Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          uw37EdglQ0D1ODfVYPsIYryBcYYTNwmb4bxzwLuuNJs=
Subject key identifier:   D2:AE:95:31:5E:1A:24:4B:83:AF:C8:48:18:2E:F4:66:02:D7:2B:EE
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       6C019339D4CA0FEF919022971A39286AD01A4F13
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:35 +0000
ROA not before:           Thu 06 Mar 2025 02:26:35 +0000
ROA not after:            Thu 05 Mar 2026 02:31:35 +0000
asID:                     52706
IP address blocks:        2804:c70:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:01:93:39:d4:ca:0f:ef:91:90:22:97:1a:39:28:6a:d0:1a:4f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:35 2025 GMT
            Not After : Mar  5 02:31:35 2026 GMT
        Subject: CN=D2AE95315E1A244B83AFC848182EF46602D72BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:df:76:f8:43:8c:33:46:4d:9f:ac:44:c3:
                    c3:33:31:f5:c2:b2:4c:e3:44:19:19:8c:0c:7a:dc:
                    db:9c:bc:cf:fa:65:71:02:82:29:1b:2b:66:06:53:
                    fd:fa:dd:ed:c0:00:0b:4c:5f:3a:8a:ad:9d:14:32:
                    ca:6d:9c:10:43:a0:9d:58:32:4c:17:72:e3:9b:0b:
                    1e:b3:95:e4:b9:8f:18:2b:ec:b4:6d:e0:84:b5:f7:
                    a3:54:71:75:10:2a:3f:5a:5c:01:2c:c9:2b:fb:67:
                    8a:e5:a9:29:65:03:e9:ae:85:89:40:cd:55:f0:81:
                    f8:9a:ca:5c:96:1b:16:61:99:83:f8:53:4b:2f:6a:
                    50:eb:75:74:9e:f7:40:10:e2:d0:3f:e3:cd:fe:5c:
                    a8:a2:39:b7:e9:0e:1f:e2:8f:08:17:3f:a4:42:7d:
                    a5:1c:0e:61:aa:6b:6e:f5:4d:ea:85:fe:9a:ce:d8:
                    57:2b:26:a5:e1:08:bb:bd:f4:b8:72:b4:10:93:0c:
                    4d:55:31:45:c0:73:1d:45:d0:04:d8:6a:20:46:29:
                    c5:25:d3:c9:4e:04:a0:44:f9:8f:57:a6:df:9f:0b:
                    62:39:94:06:07:16:cb:b6:ec:50:4c:7a:f0:19:7e:
                    23:6b:35:eb:34:2b:02:c6:ff:78:8c:f7:c7:8c:68:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AE:95:31:5E:1A:24:4B:83:AF:C8:48:18:2E:F4:66:02:D7:2B:EE
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:31:10:61:ff:bb:20:ab:3a:52:1f:6d:82:4c:82:70:09:28:
         b2:91:e3:31:bc:0a:51:73:64:2f:a5:f3:e6:bb:0f:06:64:15:
         fa:5a:89:99:0c:ba:24:9d:fa:7d:d3:9c:3a:ef:36:38:27:f3:
         1f:cb:3c:e9:a4:c2:03:ea:9a:78:b3:e7:01:9b:3e:14:46:47:
         8f:24:64:3e:1e:f8:68:bc:6a:86:2b:d0:91:6a:15:94:74:37:
         9b:41:0b:b3:37:72:98:b6:3d:e2:64:de:64:36:31:c4:d0:43:
         5b:80:2f:6b:1b:ff:cf:94:37:62:5e:df:a2:3b:9b:4c:b5:aa:
         03:a6:ec:8a:7e:90:71:94:de:cf:d0:24:52:2a:35:cb:aa:a6:
         9f:36:9e:23:a3:2b:b1:5c:a6:7b:93:56:f0:52:2b:7f:23:aa:
         25:05:f6:a2:40:9a:34:99:68:ed:4e:a2:b0:2e:9f:70:50:1f:
         1a:22:4f:f7:84:4a:cd:75:6e:86:7f:8a:10:c5:c2:d3:c8:5f:
         55:a6:40:e4:d6:19:03:77:48:e0:2b:ca:03:5a:b0:03:f0:6c:
         9a:ae:e5:71:04:33:74:57:4a:71:ff:99:4c:a7:68:93:ad:f2:
         8b:3a:4f:5c:77:8b:bc:38:e0:33:13:09:81:89:cd:a6:0a:5a:
         43:85:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:56:11 2025 by rpki-client