Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          67TMcTCQXqtOYEYEc5I6psNZ5tuIRI9o2tLaCdJfRKc=
Subject key identifier:   34:75:AE:32:2B:B6:02:22:20:69:42:8C:00:9B:0A:AC:70:53:BC:59
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       01DFD9DCB577D3AFD896387ABCCBB7AA8F7EEE6F
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:45 +0000
ROA not before:           Thu 06 Mar 2025 02:26:45 +0000
ROA not after:            Thu 05 Mar 2026 02:31:45 +0000
asID:                     52706
IP address blocks:        2804:c70:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:d9:dc:b5:77:d3:af:d8:96:38:7a:bc:cb:b7:aa:8f:7e:ee:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:45 2025 GMT
            Not After : Mar  5 02:31:45 2026 GMT
        Subject: CN=3475AE322BB602222069428C009B0AAC7053BC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:b7:ff:4d:82:72:d9:30:94:bc:47:c1:1f:
                    76:d5:cc:bb:2e:2b:75:5a:9c:5a:fd:99:2c:90:4f:
                    14:91:83:3c:3a:12:de:fb:d3:8c:aa:e3:5f:3e:fb:
                    ee:48:a1:55:da:88:d3:19:d8:f0:00:4f:cb:aa:e3:
                    e5:40:6d:52:f9:8a:2b:3d:3a:83:f8:06:aa:a1:c4:
                    1d:2d:99:ec:03:a2:70:86:fb:6e:46:71:16:b9:e8:
                    ea:49:e6:3e:ca:08:77:09:fe:86:bd:ef:cf:7b:e9:
                    ff:33:ab:2d:e4:1a:57:d2:c3:a9:c0:9f:c8:54:1d:
                    e4:17:0d:24:87:2d:66:7f:e6:5a:f6:9f:9a:e0:f2:
                    ab:bc:e0:05:c1:8f:5e:a5:bd:84:41:9b:d0:21:f5:
                    80:d8:88:22:10:ca:f2:75:37:c0:58:4c:65:00:5d:
                    22:ec:b0:70:45:6e:c8:f2:e3:75:68:b8:81:6e:3c:
                    22:ce:32:f1:76:2c:89:33:7b:39:77:c0:2a:c7:07:
                    a1:07:b4:33:79:1d:d7:9d:4f:59:55:63:c5:86:ed:
                    c5:02:70:7d:bd:12:fa:a1:e2:d3:12:f3:9e:f1:38:
                    a6:c8:78:1f:41:94:44:40:d2:ba:69:d3:96:65:94:
                    e7:61:ec:9c:c7:b5:ba:44:ff:46:ed:ec:28:8c:b2:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:AE:32:2B:B6:02:22:20:69:42:8C:00:9B:0A:AC:70:53:BC:59
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030363a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:d7:60:f3:1e:11:fb:96:b5:d5:2b:77:f2:ee:14:5f:a5:52:
         d6:a9:88:0c:a3:c9:a6:ba:79:76:49:39:43:64:68:c9:d3:02:
         0e:e5:40:b4:93:5e:55:f0:e0:1a:e1:08:72:d7:1e:dd:42:a8:
         b0:bc:15:34:eb:87:93:66:fc:31:13:c1:1d:5e:1f:c6:2d:03:
         aa:c7:7c:8d:d8:d2:8c:b6:e0:65:4f:0f:bf:54:f1:6a:86:c9:
         4c:79:79:4b:f3:2c:16:b5:cf:15:84:d5:8c:fb:29:a1:08:8d:
         83:04:d4:dd:0f:8b:92:fa:da:88:df:ef:c8:00:bc:6f:81:7f:
         69:97:b8:9e:0e:7a:97:14:4d:89:74:e1:31:4b:94:77:af:b3:
         82:dd:47:0e:b2:2d:32:e8:c4:63:28:bb:de:d1:be:36:5f:1c:
         dc:34:7b:8c:cf:b2:12:8c:a9:c0:fa:af:0e:67:05:6b:97:2a:
         20:0e:93:8c:70:36:ba:e8:4b:55:3c:c4:2f:69:0a:29:60:67:
         11:ae:d2:cb:5a:2a:e9:2b:2e:7e:bb:c3:d9:8c:4d:b0:6c:3a:
         44:36:d8:b6:02:ba:68:c1:f6:0c:ac:4c:8e:fc:88:ae:51:7b:
         c8:e9:1b:15:6b:fa:4c:36:24:a3:a8:92:82:aa:29:70:39:4b:
         1f:ed:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:10:20 2025 by rpki-client