Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          l83ODE5EruYt0e2/wkfUKU00x0JC6Ps1M+httUGhlk4=
Subject key identifier:   48:EE:5C:2E:C1:CE:5D:62:F2:55:7D:5E:9B:2A:41:7A:EB:58:22:96
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0AE21F4DBEAE424792A5B5CE28FF290FD26C8DD6
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:30 +0000
ROA not before:           Thu 04 Apr 2024 02:23:30 +0000
ROA not after:            Thu 03 Apr 2025 02:28:30 +0000
asID:                     52706
IP address blocks:        2804:c70:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e2:1f:4d:be:ae:42:47:92:a5:b5:ce:28:ff:29:0f:d2:6c:8d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:30 2024 GMT
            Not After : Apr  3 02:28:30 2025 GMT
        Subject: CN=48EE5C2EC1CE5D62F2557D5E9B2A417AEB582296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:f0:e6:1f:bb:39:18:97:7c:ff:fc:b7:01:
                    95:cd:e4:5f:2f:7c:4f:b2:0e:fc:09:d4:91:7d:5f:
                    03:19:b6:49:92:a2:bb:3c:e9:df:dc:dc:6b:f7:45:
                    79:e5:9a:2a:25:10:51:ae:88:6a:ea:b7:8f:36:80:
                    db:7e:28:73:11:8c:7a:2b:ba:9f:2c:2f:ea:3f:5b:
                    df:34:a5:88:ad:61:90:b1:58:10:83:7d:42:5f:91:
                    87:95:14:7f:95:00:c8:76:a6:00:f7:3a:b3:30:5f:
                    03:79:13:7d:85:ff:91:65:f3:66:49:58:b3:47:7f:
                    be:1d:87:1d:1a:5f:5c:06:c5:ae:17:fc:c8:e3:93:
                    fa:6e:1a:2f:8d:92:9f:71:fe:96:79:a4:dd:fa:7c:
                    9a:38:19:be:53:3c:cd:d9:4e:ca:7f:e6:cd:7f:f0:
                    1c:77:14:73:6f:d2:49:fc:c7:fa:ef:19:fe:15:13:
                    90:66:24:f5:e0:10:fc:8e:31:2c:42:e2:60:ee:a3:
                    aa:82:37:63:3b:5a:79:75:19:20:ac:1e:79:e3:ce:
                    f9:8f:40:a8:c5:22:d0:5c:a0:cd:28:f5:f7:d6:7f:
                    f0:67:28:9c:5f:de:22:92:9c:4d:c2:62:a5:ba:b7:
                    c2:9e:8e:ae:bf:17:29:29:ee:20:93:cf:07:22:ee:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:5C:2E:C1:CE:5D:62:F2:55:7D:5E:9B:2A:41:7A:EB:58:22:96
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:72:a4:c6:34:c0:4d:2c:3b:05:bd:f7:0e:d0:42:41:7e:c6:
         f5:5c:c5:16:1b:c2:f2:04:57:00:2d:6a:68:ed:d6:54:a5:09:
         98:c7:80:c0:d4:01:09:bf:9f:4e:c0:15:a5:74:78:45:54:49:
         88:29:0e:c1:3b:4e:f8:40:ce:98:c2:b0:53:ce:8d:23:83:70:
         ed:8d:ed:cd:27:14:51:e2:6d:dc:c8:50:01:af:bf:2f:c9:b4:
         64:bd:45:f8:e3:0c:00:42:16:9d:eb:09:a8:66:eb:37:17:e4:
         02:20:10:2d:6a:f2:69:4c:82:78:21:0f:c5:ce:fd:2a:7f:53:
         97:49:fe:6e:bd:c8:f0:f0:d6:ed:13:28:df:00:bd:f9:f0:39:
         8b:90:cd:a2:50:2f:94:9c:75:0b:43:b9:dd:c3:0f:7d:f6:e0:
         ca:1d:24:26:ab:a5:a6:a6:f8:e8:04:9c:a9:f9:cf:eb:c2:d1:
         cf:86:a7:3a:01:78:6c:01:c4:b4:2e:f9:ba:d2:26:7c:d6:ce:
         31:56:9c:71:0e:cf:3a:e0:9e:bb:88:c9:08:b8:c5:f3:37:ea:
         fc:e5:41:db:9b:71:e1:9c:f5:b4:23:82:5f:48:ae:1b:68:66:
         ea:54:4a:17:e9:d7:72:84:77:56:5f:84:9a:71:3e:3b:c5:1e:
         c1:bf:0a:b6
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUCuIfTb6uQkeSpbXOKP8pD9JsjdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMzBaFw0yNTA0MDMwMjI4MzBaMDMxMTAvBgNV
BAMTKDQ4RUU1QzJFQzFDRTVENjJGMjU1N0Q1RTlCMkE0MTdBRUI1ODIyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY//DmH7s5GJd8//y3AZXN5F8v
fE+yDvwJ1JF9XwMZtkmSors86d/c3Gv3RXnlmiolEFGuiGrqt482gNt+KHMRjHor
up8sL+o/W980pYitYZCxWBCDfUJfkYeVFH+VAMh2pgD3OrMwXwN5E32F/5Fl82ZJ
WLNHf74dhx0aX1wGxa4X/Mjjk/puGi+Nkp9x/pZ5pN36fJo4Gb5TPM3ZTsp/5s1/
8Bx3FHNv0kn8x/rvGf4VE5BmJPXgEPyOMSxC4mDuo6qCN2M7Wnl1GSCsHnnjzvmP
QKjFItBcoM0o9ffWf/BnKJxf3iKSnE3CYqW6t8Kejq6/Fykp7iCTzwci7gC1AgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUSO5cLsHOXWLyVX1emypBeutYIpYwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzYzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKAQMcGAwDQYJKoZIhvcNAQELBQADggEB
ACVypMY0wE0sOwW99w7QQkF+xvVcxRYbwvIEVwAtamjt1lSlCZjHgMDUAQm/n07A
FaV0eEVUSYgpDsE7TvhAzpjCsFPOjSODcO2N7c0nFFHibdzIUAGvvy/JtGS9Rfjj
DABCFp3rCahm6zcX5AIgEC1q8mlMgnghD8XO/Sp/U5dJ/m69yPDw1u0TKN8Avfnw
OYuQzaJQL5ScdQtDud3DD3324ModJCarpaam+OgEnKn5z+vC0c+GpzoBeGwBxLQu
+brSJnzWzjFWnHEOzzrgnruIyQi4xfM36vzlQdubceGc9bQjgl9IrhtoZupUShfp
13KEd1ZfhJpxPjvFHsG/CrY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org