Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          3tt3FMbhINYOnH9S5Sxe29aETIKukknCAv19nO3JL6g=
Subject key identifier:   BE:58:AD:93:BA:47:A2:BF:25:EE:96:0B:4F:3B:1A:EF:BC:71:6D:AC
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       1358BE7ED281271910A983897349F45E89802A30
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:28 +0000
ROA not before:           Thu 04 Apr 2024 02:23:28 +0000
ROA not after:            Thu 03 Apr 2025 02:28:28 +0000
asID:                     52706
IP address blocks:        2804:c70:6003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:58:be:7e:d2:81:27:19:10:a9:83:89:73:49:f4:5e:89:80:2a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:28 2024 GMT
            Not After : Apr  3 02:28:28 2025 GMT
        Subject: CN=BE58AD93BA47A2BF25EE960B4F3B1AEFBC716DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:37:97:5e:0a:22:e0:c7:29:9e:38:4e:7b:
                    78:89:10:48:51:b2:db:a5:8e:37:f0:c6:21:5c:61:
                    5c:7e:03:16:d8:ba:61:41:e9:2a:c3:92:cc:98:8d:
                    58:88:ad:36:d9:69:95:e7:c2:39:d7:4c:62:59:b5:
                    97:11:31:bd:da:33:7d:3d:9f:1a:3a:34:12:71:4b:
                    62:11:37:5c:ef:f6:00:35:00:7d:c3:4e:53:67:33:
                    46:58:7c:61:ff:ae:f1:a2:6a:e0:38:26:ee:0b:e7:
                    85:2d:cd:d9:82:e0:ff:cb:75:bc:d8:c1:72:74:5d:
                    92:43:2d:8e:8e:d6:53:21:b3:13:b0:c4:45:a5:25:
                    fe:d9:46:cd:e5:de:c5:e6:22:e1:8c:19:af:da:b4:
                    d9:52:a0:8e:44:fe:3e:93:2c:86:c0:e2:76:c2:e3:
                    22:b0:3b:3b:6f:71:ac:c5:42:85:bf:e6:7c:2c:7f:
                    a8:4c:69:a1:ca:2e:9c:b0:01:2c:41:7f:e3:08:97:
                    74:a9:16:1f:97:ae:42:c0:20:0d:ff:29:ac:44:19:
                    aa:db:32:3a:20:8d:22:04:94:4b:f9:d3:84:2b:ec:
                    40:2a:a2:19:d8:34:a0:f1:c3:86:92:84:ea:bf:5b:
                    cf:b2:04:71:38:a9:b7:4a:e2:46:83:67:e0:4c:3f:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:AD:93:BA:47:A2:BF:25:EE:96:0B:4F:3B:1A:EF:BC:71:6D:AC
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030333a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:91:19:90:bc:a2:b6:c0:29:e6:e1:ee:69:2e:93:16:2a:
         1d:4e:17:e9:26:8c:69:f9:e5:19:87:2f:69:e3:4e:bf:2b:86:
         c1:d5:15:10:a5:fb:61:69:fc:6b:fd:3a:8b:8e:b9:f2:e1:40:
         37:47:88:2f:ac:f4:f8:03:c2:10:b2:ff:22:16:c0:41:21:b0:
         2a:ea:e9:c0:61:e8:d6:45:c1:c5:be:87:43:36:ac:5a:3f:bc:
         40:92:6a:5e:8c:5e:93:4b:d2:1b:70:73:62:34:04:ea:cb:01:
         03:b7:6b:b1:15:e7:16:a5:10:8c:de:a9:a0:d1:34:3f:9e:dc:
         f8:89:0a:8d:35:09:01:58:59:49:06:dc:86:f9:21:2b:22:19:
         c6:c1:f5:6a:24:10:38:b8:73:6b:33:9a:d7:5e:1d:af:2a:0d:
         29:13:4a:bf:b5:c3:92:37:50:c7:9a:1b:5b:2a:a9:4b:2a:71:
         a0:dd:8a:11:e3:7e:f9:65:b1:59:ca:45:1d:ea:8d:4c:d8:6a:
         a8:41:ae:52:5b:ee:cd:52:24:a2:6b:17:9e:c4:96:c9:1f:42:
         b0:ba:13:7f:b3:c4:65:3f:23:5e:63:49:b5:df:88:25:4e:71:
         54:26:59:53:e4:7c:78:34:1e:cf:3e:49:6c:dd:dc:73:ae:a1:
         d8:30:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org