Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          D3iQhzOSp+4Uj6zJXjTd7haxR3eenUs+yGWhWBfFaAM=
Subject key identifier:   FA:FE:20:30:9A:C1:55:92:C4:DB:8C:FA:62:6A:5E:30:47:41:97:14
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       28788D481E66C183F7B6EBE91C6B04793B4C4A10
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:40 +0000
ROA not before:           Thu 04 Apr 2024 02:23:40 +0000
ROA not after:            Thu 03 Apr 2025 02:28:40 +0000
asID:                     52706
IP address blocks:        2804:c70:6005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:78:8d:48:1e:66:c1:83:f7:b6:eb:e9:1c:6b:04:79:3b:4c:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:40 2024 GMT
            Not After : Apr  3 02:28:40 2025 GMT
        Subject: CN=FAFE20309AC15592C4DB8CFA626A5E3047419714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:62:bd:23:bf:e0:41:a4:da:10:0f:29:0c:
                    63:b1:3e:83:62:e2:86:ac:35:08:90:6f:fb:46:42:
                    8a:ee:75:50:5d:01:06:64:dd:d2:ef:a4:74:b3:55:
                    36:5a:6b:e2:03:53:4f:86:0e:1f:64:27:09:81:c3:
                    50:a7:ec:31:dd:28:8c:8f:de:9f:4b:f7:d0:2d:01:
                    11:d4:85:70:0a:dd:d5:71:63:b2:a6:8c:62:70:44:
                    8f:47:7e:ef:6d:a5:78:4b:8e:b4:3f:06:d2:60:be:
                    5f:e6:0c:e4:0b:55:8e:48:50:1c:eb:3f:8c:95:6d:
                    92:63:83:dd:31:9a:bc:d8:47:df:d6:1b:b4:0a:7e:
                    4d:40:17:14:32:d2:d5:f3:20:6a:b4:26:6b:f0:17:
                    04:81:b0:bc:0e:10:43:42:e7:da:bd:8b:d5:57:39:
                    58:ff:ad:84:f5:8a:1c:bf:d5:bd:94:f8:32:1e:5a:
                    ce:17:2b:56:46:ef:71:eb:85:1d:42:a7:ac:45:cc:
                    3a:f2:08:91:a5:8e:f4:03:32:d5:3f:35:67:ff:8c:
                    89:91:e3:4c:11:25:98:2f:1d:93:4f:81:c8:f0:5e:
                    c3:1f:fc:6f:29:f8:3d:95:20:fb:60:24:a9:b5:2a:
                    fe:60:8c:8a:ba:c8:0b:a5:94:30:9e:c9:08:6f:8e:
                    29:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:20:30:9A:C1:55:92:C4:DB:8C:FA:62:6A:5E:30:47:41:97:14
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:76:e9:6b:3b:fe:ab:13:4f:91:c0:30:79:d9:fa:d4:e2:a2:
         fc:fd:e3:2d:7f:9b:ed:a1:5f:85:eb:c2:cc:66:ea:a7:c8:e0:
         0d:43:f5:15:04:57:7c:65:76:f7:48:64:ab:9d:ce:67:d3:4f:
         a6:af:35:61:da:99:99:9b:f2:6c:47:54:7d:2e:fd:61:e8:7c:
         5c:52:74:40:86:b0:20:5b:08:df:e8:43:a4:aa:a7:65:4a:bc:
         c4:2f:1d:35:c7:d0:47:a5:e9:4d:e2:6e:a5:06:89:46:aa:64:
         e7:64:d4:4b:2b:b6:27:56:c7:fd:aa:f5:91:a8:ad:c0:27:bb:
         22:9b:d0:95:f6:49:64:e4:b4:5c:7e:c8:bf:21:5e:82:a5:82:
         7f:52:93:29:35:c7:8e:70:e1:a3:b0:d2:f5:d3:a4:d8:d8:98:
         f7:17:5d:33:ac:ad:0e:07:11:c6:c2:78:0e:c7:d6:36:fb:09:
         ee:8c:5d:b5:8b:0c:66:f0:3c:10:ec:2d:db:f4:b1:71:4a:2a:
         97:8a:ff:46:4e:41:07:12:00:83:e8:9e:52:11:8d:db:d6:23:
         4f:e0:b5:d8:e0:cc:f3:5b:c2:44:81:89:03:23:a3:91:1b:21:
         8d:cf:2e:ea:d2:fa:53:8c:9f:11:15:6c:db:81:cf:19:b7:de:
         b8:91:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org