Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          IeObxv8bo/4uOlB1H0D8YLD5KzcrITpFDfVz0MoX6d8=
Subject key identifier:   0F:AD:98:6B:34:2F:4A:5E:38:E3:7C:BA:53:86:47:DC:A4:2B:2D:C9
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       62A194583015719A03B3B14E81D8076BFCC9CDE3
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:37 +0000
ROA not before:           Thu 04 Apr 2024 02:23:37 +0000
ROA not after:            Thu 03 Apr 2025 02:28:37 +0000
asID:                     52706
IP address blocks:        2804:c70:6002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:94:58:30:15:71:9a:03:b3:b1:4e:81:d8:07:6b:fc:c9:cd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:37 2024 GMT
            Not After : Apr  3 02:28:37 2025 GMT
        Subject: CN=0FAD986B342F4A5E38E37CBA538647DCA42B2DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:40:e7:44:06:66:91:1e:26:c1:f2:20:a2:
                    b3:4c:51:b1:71:8d:ce:94:7b:ff:95:ed:ef:5c:01:
                    21:20:61:e0:a8:79:a3:b5:bd:4f:43:68:c1:d4:98:
                    14:2e:64:1b:8f:1b:b1:b0:42:d8:ae:0a:c4:2f:9a:
                    6c:f0:4b:8d:bd:86:2d:0f:84:19:a7:c6:f5:27:df:
                    6c:d0:f0:58:6a:23:0b:a2:12:22:07:88:50:40:5a:
                    ed:be:4a:4f:6b:49:a3:e0:78:0c:31:15:29:ce:c4:
                    19:d3:eb:e1:65:e1:5b:79:0d:22:cd:6e:c6:3f:4d:
                    b8:d8:fe:db:7b:ab:fa:be:5d:78:d0:c5:57:db:ba:
                    42:86:52:56:79:70:72:91:89:65:a5:b8:12:d7:1a:
                    95:1a:ba:a0:8e:ef:b2:e9:42:d2:c9:42:94:58:c0:
                    60:18:fb:63:23:5d:12:59:87:dc:ff:cf:b7:45:0c:
                    46:f3:48:af:e0:d4:42:f2:1d:fc:47:96:ea:6c:0c:
                    19:db:1d:2c:2a:0d:54:f2:f4:fc:4e:87:bf:2d:8b:
                    df:a9:93:56:7b:53:5b:2c:d5:ce:f4:9b:1b:c9:71:
                    b2:48:b3:e6:0d:1b:d0:2a:df:8d:75:94:61:45:db:
                    7c:ba:9e:59:e6:6a:06:f1:e7:6b:06:b3:0a:c2:5a:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:98:6B:34:2F:4A:5E:38:E3:7C:BA:53:86:47:DC:A4:2B:2D:C9
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:51:99:56:6c:a9:93:96:e1:f6:d5:3e:48:0a:45:ab:01:1f:
         b2:6e:ee:f4:6b:77:28:28:5b:1c:ee:5a:3d:06:bb:ee:58:cd:
         cd:ae:a2:1e:6e:66:d0:95:5f:2d:45:63:e7:12:e2:28:59:b7:
         c7:f9:b3:f1:26:b1:7d:a3:12:38:66:41:6f:8d:46:de:27:b5:
         ff:de:b7:7d:9b:19:86:b5:96:fd:7f:97:34:b8:a8:28:c0:87:
         37:89:de:ab:44:f3:69:6e:a7:59:3b:b0:94:9f:f6:05:fc:60:
         96:03:e9:5f:ff:58:9e:8a:99:63:10:ad:00:28:c4:67:f7:69:
         6b:f9:88:f6:7b:5e:2a:ef:e2:fd:f9:8d:b5:ae:83:45:57:f9:
         b9:d2:92:c2:6c:4c:81:f9:bb:cc:2f:03:54:a0:99:27:ca:b8:
         6e:46:a9:86:f4:70:7f:89:39:3a:49:ac:c3:25:69:7e:ec:8b:
         d4:02:ef:0f:5a:23:a5:88:f5:5b:a9:70:c6:02:41:a2:07:19:
         73:34:73:f2:62:04:3c:a2:9e:af:b0:7e:bf:9c:2c:d0:25:f1:
         54:2f:5a:e4:7f:62:c6:04:a8:c0:41:eb:fa:b5:a6:43:05:09:
         60:ad:d8:90:07:91:3d:4d:28:46:5e:74:82:2b:ce:92:9c:db:
         9d:9b:21:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org