Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          X3q5tnvissqLurZwq/8n6AxESo8ZguB8qRhs73hMMQI=
Subject key identifier:   CE:90:94:DD:0A:12:D6:30:D8:9B:98:66:EF:63:8F:29:58:46:69:09
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       3CF0BB8C344ABFD496841435C08AC026788164
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:37 +0000
ROA not before:           Thu 04 Apr 2024 02:23:37 +0000
ROA not after:            Thu 03 Apr 2025 02:28:37 +0000
asID:                     52706
IP address blocks:        2804:c70:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f0:bb:8c:34:4a:bf:d4:96:84:14:35:c0:8a:c0:26:78:81:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:37 2024 GMT
            Not After : Apr  3 02:28:37 2025 GMT
        Subject: CN=CE9094DD0A12D630D89B9866EF638F2958466909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:e8:40:fc:b4:fa:10:96:6c:64:aa:42:e4:
                    fa:8f:f9:5c:c5:fc:02:5e:13:32:90:95:1a:aa:df:
                    50:06:57:78:06:eb:53:c9:19:68:c7:cf:9e:cc:ce:
                    57:9a:70:85:55:9a:be:1e:44:58:d9:b8:df:ce:fb:
                    c9:6e:e3:6c:3b:88:90:8f:e3:42:c8:52:83:f6:1e:
                    43:ac:98:24:57:65:19:1c:a0:74:45:ec:98:8e:48:
                    4a:75:02:aa:32:29:c2:e0:c6:a7:cf:24:85:d2:d2:
                    fc:b9:9f:54:76:30:ca:f5:7d:16:cf:bd:c0:a0:e7:
                    2d:97:f8:1c:e7:ab:a4:ae:11:5a:7b:26:54:56:a2:
                    08:71:f2:6f:9b:34:d9:85:7c:fa:a1:fc:c9:a9:15:
                    35:39:e8:10:7b:80:de:08:fb:e3:dd:cc:a0:ea:ce:
                    51:ff:b4:0a:6d:fd:a2:d5:b4:48:dd:f8:b1:ac:c8:
                    61:a9:fe:88:d9:81:3f:bb:cc:08:20:b6:a9:bf:fe:
                    e7:a5:68:71:21:82:6f:90:e6:2e:81:5c:d2:f3:3d:
                    66:50:6d:ca:d4:e0:82:28:65:6c:40:78:d8:a4:dd:
                    ac:58:81:e8:ed:ff:3c:e4:a9:9c:01:50:71:15:34:
                    1f:42:fd:88:bd:31:76:85:0d:b7:c4:8a:36:bd:86:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:94:DD:0A:12:D6:30:D8:9B:98:66:EF:63:8F:29:58:46:69:09
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:e3:53:b9:2a:54:38:8d:1a:37:38:40:18:43:45:b3:12:
         81:20:f8:b6:66:ad:a3:94:9f:08:1b:f1:37:fc:78:17:65:77:
         14:f5:41:25:ac:5a:11:d1:76:b6:46:48:64:59:c2:2e:d0:8a:
         26:99:b5:55:81:47:0c:74:b9:a4:b1:52:ad:82:f1:66:ce:e2:
         6a:82:03:c3:b4:8a:f4:86:0f:ed:58:98:81:62:ab:8e:2c:5c:
         ef:43:2d:d6:3c:88:bf:11:23:a2:48:a7:e5:3b:b0:a5:c7:a9:
         19:8d:99:65:f8:b8:4d:e3:78:b6:dc:b3:b7:f6:7f:f1:e0:ce:
         47:32:ba:7c:e5:e3:6c:83:3f:76:32:6b:30:6d:53:fd:ae:d8:
         3d:eb:fa:3c:de:3e:30:16:fb:49:2f:cf:64:f8:03:77:76:fb:
         69:c4:f9:52:26:4b:14:e5:24:34:7c:d8:fa:f8:eb:3b:3f:6a:
         a4:d4:59:3a:7e:b5:cd:22:b5:0f:f8:5b:f1:22:e8:ee:8c:72:
         09:85:ad:78:f4:a1:46:87:19:ab:7a:2f:e0:55:5f:97:ea:25:
         40:48:4a:16:77:73:ee:f7:c9:28:d1:94:a5:5a:f4:09:cf:e0:
         b9:dd:51:a0:0a:72:33:e1:78:34:aa:ad:7f:9c:50:8f:50:81:
         f8:ba:5d:88
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgITPPC7jDRKv9SWhBQ1wIrAJniBZDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1
QkU4REE2MB4XDTI0MDQwNDAyMjMzN1oXDTI1MDQwMzAyMjgzN1owMzExMC8GA1UE
AxMoQ0U5MDk0REQwQTEyRDYzMEQ4OUI5ODY2RUY2MzhGMjk1ODQ2NjkwOTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKHe6ED8tPoQlmxkqkLk+o/5XMX8
Al4TMpCVGqrfUAZXeAbrU8kZaMfPnszOV5pwhVWavh5EWNm43877yW7jbDuIkI/j
QshSg/YeQ6yYJFdlGRygdEXsmI5ISnUCqjIpwuDGp88khdLS/LmfVHYwyvV9Fs+9
wKDnLZf4HOerpK4RWnsmVFaiCHHyb5s02YV8+qH8yakVNTnoEHuA3gj7493MoOrO
Uf+0Cm39otW0SN34sazIYan+iNmBP7vMCCC2qb/+56VocSGCb5DmLoFc0vM9ZlBt
ytTggihlbEB42KTdrFiB6O3/POSpnAFQcRU0H0L9iL0xdoUNt8SKNr2GO5cCAwEA
AaOCAlgwggJUMB0GA1UdDgQWBBTOkJTdChLWMNibmGbvY48pWEZpCTAfBgNVHSME
GDAWgBTjXlTx0CY7jpA6CSmmExPIxb6NpjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby80R0hhTnJ4VVN1RWNRam5IM2pqbTNoQTdwcG5KNkp0MmdFTVV0Z3FheFcx
Ry8xL0UzNUU1NEYxRDAyNjNCOEU5MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRTM1RTU0RjFEMDI2M0I4RTkw
M0EwOTI5QTYxMzEzQzhDNUJFOERBNi5jZXIwgbIGCCsGAQUFBwELBIGlMIGiMIGf
BggrBgEFBQcwC4aBknJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhXMUcvMS8z
MjM4MzAzNDNhNjMzNzMwM2EzODMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDM1MzIzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAxwgAEwDQYJKoZIhvcNAQELBQADggEB
ALbt41O5KlQ4jRo3OEAYQ0WzEoEg+LZmraOUnwgb8Tf8eBdldxT1QSWsWhHRdrZG
SGRZwi7QiiaZtVWBRwx0uaSxUq2C8WbO4mqCA8O0ivSGD+1YmIFiq44sXO9DLdY8
iL8RI6JIp+U7sKXHqRmNmWX4uE3jeLbcs7f2f/Hgzkcyunzl42yDP3YyazBtU/2u
2D3r+jzePjAW+0kvz2T4A3d2+2nE+VImSxTlJDR82Pr46zs/aqTUWTp+tc0itQ/4
W/Ei6O6McgmFrXj0oUaHGat6L+BVX5fqJUBIShZ3c+73ySjRlKVa9AnP4LndUaAK
cjPheDSqrX+cUI9Qgfi6XYg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org