Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          gztLE7UhN31k5clOvJQG/ZLusdgkN7/SnUrzI3VMhAM=
Subject key identifier:   53:29:C1:CA:6A:B8:3F:D0:EE:AC:47:11:DC:ED:E3:B7:EE:06:39:AF
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       32831FB0D78864A1B0CBE80B7F6B64FBC02CDD77
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 06 Mar 2025 02:31:43 +0000
ROA not before:           Thu 06 Mar 2025 02:26:43 +0000
ROA not after:            Thu 05 Mar 2026 02:31:43 +0000
asID:                     52706
IP address blocks:        2804:c70::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 10:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:83:1f:b0:d7:88:64:a1:b0:cb:e8:0b:7f:6b:64:fb:c0:2c:dd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Mar  6 02:26:43 2025 GMT
            Not After : Mar  5 02:31:43 2026 GMT
        Subject: CN=5329C1CA6AB83FD0EEAC4711DCEDE3B7EE0639AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:a6:aa:82:b8:7c:f9:a7:e9:ed:70:7c:14:
                    d7:b1:3c:15:77:e4:54:30:98:c9:16:56:f3:2e:07:
                    d6:45:46:b5:dc:e2:30:7b:6b:e4:42:33:e1:f3:80:
                    38:16:38:2a:8a:85:b0:e5:e4:bc:11:92:f4:cc:33:
                    c9:b8:58:0f:b0:9c:a4:ad:b3:ce:c4:c1:c4:89:be:
                    ef:43:10:86:03:1e:60:f7:11:b5:da:09:66:a8:56:
                    02:08:35:81:47:ef:9a:de:f5:e3:e6:13:99:74:bf:
                    17:8b:a1:83:15:f7:05:21:83:8c:40:60:4e:07:fa:
                    f5:51:6c:a7:1d:a2:04:cc:22:76:df:cf:c7:52:31:
                    21:d8:e0:e3:a5:a9:08:ea:07:9e:d6:56:67:7e:e0:
                    53:05:6b:9a:7b:56:e5:90:14:1e:b7:06:b1:84:35:
                    fe:b6:10:8e:1c:48:05:f2:6b:f8:45:4d:98:85:bf:
                    9b:d1:a2:1f:b4:b2:17:ec:bc:65:df:c5:3a:10:47:
                    4c:44:4d:7d:67:a0:4e:5a:1a:08:52:a1:1f:3c:bb:
                    53:0e:71:b9:44:e8:1a:1d:43:7c:05:7f:e2:78:b7:
                    ca:68:53:b0:8e:0b:0e:9b:01:95:22:23:26:47:94:
                    74:50:f2:0d:b3:3e:24:71:76:18:17:b4:c6:e6:ad:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:C1:CA:6A:B8:3F:D0:EE:AC:47:11:DC:ED:E3:B7:EE:06:39:AF
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/36

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:e4:7c:ed:ee:bf:b5:7d:84:6a:b8:c8:2b:ba:23:d6:42:
         8e:9c:0c:8e:28:5d:79:41:ca:f4:1d:1a:2a:a0:62:27:26:ef:
         cc:b2:29:c5:76:ed:cb:e4:7e:2d:fe:48:79:f9:66:7d:0d:1b:
         c9:cd:0e:d7:a6:c7:6d:72:4d:28:2e:6a:d1:02:c0:12:65:ea:
         97:bc:6c:be:4d:02:68:b8:9a:cf:7c:b5:19:0c:5a:6d:01:bf:
         6a:40:f4:82:91:58:3e:ed:49:60:d1:86:d9:83:fc:fc:63:a6:
         05:ac:ce:c0:35:90:5d:41:37:21:1d:77:b2:36:73:2f:3c:55:
         45:8b:81:8b:eb:c3:66:52:80:99:21:dc:b4:4d:f3:cd:d4:aa:
         22:44:78:18:85:7b:f4:c0:c0:09:7a:1e:40:f1:26:24:91:d0:
         66:bd:94:a9:6e:cb:fa:e4:72:3d:55:33:9c:ec:ee:30:70:94:
         b3:19:54:a0:a8:f5:89:54:19:c4:73:73:8e:b9:3e:62:fd:2b:
         70:4a:4b:dc:4a:9a:1d:57:1c:94:69:36:ee:dd:2f:96:e5:01:
         a8:6d:63:c2:18:65:63:58:5d:76:57:4d:61:48:d2:f2:7f:84:
         32:01:c7:ab:c0:b6:d1:70:9e:99:91:00:ea:f1:27:e1:3c:c9:
         ce:3f:a0:27
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMoMfsNeIZKGwy+gLf2tk+8As3XcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNTAzMDYwMjI2NDNaFw0yNjAzMDUwMjMxNDNaMDMxMTAvBgNV
BAMTKDUzMjlDMUNBNkFCODNGRDBFRUFDNDcxMURDRURFM0I3RUUwNjM5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwaaqgrh8+afp7XB8FNexPBV3
5FQwmMkWVvMuB9ZFRrXc4jB7a+RCM+HzgDgWOCqKhbDl5LwRkvTMM8m4WA+wnKSt
s87EwcSJvu9DEIYDHmD3EbXaCWaoVgIINYFH75re9ePmE5l0vxeLoYMV9wUhg4xA
YE4H+vVRbKcdogTMInbfz8dSMSHY4OOlqQjqB57WVmd+4FMFa5p7VuWQFB63BrGE
Nf62EI4cSAXya/hFTZiFv5vRoh+0shfsvGXfxToQR0xETX1noE5aGghSoR88u1MO
cblE6BodQ3wFf+J4t8poU7COCw6bAZUiIyZHlHRQ8g2zPiRxdhgXtMbmrcXLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUynBymq4P9DurEcR3O3jt+4GOa8wHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzIzODMwMzQzYTYzMzczMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDM1MzIzNzMw
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQoBAxwADANBgkqhkiG9w0BAQsFAAOCAQEACt7kfO3uv7V9
hGq4yCu6I9ZCjpwMjihdeUHK9B0aKqBiJybvzLIpxXbty+R+Lf5IeflmfQ0byc0O
16bHbXJNKC5q0QLAEmXql7xsvk0CaLiaz3y1GQxabQG/akD0gpFYPu1JYNGG2YP8
/GOmBazOwDWQXUE3IR13sjZzLzxVRYuBi+vDZlKAmSHctE3zzdSqIkR4GIV79MDA
CXoeQPEmJJHQZr2UqW7L+uRyPVUznOzuMHCUsxlUoKj1iVQZxHNzjrk+Yv0rcEpL
3EqaHVcclGk27t0vluUBqG1jwhhlY1hddldNYUjS8n+EMgHHq8C20XCemZEA6vEn
4TzJzj+gJw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:53:01 2025 by rpki-client