Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          sp2BOUsYivK8KIl7HHIRhrdJLImRIb7pGoqGcu6t6Zk=
Subject key identifier:   E4:C2:3E:4E:42:8A:5F:48:88:3D:D0:25:6D:C5:EE:51:CC:BF:52:88
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       28CD9D3BB78FF3D39035C1CE8F740572E73DB9B8
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:35 +0000
ROA not before:           Thu 04 Apr 2024 02:23:35 +0000
ROA not after:            Thu 03 Apr 2025 02:28:35 +0000
asID:                     52706
IP address blocks:        2804:c70:6004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cd:9d:3b:b7:8f:f3:d3:90:35:c1:ce:8f:74:05:72:e7:3d:b9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:35 2024 GMT
            Not After : Apr  3 02:28:35 2025 GMT
        Subject: CN=E4C23E4E428A5F48883DD0256DC5EE51CCBF5288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:9f:7d:35:03:0f:ff:80:67:85:fb:71:06:
                    57:b7:4d:f9:f5:3c:d4:59:a3:50:4e:ff:9c:d7:81:
                    02:bd:d5:f1:cd:ba:b8:1c:dc:f7:03:fd:d4:3f:62:
                    03:ac:52:e5:23:74:62:af:1e:b5:35:81:0a:2f:9b:
                    a7:6b:06:f8:36:4b:45:2d:5a:e6:55:4f:12:8e:3f:
                    da:72:d5:df:bd:bd:30:9e:49:c5:fa:1f:61:98:c9:
                    2d:dc:de:b3:9d:fa:b7:bf:6e:48:66:24:6f:c0:bf:
                    fe:f6:27:98:54:02:04:07:40:2f:bd:b0:11:73:72:
                    3b:2c:77:b3:f9:84:83:21:f3:43:38:64:5f:e2:ae:
                    3a:a3:ce:a5:37:04:7d:36:02:bf:ff:f0:46:8a:bc:
                    97:a0:76:20:98:79:ab:0f:ab:35:d2:71:87:53:b6:
                    d5:8b:96:3c:05:fa:b7:dc:05:a3:fa:a8:ad:3a:03:
                    e4:a2:90:a1:6e:9c:f8:af:e7:4a:ee:8e:a5:e5:75:
                    d8:0c:a4:f0:06:33:8c:cc:d4:4c:d9:37:c0:ce:9b:
                    1d:b8:6b:6f:ce:82:00:f0:e4:4a:b6:ab:50:f2:ab:
                    8e:b5:e7:24:e9:13:15:f3:7b:f7:85:c7:04:6b:b9:
                    6b:99:e8:83:7b:2b:95:82:89:6b:ef:b5:1b:e5:b2:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:3E:4E:42:8A:5F:48:88:3D:D0:25:6D:C5:EE:51:CC:BF:52:88
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:95:5d:8e:e2:43:0a:65:cb:0c:95:f7:12:b3:38:37:b2:
         42:50:0b:40:bc:5a:22:d2:c4:ec:d2:de:1c:c2:a1:65:d8:d2:
         c3:4f:80:b9:f6:b5:0c:9b:be:c8:8b:e8:89:48:a6:c8:d9:58:
         20:a9:1d:b2:2d:43:84:c4:2c:51:b1:b9:f6:63:5f:17:48:c8:
         fb:b0:54:ab:b1:64:08:e4:f0:a9:3f:5c:bb:89:6f:e5:37:b3:
         83:62:e4:10:24:11:9e:b2:ba:49:d8:32:6f:d4:1d:df:9e:bb:
         6a:71:d3:aa:65:fe:39:c2:64:09:c4:45:be:16:a7:e6:55:55:
         92:eb:10:0b:b5:53:75:0e:ee:68:20:29:3c:d4:fc:6d:d0:39:
         3d:2f:c0:68:14:7b:67:ed:ac:a2:5b:e0:6e:d1:cc:91:26:20:
         2e:78:39:30:52:4a:e2:a9:a3:11:fd:37:fe:95:92:de:b6:b5:
         77:af:e5:da:46:1f:57:59:d2:02:ab:49:62:54:9b:8f:bf:e0:
         c9:56:e6:8e:b1:76:3f:4d:9f:c0:91:2f:23:d8:38:f3:78:80:
         69:66:74:30:bd:08:5a:ed:ca:d6:ad:19:f0:bb:42:41:a9:ff:
         a5:06:a4:d1:b5:cf:a0:e8:d5:70:34:76:3f:d9:54:90:ee:0e:
         6a:0a:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org