Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030303a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          cj7lTSTqgm2XRf9jGOscIVNPkAj09klXEMWk9AWukNE=
Subject key identifier:   FB:DE:05:B0:13:D0:E4:F2:38:58:03:16:CF:82:B1:3F:07:6F:7C:C9
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2CCF826BBC301452E741007B7DE597497FC8794F
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:38 +0000
ROA not before:           Thu 04 Apr 2024 02:23:38 +0000
ROA not after:            Thu 03 Apr 2025 02:28:38 +0000
asID:                     52706
IP address blocks:        2804:c70:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cf:82:6b:bc:30:14:52:e7:41:00:7b:7d:e5:97:49:7f:c8:79:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:38 2024 GMT
            Not After : Apr  3 02:28:38 2025 GMT
        Subject: CN=FBDE05B013D0E4F238580316CF82B13F076F7CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:51:7c:f2:b8:bd:71:a9:75:e6:bb:06:d7:
                    21:9c:7b:a4:2f:84:c1:cd:99:8b:04:9c:74:7d:a3:
                    14:37:56:02:35:5f:40:68:82:82:c0:cd:b2:b5:7c:
                    13:a9:6e:b4:7e:f3:47:49:0c:a7:e1:02:1b:21:0c:
                    a9:8b:37:a5:bc:1c:bb:7e:96:7d:12:67:7c:d8:32:
                    cd:65:fa:46:1a:d6:f7:55:5f:0f:cf:65:06:93:0d:
                    f8:1b:76:fa:81:39:47:8f:ed:5c:a1:fe:b4:f8:0b:
                    9f:e7:38:80:bb:35:21:1a:82:36:5a:13:27:2b:e5:
                    00:3f:25:72:fd:ac:9f:eb:67:be:c0:25:3a:fe:e9:
                    36:72:a1:5a:c8:70:b2:6d:d5:fb:9d:ae:cf:c9:de:
                    6f:35:20:95:e1:f6:f0:74:07:2d:ee:02:8e:de:a4:
                    80:ba:a3:61:c0:27:8d:3f:24:08:50:17:73:8a:d9:
                    15:e6:93:c9:29:2b:36:a2:16:25:57:1f:db:e1:95:
                    5b:c9:31:75:b4:76:3d:61:f9:73:5a:ed:aa:e2:e0:
                    18:b8:41:f2:48:f4:45:08:87:c5:9d:f9:bb:b1:e8:
                    3e:bd:07:20:e3:b2:cf:2e:d0:df:f6:4d:d1:3d:39:
                    cb:e2:bd:d8:37:b7:8a:90:ad:d0:ca:af:d0:0e:fd:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:05:B0:13:D0:E4:F2:38:58:03:16:CF:82:B1:3F:07:6F:7C:C9
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030303a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:d3:dc:23:88:00:a9:48:f6:70:1b:09:9c:e2:f2:25:cf:
         6c:ba:3c:b6:a6:d5:47:a4:94:98:6d:f2:e6:e9:f1:9b:e6:e6:
         f6:7f:ff:c2:a3:25:af:d7:6c:07:20:70:92:f8:04:a2:98:cf:
         67:40:49:18:73:1d:4f:74:eb:69:ad:a6:97:fa:35:a9:85:1a:
         37:50:7e:62:7e:bf:50:53:49:fe:c0:00:5f:40:86:69:49:27:
         b9:11:0b:91:c9:7a:0b:a4:8b:ce:25:b1:dd:16:bc:ef:45:8a:
         a2:69:37:77:39:b4:1d:5a:23:bb:fb:53:e8:45:8c:e9:55:aa:
         e7:b8:6c:2b:47:a9:76:26:0f:f1:53:49:53:ab:68:de:bb:8e:
         c3:46:48:25:43:4d:2b:1e:c2:de:ed:bb:b9:67:85:13:a7:cd:
         ad:64:f2:af:c4:d5:18:24:12:93:59:05:8f:3f:a1:4c:f4:ca:
         3d:77:1c:07:75:4f:52:5b:7f:f6:06:93:c9:25:e5:6a:5a:3a:
         d1:88:ca:f7:b4:0c:22:38:8f:69:14:d4:04:4e:99:46:e3:64:
         88:0a:6a:1c:34:ac:de:29:01:a4:b7:6a:c3:5c:29:b2:c2:60:
         66:ff:b0:62:a6:b7:ff:ec:8a:a0:5e:92:10:99:80:1c:44:6c:
         40:b8:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:36 2024 by rpki-client on console-fra.rpki-client.org