Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          CzEN+AE8Jr3+nv+SRJXVMXkhevrlRrUcNFqn6jzF1W4=
Subject key identifier:   93:C8:BE:0D:84:5D:0F:17:29:02:7E:71:16:93:83:BD:42:89:A2:BA
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       2463F4F9F6E4A7CB67D91C71E736AAE32A29B1FA
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:32 +0000
ROA not before:           Thu 04 Apr 2024 02:23:32 +0000
ROA not after:            Thu 03 Apr 2025 02:28:32 +0000
asID:                     52706
IP address blocks:        2804:c70:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:63:f4:f9:f6:e4:a7:cb:67:d9:1c:71:e7:36:aa:e3:2a:29:b1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:32 2024 GMT
            Not After : Apr  3 02:28:32 2025 GMT
        Subject: CN=93C8BE0D845D0F1729027E71169383BD4289A2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:68:6d:18:c5:42:fb:28:19:9d:35:4b:cf:
                    12:6f:9f:b0:4f:98:39:44:c5:53:e2:f4:fe:74:40:
                    d6:d9:5c:2c:e7:49:44:f6:78:03:41:8d:b7:fd:9e:
                    1b:24:ce:86:0e:cc:fc:a1:61:99:c1:18:54:6d:0a:
                    6b:0e:68:17:60:c1:a2:85:e7:f0:31:7a:65:92:89:
                    83:9e:70:40:38:22:0b:2a:13:5b:2f:e6:9b:95:d7:
                    25:ae:50:9e:b1:87:bb:98:c1:10:5b:52:56:74:55:
                    64:51:f7:7a:f4:6b:80:89:29:3f:b3:55:af:b9:00:
                    9d:5c:84:62:29:2a:65:7c:fa:d8:97:74:61:0b:36:
                    a6:7d:38:7e:8a:f3:76:d7:a6:e3:b0:57:06:0b:04:
                    f7:20:21:a8:c8:ee:ac:ec:3b:bf:55:4e:04:75:b1:
                    3f:ca:2f:f9:a9:bc:9f:88:f5:55:47:1a:82:66:70:
                    38:ba:ca:8d:16:e3:c3:81:7f:cd:ea:a2:0c:4d:a1:
                    3f:1f:7e:e3:6a:bf:78:3c:8a:4c:56:8a:0f:d0:fb:
                    72:85:4f:e6:d1:62:07:f8:2b:c5:05:63:d5:e4:a5:
                    ae:5f:68:85:a3:80:2d:f2:bc:72:06:30:e1:72:5c:
                    77:9f:f1:a2:f8:af:1b:bf:f3:b5:2d:47:b1:a4:fb:
                    fc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C8:BE:0D:84:5D:0F:17:29:02:7E:71:16:93:83:BD:42:89:A2:BA
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:98:12:42:19:5e:fe:cb:70:38:3f:6d:09:7a:0f:20:8e:
         af:dd:71:e4:e5:9c:73:8e:8c:ce:05:e1:31:79:67:4b:63:98:
         56:8d:b5:74:ce:e6:a5:a8:c2:62:51:98:4d:46:81:1f:04:0f:
         75:24:db:38:5d:91:c7:f7:37:08:a6:00:6e:28:5a:d3:3f:4a:
         37:09:cd:dc:1b:19:c6:0c:73:ae:55:de:e4:fa:5b:8d:0c:2d:
         39:39:d8:af:d1:0a:e3:fa:ad:9f:0a:9e:d8:9b:2d:33:cd:e0:
         41:98:48:4b:d0:b8:84:aa:9a:7a:d5:0e:88:28:d9:e2:e7:30:
         63:04:1a:9a:99:94:e3:fe:74:14:69:e0:39:91:a9:e3:0e:2a:
         f3:bb:f7:87:6e:50:31:51:86:74:6a:00:c3:cc:cd:d3:4e:82:
         39:95:55:9b:8b:92:ca:e4:9d:25:64:6e:6d:2a:07:0a:80:22:
         c3:5a:73:52:64:b5:57:1f:f7:76:d1:e8:04:11:7c:70:20:49:
         8a:f4:b6:25:2f:0e:ef:1e:21:9a:09:cc:7b:34:16:9c:71:d5:
         22:c9:ba:42:07:2c:90:f0:78:84:3e:14:29:f9:9f:b1:df:5b:
         a8:ff:1b:42:35:6e:b2:d1:e2:2e:f6:b9:24:21:2d:49:bc:c9:
         38:c3:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:36 2024 by rpki-client on console-fra.rpki-client.org