Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          ylNFHcKpA0/Qou0FVu/zaYaxkVLbMPfYP9PX2VyljyA=
Subject key identifier:   94:65:4B:C4:6A:D9:D0:DF:43:A4:01:29:FE:9F:8A:B1:51:82:AD:2B
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       15E456FE97CBFA8AF20EC06A609EC4E60B3046D5
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:32 +0000
ROA not before:           Thu 04 Apr 2024 02:23:32 +0000
ROA not after:            Thu 03 Apr 2025 02:28:32 +0000
asID:                     52706
IP address blocks:        2804:c70:8006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e4:56:fe:97:cb:fa:8a:f2:0e:c0:6a:60:9e:c4:e6:0b:30:46:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:32 2024 GMT
            Not After : Apr  3 02:28:32 2025 GMT
        Subject: CN=94654BC46AD9D0DF43A40129FE9F8AB15182AD2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:3f:31:9d:59:20:41:7b:bf:aa:5c:cb:5b:
                    9b:d1:b4:6b:ce:30:61:13:78:9f:7e:41:d4:3f:f9:
                    65:7a:86:79:bf:91:ec:48:76:8a:14:3a:6f:8a:d6:
                    9a:8d:03:74:b0:6d:06:47:88:f0:d7:af:9c:19:23:
                    e2:aa:1e:7a:f7:3f:55:46:1c:63:bb:2d:f7:62:8a:
                    09:31:2b:5c:07:dc:08:5c:82:22:31:d8:85:fe:40:
                    cf:2c:bf:11:25:eb:9f:eb:6e:49:36:67:e1:49:d5:
                    56:51:00:f3:5d:62:0d:8e:b6:48:8b:62:4a:b0:f1:
                    9e:58:21:ae:67:98:30:d3:88:3a:12:a1:0c:ad:a4:
                    e8:48:56:18:0f:0b:e0:a6:58:c2:39:d3:a9:d5:be:
                    c8:50:58:42:2b:96:a2:ab:23:41:00:07:86:a1:92:
                    16:be:70:a7:13:92:a9:7d:f1:4e:e6:a0:09:30:9b:
                    01:18:90:39:8a:1a:71:04:30:46:02:6b:24:64:3a:
                    d3:b4:9b:e7:a1:cb:29:75:e7:08:34:bd:a8:41:e2:
                    4a:3c:d8:65:44:8f:ee:1a:0c:5e:da:55:6c:15:0a:
                    2f:7b:67:3c:52:03:7a:60:ad:26:32:01:81:db:1b:
                    24:c3:5b:dc:cc:12:01:e0:52:fa:24:14:9e:b4:c6:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:65:4B:C4:6A:D9:D0:DF:43:A4:01:29:FE:9F:8A:B1:51:82:AD:2B
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:63:fb:db:fd:1d:ef:8e:8c:a2:ed:82:79:00:25:91:84:1e:
         5a:d9:1f:3e:33:c9:b0:87:ee:83:89:27:05:d6:c5:ed:00:a6:
         b2:a4:7b:ff:26:19:e6:33:98:b5:90:2e:81:07:cf:c9:0b:67:
         58:61:ee:44:eb:19:2b:f3:91:e2:85:46:70:e4:85:74:21:dc:
         67:ef:5a:14:6f:1d:da:42:3c:58:20:64:7c:5d:a4:c5:44:41:
         2b:eb:7e:5b:e7:d9:b2:08:dc:67:d0:0f:47:8e:24:98:4a:32:
         7f:1f:86:3b:f8:0e:c6:57:cf:f8:03:35:40:f4:e6:2f:20:de:
         a6:6e:e5:79:db:c7:e1:69:27:cd:d0:94:44:3c:6f:a4:b6:e0:
         76:84:1b:72:61:81:0f:49:ab:0b:46:d7:8c:c8:ac:47:21:cc:
         09:33:47:e8:57:fd:9f:ab:2a:9f:ca:64:2d:af:9b:ca:d4:44:
         ca:3f:0f:dc:48:7f:a3:2e:a3:88:d8:49:10:64:43:09:95:a9:
         5b:ab:25:16:df:84:98:7a:81:ba:ce:41:c9:f0:fe:d2:fd:72:
         3e:81:d1:cb:05:31:e5:4e:5c:a2:6d:90:75:23:45:9f:8d:01:
         eb:bf:42:a6:40:10:65:eb:cf:0b:3f:ee:86:6c:fa:2e:14:fa:
         c7:a9:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org