Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          XDVITW7+NwwAuAk05r+WJUjraDsyVpsVxmbRjz3ygs4=
Subject key identifier:   EE:84:47:A8:B2:00:A3:AC:27:2F:F5:AE:6B:12:BA:5A:CB:F8:A0:F5
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       5B96FBE8A6D929B872CD822B2CC72EBE708B716D
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:40 +0000
ROA not before:           Thu 06 Mar 2025 02:26:40 +0000
ROA not after:            Thu 05 Mar 2026 02:31:40 +0000
asID:                     52706
IP address blocks:        2804:c70:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:96:fb:e8:a6:d9:29:b8:72:cd:82:2b:2c:c7:2e:be:70:8b:71:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:40 2025 GMT
            Not After : Mar  5 02:31:40 2026 GMT
        Subject: CN=EE8447A8B200A3AC272FF5AE6B12BA5ACBF8A0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:f3:dd:4d:5e:93:ce:16:5a:e9:cd:f5:c3:
                    47:56:28:13:e3:96:90:1f:4a:a9:36:5f:94:b8:c1:
                    c1:e0:4c:54:cc:42:6a:42:df:b9:ba:93:51:22:af:
                    a4:da:f4:5a:c4:b7:d7:a1:54:05:07:cd:fd:d3:d2:
                    96:f6:b4:e6:3d:0a:75:3e:a3:c1:d4:20:b6:7b:dc:
                    04:01:08:1b:b4:d4:0a:d6:7f:9a:19:41:f0:73:87:
                    41:85:5a:c1:2b:07:e2:40:11:0b:6c:9f:79:01:4a:
                    52:d4:76:03:cc:8e:95:5d:98:5b:2d:a4:bd:b0:ca:
                    23:91:89:41:26:b5:1e:05:c4:c8:2a:03:9b:2d:7f:
                    52:34:a8:15:aa:8b:0f:76:4c:c9:61:44:fc:9a:e1:
                    6d:ec:da:0a:e2:dd:a8:6d:79:76:90:7e:27:74:c9:
                    c2:54:27:12:e0:aa:50:e0:a9:62:2e:45:d6:cd:69:
                    e9:25:6f:ff:07:63:a3:b5:a1:0e:b3:66:c0:21:16:
                    59:1c:a6:c6:4c:d5:8e:d9:4e:a1:89:4d:61:c1:77:
                    16:4e:06:9a:ae:73:81:0a:59:29:a4:10:e2:49:c2:
                    35:74:b0:03:94:dd:f3:05:16:e6:b7:f1:af:c7:5e:
                    d5:42:19:28:70:0a:7d:65:e9:44:03:4a:4f:d9:3e:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:84:47:A8:B2:00:A3:AC:27:2F:F5:AE:6B:12:BA:5A:CB:F8:A0:F5
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:3f:f9:c8:43:54:a9:46:05:c1:97:98:a0:73:83:fc:9b:4f:
         d6:02:a5:24:63:e4:d8:dd:5b:f8:d5:a1:8d:de:d7:11:91:e5:
         8d:2d:46:22:b1:85:75:66:ae:25:64:76:f5:86:bc:b7:9c:a1:
         c9:01:2b:70:64:b5:1d:2c:66:03:b3:8a:94:c1:76:ca:d4:f4:
         46:e0:8e:fa:9e:2c:f9:10:59:dc:f6:9f:01:ca:a3:ff:53:30:
         72:10:cc:96:85:51:6e:28:1b:9d:07:3d:39:ca:6c:6a:9d:b9:
         b3:3f:7e:61:78:29:50:d0:a8:b7:dc:20:78:9a:0a:db:91:8a:
         e8:27:f9:fc:11:0d:aa:70:65:e0:cc:1c:09:81:14:82:09:f5:
         58:e8:e9:f6:09:d8:fb:0e:98:b7:a9:9e:27:05:19:3f:a8:ca:
         6e:98:ff:ba:b9:fc:de:f5:83:5f:0e:7f:8e:3b:1a:81:d6:b4:
         da:24:b6:af:2f:41:82:6e:b8:55:0b:75:fb:a5:32:f0:d0:83:
         af:f3:7e:52:b0:ed:d2:ed:93:f2:61:d6:52:30:59:48:69:74:
         5d:96:d6:b5:52:76:90:86:d9:86:6d:18:4f:df:f1:77:48:74:
         06:d2:69:3e:37:97:a0:1e:df:ca:ee:be:7f:e4:c2:d1:ba:d1:
         04:99:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:18 2025 by rpki-client