Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          Mi0PAcNicfClIsCjDoYKmSTFkibr9A5osS73uhprAME=
Subject key identifier:   DD:3C:16:BD:F5:0A:55:0A:63:BF:DE:C5:D7:C3:FE:0B:20:E9:3C:86
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       19166E88E9690B60067DD3D7619EE6C23310033F
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:30 +0000
ROA not before:           Thu 04 Apr 2024 02:23:30 +0000
ROA not after:            Thu 03 Apr 2025 02:28:30 +0000
asID:                     52706
IP address blocks:        2804:c70:8004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:16:6e:88:e9:69:0b:60:06:7d:d3:d7:61:9e:e6:c2:33:10:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:30 2024 GMT
            Not After : Apr  3 02:28:30 2025 GMT
        Subject: CN=DD3C16BDF50A550A63BFDEC5D7C3FE0B20E93C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:30:89:8c:5f:b6:89:54:ac:37:26:4d:b0:
                    85:d5:0b:c8:56:3c:7d:45:15:99:c4:2c:24:fc:b0:
                    f9:e9:97:f3:06:4b:f9:0e:fa:12:2f:4b:19:35:62:
                    61:81:49:8b:9d:29:fa:e2:18:d2:9c:5a:8c:86:8a:
                    28:41:a5:92:c8:3b:cc:91:bf:4c:d2:21:bc:8c:87:
                    51:55:45:84:5f:4c:3e:d8:61:bb:a7:af:59:f1:f7:
                    2f:50:e5:25:eb:9f:98:79:4c:5e:51:a6:f4:44:ad:
                    4f:27:c6:c4:28:2e:6e:41:0a:34:05:f1:0b:34:a7:
                    3b:ec:ac:aa:2e:ed:31:ac:03:77:0c:a2:97:50:ef:
                    0d:0d:29:d3:57:63:2c:5b:00:2d:d8:03:5a:39:34:
                    c8:e9:c1:fe:f5:31:f0:cf:34:99:ce:99:19:00:56:
                    b0:50:dd:15:70:6d:85:fa:d7:06:26:91:63:16:33:
                    9f:d8:01:8a:47:db:b4:61:ec:f0:18:b0:60:03:13:
                    53:7d:d0:a6:d7:90:88:8a:af:ed:0c:4d:32:3c:d6:
                    57:ec:d0:a6:e4:a4:e9:b9:ac:cb:1d:69:6d:49:5b:
                    30:77:ac:44:4f:46:c4:76:b2:06:29:ed:58:d9:dd:
                    a5:2b:5e:41:43:df:ef:4a:84:f5:b1:e3:5d:3e:ae:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3C:16:BD:F5:0A:55:0A:63:BF:DE:C5:D7:C3:FE:0B:20:E9:3C:86
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:ef:c1:52:cc:0c:65:66:91:43:d3:f0:58:79:1d:8a:bd:b6:
         82:f4:a5:a2:05:bd:c6:33:fa:d3:eb:1a:d5:86:33:96:8a:3c:
         3c:7f:a0:9b:a2:f7:9f:fc:6a:c8:19:7e:9b:6e:70:c3:d9:83:
         86:ec:8e:82:1e:7d:0f:b6:fd:4d:98:6a:1b:74:85:9e:40:0f:
         dd:ff:31:2a:e6:1c:8f:6c:d5:0e:36:4d:e3:88:55:31:af:4c:
         49:ef:f2:6e:d0:f1:9d:77:58:13:a7:7d:ae:bc:54:ae:02:37:
         1f:20:dc:01:b8:4f:76:63:43:19:5d:33:b8:10:2a:d5:91:e3:
         4c:8e:10:d9:e7:c3:91:1b:68:20:49:89:94:3e:27:cb:4f:0e:
         ba:32:98:52:80:41:19:98:81:a5:53:16:0c:7b:32:0d:27:63:
         46:3e:5f:3b:10:e8:5e:6f:19:d4:2b:f2:f3:4d:28:87:28:32:
         02:b3:a6:cd:26:22:13:d5:61:19:72:69:4d:83:68:57:3f:17:
         6a:2d:23:87:f0:c4:7a:73:f9:12:91:3b:8e:fd:20:0c:4b:8c:
         bb:2e:97:64:1c:71:b0:a1:1a:90:8b:c7:bd:b6:48:c1:d3:c3:
         ad:5c:54:81:5a:76:dc:6d:4a:36:bd:70:d0:4d:31:e3:e8:80:
         89:af:ee:fe
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUGRZuiOlpC2AGfdPXYZ7mwjMQAz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMzBaFw0yNTA0MDMwMjI4MzBaMDMxMTAvBgNV
BAMTKEREM0MxNkJERjUwQTU1MEE2M0JGREVDNUQ3QzNGRTBCMjBFOTNDODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxzCJjF+2iVSsNyZNsIXVC8hW
PH1FFZnELCT8sPnpl/MGS/kO+hIvSxk1YmGBSYudKfriGNKcWoyGiihBpZLIO8yR
v0zSIbyMh1FVRYRfTD7YYbunr1nx9y9Q5SXrn5h5TF5RpvRErU8nxsQoLm5BCjQF
8Qs0pzvsrKou7TGsA3cMopdQ7w0NKdNXYyxbAC3YA1o5NMjpwf71MfDPNJnOmRkA
VrBQ3RVwbYX61wYmkWMWM5/YAYpH27Rh7PAYsGADE1N90KbXkIiKr+0MTTI81lfs
0KbkpOm5rMsdaW1JWzB3rERPRsR2sgYp7VjZ3aUrXkFD3+9KhPWx410+riSRAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU3TwWvfUKVQpjv97F18P+CyDpPIYwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhMzgzMDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQMcIAEMA0GCSqGSIb3DQEBCwUAA4IB
AQCl78FSzAxlZpFD0/BYeR2KvbaC9KWiBb3GM/rT6xrVhjOWijw8f6Cbovef/GrI
GX6bbnDD2YOG7I6CHn0Ptv1NmGobdIWeQA/d/zEq5hyPbNUONk3jiFUxr0xJ7/Ju
0PGdd1gTp32uvFSuAjcfINwBuE92Y0MZXTO4ECrVkeNMjhDZ58ORG2ggSYmUPifL
Tw66MphSgEEZmIGlUxYMezINJ2NGPl87EOhebxnUK/LzTSiHKDICs6bNJiIT1WEZ
cmlNg2hXPxdqLSOH8MR6c/kSkTuO/SAMS4y7LpdkHHGwoRqQi8e9tkjB08OtXFSB
WnbcbUo2vXDQTTHj6ICJr+7+
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org