Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          dp7Mpb21J6rEvwUiY9VyRywsWvXhXs3XVqg8BDdgJd0=
Subject key identifier:   C3:60:1F:B7:0F:F2:CA:B6:6F:C9:47:E9:1D:15:F7:E7:BC:1E:DE:35
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       0B2935BAB96581D8243E0D4BF278DB1971AA0659
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383a3a2f34382d3438203d3e203532373036.roa
Signing time:             Tue 10 Sep 2024 18:16:55 +0000
ROA not before:           Tue 10 Sep 2024 18:11:55 +0000
ROA not after:            Tue 09 Sep 2025 18:16:55 +0000
asID:                     52706
IP address blocks:        2804:c70:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:29:35:ba:b9:65:81:d8:24:3e:0d:4b:f2:78:db:19:71:aa:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Sep 10 18:11:55 2024 GMT
            Not After : Sep  9 18:16:55 2025 GMT
        Subject: CN=C3601FB70FF2CAB66FC947E91D15F7E7BC1EDE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:8d:1c:17:dd:41:45:d3:f6:f1:10:80:c0:
                    b1:04:da:e4:6f:72:42:ae:c1:1a:1d:50:88:c2:04:
                    a2:05:88:ca:6c:15:71:45:43:68:cb:b4:d2:44:c4:
                    68:44:31:97:df:b4:88:45:ce:6f:3b:45:5c:a4:20:
                    17:62:45:3e:6d:32:3f:83:94:ed:08:95:26:45:d8:
                    e6:31:29:2f:c8:38:e1:85:c0:59:d2:28:e5:5c:3f:
                    83:bf:20:98:f1:3d:91:17:b3:f2:ec:9a:fa:a7:81:
                    91:d6:b4:78:19:ca:ac:7c:b3:04:09:1f:e6:63:40:
                    f9:11:95:07:63:1b:8d:32:5d:0e:f3:1a:ac:ad:5f:
                    5e:70:1b:14:a3:20:74:9e:d4:69:80:50:70:74:b6:
                    e5:3b:57:77:26:c8:dd:74:f1:d3:7a:e0:aa:80:c3:
                    9e:61:36:60:4d:5f:f5:d0:1a:42:a2:de:a1:05:85:
                    30:9c:e2:9e:44:aa:5e:27:6f:57:71:e6:0a:c5:31:
                    83:7f:67:63:72:f5:46:83:b7:ef:25:75:e1:7f:7e:
                    62:88:ab:29:dc:f6:f7:80:6d:35:0b:48:12:65:0a:
                    bc:8e:34:7a:1b:ee:32:2c:7c:74:a0:c4:43:76:bf:
                    68:ff:13:4c:a9:87:db:ff:f3:45:9c:36:62:32:f7:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:60:1F:B7:0F:F2:CA:B6:6F:C9:47:E9:1D:15:F7:E7:BC:1E:DE:35
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:3e:71:9b:c2:92:28:59:98:f5:7a:3a:cd:e3:a7:6a:89:7c:
         8a:8d:ad:c8:0f:47:3c:c4:b9:bd:34:c0:32:5c:19:3f:36:dd:
         eb:0f:90:c7:91:33:e8:48:40:7c:5f:51:5b:e2:8e:c8:68:24:
         0a:8a:e6:58:0b:9c:de:b2:d9:bd:5a:7b:3b:16:e1:23:7e:9a:
         de:54:ce:b2:d1:b6:62:06:00:93:74:f8:66:f3:11:92:da:29:
         69:b6:92:98:dd:3c:7e:76:bd:7f:7d:56:c6:84:1b:a5:f6:19:
         11:6c:a9:b9:32:df:9d:55:3b:c4:57:3f:0e:29:96:d3:2e:c6:
         b0:56:83:bd:4b:8d:a5:53:3a:fb:5f:19:06:b1:d6:4d:96:eb:
         e4:99:6f:46:84:43:84:f3:d0:eb:06:8f:f4:9d:69:2b:6e:79:
         e0:d9:b5:c0:d7:95:3b:1a:82:ff:38:ca:f5:8c:83:40:56:4f:
         c3:ac:f0:2d:df:1c:e8:0f:c7:30:64:df:de:1f:d0:7a:14:91:
         56:fd:fe:09:51:5e:bd:10:a9:07:49:6c:d0:b9:7b:bc:1b:91:
         53:d9:18:07:00:2a:d3:9b:d4:37:6b:4c:e8:8b:7e:b8:dd:d4:
         1f:dc:fa:1d:0a:7d:30:31:bc:2f:1e:88:2f:12:bb:1c:c3:52:
         e6:78:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org