Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          e89c8je5fqzWp2ETsM9Qc5cGgxDO+vDhul3gKW1OymE=
Subject key identifier:   31:90:8E:95:9F:05:80:B1:2F:71:0F:36:27:30:79:B8:17:7E:1C:D5
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       01BDC378E1776DB6ABCEED5387BC4BB3E617A5FF
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:30 +0000
ROA not before:           Thu 04 Apr 2024 02:23:30 +0000
ROA not after:            Thu 03 Apr 2025 02:28:30 +0000
asID:                     52706
IP address blocks:        2804:c70:8005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bd:c3:78:e1:77:6d:b6:ab:ce:ed:53:87:bc:4b:b3:e6:17:a5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:30 2024 GMT
            Not After : Apr  3 02:28:30 2025 GMT
        Subject: CN=31908E959F0580B12F710F36273079B8177E1CD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:b2:d6:ff:bd:65:2d:57:cb:3e:fc:c9:92:
                    63:63:9a:19:49:a0:5b:7c:bc:22:ca:88:47:b1:4c:
                    38:d4:cd:6f:a0:8c:01:e0:ef:1a:c2:e8:10:39:da:
                    38:c8:52:d8:d2:3c:a9:35:6e:8d:4b:bb:3c:b0:dd:
                    94:0d:1d:dd:55:43:82:67:20:4a:c4:5a:75:46:9b:
                    5d:21:b9:5e:72:d0:ca:37:85:ba:52:ef:38:69:cc:
                    1b:78:94:94:97:b7:e0:a4:e4:9e:3a:bf:53:6a:19:
                    2f:4d:aa:6b:eb:23:91:ab:ff:60:65:b3:5f:e8:2e:
                    c2:08:dc:24:e5:ab:fa:99:7e:0f:5d:bd:bc:01:93:
                    ea:e1:ee:4d:7b:74:78:88:9d:1d:80:71:5d:29:c6:
                    a6:d4:63:7f:c0:93:bd:0b:dd:d2:ae:54:90:ff:2e:
                    6d:d9:8a:ee:cf:32:86:69:4d:13:ad:d5:08:98:0e:
                    d8:b2:db:f9:96:b8:49:ec:db:97:4c:da:33:31:33:
                    0f:17:6e:1e:72:43:c1:22:f3:7f:54:5a:b0:24:22:
                    8b:a9:e5:1b:84:95:12:50:94:fb:fa:60:25:38:47:
                    5f:69:ab:1e:3f:fa:e4:5c:15:60:ba:8b:dc:12:cf:
                    5c:07:84:d6:47:24:2e:bf:b5:93:8c:40:cd:6f:ef:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:90:8E:95:9F:05:80:B1:2F:71:0F:36:27:30:79:B8:17:7E:1C:D5
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:44:94:64:1f:da:23:4c:fa:27:98:1f:e1:3f:50:2a:8e:31:
         96:76:09:71:3a:da:0a:26:2e:87:40:ad:89:0e:6a:47:5c:fb:
         89:93:cf:d0:31:c4:e3:a1:1d:2d:ea:04:8c:91:86:45:a4:bf:
         40:28:4e:00:7e:24:98:ca:09:29:b7:20:b7:4d:13:73:ba:62:
         33:c0:97:77:64:70:0c:09:5e:5f:b2:ff:12:82:ef:92:6c:18:
         3e:1b:d7:b8:eb:b7:1f:29:28:6c:e1:c1:de:39:5d:84:9e:86:
         24:08:ea:4c:b4:57:6e:8d:cb:d0:96:37:83:4b:2b:56:37:b1:
         b2:64:fd:04:15:45:91:76:70:e3:7d:79:d8:fd:dd:d3:e4:6f:
         b5:88:5c:2a:fe:9d:bf:9c:ad:97:e7:27:53:7c:f6:08:9a:2a:
         78:5c:d2:b6:2b:77:10:bb:60:5c:24:a4:c3:22:a7:90:6f:03:
         34:f0:0b:75:0d:88:5a:ac:cb:50:60:fb:f8:d4:9f:55:32:05:
         0a:79:ac:e0:0d:45:a3:19:4d:c2:5f:cb:56:f2:99:fb:92:c0:
         bf:27:eb:ba:1d:eb:04:8d:cb:a6:38:bb:4c:4b:7c:8a:44:ec:
         c4:bc:a2:4a:4f:fd:4f:36:e2:35:3e:2a:8c:a2:29:e0:06:eb:
         18:cc:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:36 2024 by rpki-client on console-fra.rpki-client.org