Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          MLVUjiNvHuXnRHyfJF8c4FMuXa1rBy4SoS9rbkhWR/k=
Subject key identifier:   4B:15:B3:49:26:87:B3:63:04:0A:17:97:A5:E3:2D:73:88:1F:31:5D
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2B16E0EA599769E689BA863B329167746866EEBA
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:37 +0000
ROA not before:           Thu 06 Mar 2025 02:26:37 +0000
ROA not after:            Thu 05 Mar 2026 02:31:37 +0000
asID:                     52706
IP address blocks:        2804:c70:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:16:e0:ea:59:97:69:e6:89:ba:86:3b:32:91:67:74:68:66:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:37 2025 GMT
            Not After : Mar  5 02:31:37 2026 GMT
        Subject: CN=4B15B3492687B363040A1797A5E32D73881F315D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:2a:da:7b:1a:ff:71:09:c1:fd:8b:56:f1:
                    ca:5e:ac:b6:97:ed:73:02:ec:b8:ea:72:7b:20:28:
                    c9:44:13:85:11:30:08:47:8e:a3:a3:79:65:bd:bb:
                    4e:c4:1a:d5:2d:da:12:ea:8b:b4:a9:fc:2b:ae:e0:
                    1d:d8:33:b7:65:e3:aa:6e:ce:cb:0a:35:79:ec:65:
                    46:68:b8:6f:a3:90:41:50:60:79:38:fb:c4:60:df:
                    0d:d9:f5:6c:ec:56:d5:5e:02:cb:47:1c:47:b1:a4:
                    5f:aa:55:da:32:cd:00:88:b0:ca:d6:0a:db:40:e1:
                    97:37:ee:7b:52:d7:54:fc:82:49:ae:fa:f2:c8:51:
                    83:1c:b7:8a:4c:49:c8:f2:b2:ea:68:ef:84:df:ca:
                    cb:41:98:74:d8:d5:27:ec:77:0b:ce:8e:ad:dd:91:
                    65:f3:32:d4:57:e3:5a:78:50:55:01:2e:85:ea:3f:
                    0e:48:25:b4:c4:32:dd:f2:10:6e:d7:da:04:42:75:
                    8f:bb:9f:60:28:1a:93:d9:66:83:bf:bf:76:5f:72:
                    bd:9f:11:0b:38:6c:f1:7b:ab:3c:dd:9a:f0:0b:31:
                    1e:4f:36:7b:4e:f8:32:ca:9b:d5:ad:b2:59:47:46:
                    55:26:ce:7f:bc:53:55:33:bd:d4:99:2a:7c:69:3a:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:15:B3:49:26:87:B3:63:04:0A:17:97:A5:E3:2D:73:88:1F:31:5D
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:bc:3b:9e:39:76:ee:53:a9:61:00:5f:7d:33:f9:2c:a8:
         58:6d:c8:a1:29:1d:b9:4d:fa:e3:a8:ed:8e:97:d5:3f:fc:6f:
         4d:6f:60:49:09:c3:38:c8:b1:3a:ea:07:51:cc:09:2c:21:6e:
         dd:4c:ae:c1:4e:af:84:3a:ee:2d:06:d9:75:4b:75:99:c7:a7:
         4e:be:b3:05:2f:dd:c1:ea:bc:6b:37:64:f0:a6:fd:2b:4f:fd:
         e9:b9:d2:6c:98:35:83:c6:9b:22:d4:34:23:22:b2:37:6d:f9:
         24:15:98:84:56:44:5b:40:5a:e3:da:5f:f7:d8:f3:ac:aa:b3:
         22:84:ac:c8:37:40:31:ca:8c:61:f0:83:7a:dc:4c:c5:50:fe:
         87:74:62:7d:b5:8c:54:10:cd:a8:78:76:2d:db:64:93:01:33:
         a6:2c:ad:80:9a:bd:73:fb:51:4d:99:86:83:90:98:26:56:07:
         90:34:13:f2:f0:7e:1b:49:a8:73:74:f5:ff:40:54:da:10:09:
         b5:aa:b7:3c:fe:d4:9c:c0:1f:67:d0:47:85:f9:86:b7:f8:83:
         27:b5:62:6c:d6:31:df:00:40:a7:e4:7a:3f:08:1d:5b:88:97:
         39:47:7d:1c:9a:6d:57:02:5a:33:64:cc:e9:5c:ad:d0:3e:2d:
         87:30:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:04:49 2025 by rpki-client