7f:8a:c3:4b:19:7d:d6:
         00:c8:f3:2f:35:08:f5:41:b4:da:c3:36:7a:4d:22:56:69:6d:
         5f:a9:ba:12:0a:34:3e:e2:6f:dd:3d:14:aa:e0:7f:26:72:e6:
         7e:4c:5f:ea:00:52:08:69:eb:3c:02:8e:ad:e6:e8:55:f0:a9:
         1d:6c:da:41:f5:47:e7:ce:5c:65:86:af:65:bb:82:33:70:b8:
         c1:27:c6:cf:c3:b0:5a:be:c3:93:da:09:dd:08:ba:b6:fe:5b:
         0f:60:b8:95:6a:15:ee:d9:58:37:b9:bc:85:d6:5c:84:12:87:
         01:6c:32:ce:ce:94:a8:3a:42:28:02:72:05:d9:19:c5:04:26:
         d8:61:4b:a6:0a:14:b7:89:23:10:40:9a:f7:5b:f3:af:80:16:
         41:5e:14:09:c2:ac:28:f9:c7:fe:21:26:8c:a2:5e:8f:08:23:
         cf:78:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:58 2025 by rpki-client