Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          v1qm+ZbjNqsgYcwb0GoiXypahGLE8X2dRrOFmxXM+ks=
Subject key identifier:   82:19:F0:5B:59:60:BD:0B:80:4D:FA:D5:0E:41:F3:A0:21:68:D7:EE
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       190749EF867B1E44A67C65EAE09F7C128C97DF68
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa
Signing time:             Tue 10 Sep 2024 18:16:31 +0000
ROA not before:           Tue 10 Sep 2024 18:11:31 +0000
ROA not after:            Tue 09 Sep 2025 18:16:31 +0000
asID:                     52706
IP address blocks:        2804:c70:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:07:49:ef:86:7b:1e:44:a6:7c:65:ea:e0:9f:7c:12:8c:97:df:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Sep 10 18:11:31 2024 GMT
            Not After : Sep  9 18:16:31 2025 GMT
        Subject: CN=8219F05B5960BD0B804DFAD50E41F3A02168D7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:92:1a:71:db:06:45:fc:d0:ef:4f:a6:d0:
                    18:96:21:05:19:a0:48:93:6c:7a:63:63:fb:2c:8f:
                    cb:b7:0a:40:31:63:a2:d7:9f:f6:ef:eb:59:90:72:
                    b1:31:7e:ba:dd:77:4a:ed:ea:03:74:ee:23:19:6f:
                    da:dc:9a:8a:8b:fd:c9:0a:75:e4:10:e9:af:db:d8:
                    f1:a3:bc:77:48:09:3e:15:5a:c4:a3:08:71:94:b9:
                    f6:4c:ea:fd:60:d3:27:a2:95:c5:4f:fd:af:b6:8c:
                    9d:b0:96:bd:7b:cb:41:93:c5:28:37:57:c3:a6:90:
                    bf:29:52:7e:15:da:0a:3a:16:09:2b:cb:5d:d9:d3:
                    0c:31:46:d0:29:e5:23:e1:fe:5f:3b:47:6a:41:63:
                    fb:e9:e0:fd:2a:f8:c6:fc:10:98:1a:1d:b4:ff:21:
                    ea:b2:ea:4c:7f:99:7f:4e:c7:c7:7a:51:7d:97:b5:
                    f0:55:ea:fb:9f:6c:5e:09:11:bc:db:0c:cf:d8:08:
                    32:c0:43:d0:6b:c5:38:87:81:51:83:c4:21:9c:38:
                    6e:fe:91:e5:1d:2f:69:d8:66:b1:63:01:e4:fc:12:
                    ff:66:e4:8c:f9:0a:c6:c7:1a:08:f5:6c:d3:63:fb:
                    b0:d4:8c:18:fd:1e:66:2e:dc:ff:83:e2:80:70:1f:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:F0:5B:59:60:BD:0B:80:4D:FA:D5:0E:41:F3:A0:21:68:D7:EE
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a373a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:f2:c5:24:41:48:e6:e0:72:c4:73:c2:f3:3e:1b:37:1c:b7:
         17:84:79:d6:6c:cd:71:5f:3b:0d:5e:fd:8d:fd:dc:ea:78:32:
         fa:73:28:a6:a2:8c:50:56:8b:c6:7d:c1:74:7f:89:a2:46:cb:
         fa:27:f1:fe:91:2a:07:fc:2a:3d:bd:4f:d3:78:a6:2a:9c:c4:
         4d:6f:e7:2b:80:fe:94:13:22:24:f0:9a:f7:43:e5:63:f3:ba:
         0b:71:87:db:bc:3a:37:0a:7f:b4:6d:a9:0c:3f:c0:3f:f6:39:
         20:29:49:3f:1e:35:8c:14:52:d4:f9:28:8f:c1:45:63:5b:4c:
         ab:32:ac:80:f6:f7:dd:6b:9a:7e:7a:25:b7:52:57:fe:c9:39:
         7b:d9:bb:3d:04:11:96:70:1b:6f:d7:af:63:34:62:d0:88:a7:
         4a:b0:1a:90:b1:b5:ac:31:1b:05:83:99:41:32:25:fa:cb:b9:
         90:11:e1:96:28:32:94:b9:c9:a6:7f:a6:48:4d:c2:35:6e:dc:
         ad:65:16:26:b7:1c:66:37:27:ac:8d:23:58:3e:cb:75:71:df:
         46:27:93:57:93:24:ad:0b:a0:1f:b8:dc:ac:9e:97:04:55:bb:
         e1:98:cb:cb:cf:fd:67:1a:96:1e:4c:8f:13:9d:5d:d2:42:ad:
         31:db:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org